packages/curl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Patch optimization for CVE-2023-27536

Browse Source 
(cherry picked from commit e536c225628e8d32f928c74492894b02fb183df0)
This commit is contained in:
xingwei 2023-04-11 01:50:54 +00:00 committed by openeuler-sync-bot
parent 1720bb87b2
commit 1f4ae73b6d
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
backport-CVE-2023-27536.patch
View File

@ -42,7 +42,7 @@ index aca0f39..8f823c4 100644
const struct Curl_handler *given; /* The protocol first given */ const struct Curl_handler *given; /* The protocol first given */
long ip_version; /* copied from the Curl_easy at creation time */ long ip_version; /* copied from the Curl_easy at creation time */
+ unsigned char gssapi_delegation; /* inherited from set.gssapi_delegation */ + long gssapi_delegation; /* inherited from set.gssapi_delegation */
/* Protocols can use a custom keepalive mechanism to keep connections alive. /* Protocols can use a custom keepalive mechanism to keep connections alive.
This allows those protocols to track the last time the keepalive mechanism This allows those protocols to track the last time the keepalive mechanism

8
curl.spec
View File

@ -6,7 +6,7 @@
Name: curl Name: curl
Version: 7.71.1 Version: 7.71.1
Release: 24 Release: 25
Summary: Curl is used in command lines or scripts to transfer data Summary: Curl is used in command lines or scripts to transfer data
License: MIT License: MIT
URL: https://curl.haxx.se/ URL: https://curl.haxx.se/
@ -223,6 +223,12 @@ rm -rf ${RPM_BUILD_ROOT}%{_libdir}/libcurl.la
%{_mandir}/man3/* %{_mandir}/man3/*
%changelog %changelog
* Tue Apr 11 2023 xingwei <xingwei14@h-partners.com> - 7.71.1-25
- Type:cves
- CVE:CVE-2023-27536
- SUG:NA
- DESC:Patch optimization for CVE-2023-27536
* Mon Mar 27 2023 xingwei <xingwei14@h-partners.com> - 7.71.1-24 * Mon Mar 27 2023 xingwei <xingwei14@h-partners.com> - 7.71.1-24
- Type:cves - Type:cves
- CVE:CVE-2023-27535 - CVE:CVE-2023-27535