diff --git a/huawei-add-autogen.sh-for-fuzz-compile.patch b/huawei-add-autogen.sh-for-fuzz-compile.patch new file mode 100644 index 0000000000000000000000000000000000000000..58a7b6c28857d45d274ce659ac404b27b3aa9758 --- /dev/null +++ b/huawei-add-autogen.sh-for-fuzz-compile.patch @@ -0,0 +1,96 @@ +From 732d799ff0ce3ad15ddb7b6d2fb6ad6706d2d9fc Mon Sep 17 00:00:00 2001 +From: jinsaihang +Date: Wed, 23 Jul 2025 11:18:43 +0800 +Subject: [PATCH] add autogen.sh for fuzz compile + +--- + autogen.sh | 77 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ + 1 file changed, 77 insertions(+) + create mode 100644 autogen.sh + +diff --git a/autogen.sh b/autogen.sh +new file mode 100644 +index 0000000..9c1c466 +--- /dev/null ++++ b/autogen.sh +@@ -0,0 +1,77 @@ ++#!/bin/sh ++# Run this to generate all the initial makefiles, etc. ++ ++srcdir=`dirname $0` ++test -z "$srcdir" && srcdir=. ++ ++THEDIR=`pwd` ++cd $srcdir ++DIE=0 ++ ++(autoconf --version) < /dev/null > /dev/null 2>&1 || { ++ echo ++ echo "You must have autoconf installed to compile libxslt." ++ echo "Download the appropriate package for your distribution," ++ echo "or see http://www.gnu.org/software/autoconf" ++ DIE=1 ++} ++ ++(libtoolize --version) < /dev/null > /dev/null 2>&1 || ++(glibtoolize --version) < /dev/null > /dev/null 2>&1 || { ++ echo ++ echo "You must have libtool installed to compile libxslt." ++ echo "Download the appropriate package for your distribution," ++ echo "or see http://www.gnu.org/software/libtool" ++ DIE=1 ++} ++ ++(automake --version) < /dev/null > /dev/null 2>&1 || { ++ echo ++ DIE=1 ++ echo "You must have automake installed to compile libxslt." ++ echo "Download the appropriate package for your distribution," ++ echo "or see http://www.gnu.org/software/automake" ++} ++ ++if test "$DIE" -eq 1; then ++ exit 1 ++fi ++ ++test -f libxslt/xslt.h || { ++ echo "You must run this script in the top-level libxslt directory" ++ exit 1 ++} ++ ++if test -z "$NOCONFIGURE" && test -z "$*"; then ++ echo "I am going to run $srcdir/configure with no arguments - if you wish " ++ echo "to pass any to it, please specify them on the $0 command line." ++fi ++ ++autoreconf -if -Wall ++ ++cd $THEDIR ++ ++if test x$OBJ_DIR != x; then ++ mkdir -p "$OBJ_DIR" ++ cd "$OBJ_DIR" ++fi ++ ++EXTRA_ARGS= ++if test "x$1" = "x--system"; then ++ shift ++ prefix=/usr ++ libdir=$prefix/lib ++ sysconfdir=/etc ++ localstatedir=/var ++ if [ -d /usr/lib64 ]; then ++ libdir=$prefix/lib64 ++ fi ++ EXTRA_ARGS="--prefix=$prefix --sysconfdir=$sysconfdir --localstatedir=$localstatedir --libdir=$libdir" ++fi ++ ++if test -z "$NOCONFIGURE"; then ++ echo "Running configure $EXTRA_ARGS $*" ... ++ $srcdir/configure $EXTRA_ARGS "$@" ++ echo ++ echo "Now type 'make' to compile libxslt." ++fi +-- +2.43.0 + diff --git a/libxslt.spec b/libxslt.spec index b0f7e938a83c5abcb8b69eac7b3f165e758d7e6b..c5c38a56eff8e94a153f4ecb13d5ca939ac326fc 100644 --- a/libxslt.spec +++ b/libxslt.spec @@ -1,6 +1,6 @@ Name: libxslt Version: 1.1.39 -Release: 3 +Release: 4 Summary: XSLT Transformation Library License: MIT URL: https://gitlab.gnome.org/GNOME/libxslt @@ -10,6 +10,8 @@ Patch0: CVE-2015-9019.patch Patch1: CVE-2024-55549.patch Patch2: CVE-2025-24855.patch +Patch9001:huawei-add-autogen.sh-for-fuzz-compile.patch + BuildRequires: gcc make libtool autoconf automake libgcrypt-devel pkgconfig(libxml-2.0) >= 2.6.27 %description @@ -102,6 +104,9 @@ pushd $RPM_BUILD_ROOT/%{_includedir}/%{name}; touch -m --reference=xslt.h ../../ %exclude %{_docdir}/../licenses/libxslt/Copyright %changelog +* Mon Jul 28 2025 jinsaihang - 1.1.39-4 +- add autogen.sh for fuzz compile + * Thu Mar 13 2025 Funda Wang - 1.1.39-3 - fix CVE-2024-55549 CVE-2025-24855