packages/curl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

!123 [sync] PR-122: fix CVE-2022-32207 better

Browse Source 
From: @openeuler-sync-bot 
Reviewed-by: @zengwefeng 
Signed-off-by: @zengwefeng
This commit is contained in:
openeuler-ci-bot 2022-07-07 02:43:46 +00:00 committed by Gitee
commit 667d03d7d8
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
2 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
backport-CVE-2022-32207.patch
View File

@ -140,7 +140,7 @@ new file mode 100644
index 0000000..92dc31d index 0000000..92dc31d
--- /dev/null --- /dev/null
+++ b/lib/fopen.c +++ b/lib/fopen.c
@@ -0,0 +1,106 @@ @@ -0,0 +1,105 @@
+/*************************************************************************** +/***************************************************************************
+ * _ _ ____ _ + * _ _ ____ _
+ * Project ___| | | | _ \| | + * Project ___| | | | _ \| |
@ -165,8 +165,7 @@ index 0000000..92dc31d
+ +
+#include "curl_setup.h" +#include "curl_setup.h"
+ +
+#if !defined(CURL_DISABLE_COOKIES) && !defined(CURL_DISABLE_ALTSVC) && \ +#if !defined(CURL_DISABLE_COOKIES) || defined(USE_ALTSVC)
+ !defined(CURL_DISABLE_HSTS)
+ +
+#ifdef HAVE_FCNTL_H +#ifdef HAVE_FCNTL_H
+#include <fcntl.h> +#include <fcntl.h>

8
curl.spec
View File

@ -6,7 +6,7 @@
Name: curl Name: curl
Version: 7.71.1 Version: 7.71.1
Release: 15 Release: 16
Summary: Curl is used in command lines or scripts to transfer data Summary: Curl is used in command lines or scripts to transfer data
License: MIT License: MIT
URL: https://curl.haxx.se/ URL: https://curl.haxx.se/
@ -187,6 +187,12 @@ rm -rf ${RPM_BUILD_ROOT}%{_libdir}/libcurl.la
%{_mandir}/man3/* %{_mandir}/man3/*
%changelog %changelog
* Tue Jul 05 2022 gaihuiying <eaglegai@163.com> - 7.71.1-16
- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better
* Wed Jun 29 2022 gaihuiying <eaglegai@163.com> - 7.71.1-15 * Wed Jun 29 2022 gaihuiying <eaglegai@163.com> - 7.71.1-15
- Type:cves - Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208 - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208