sysbench address CVE 2019 19391 (#9341)
Co-authored-by: Nicolas Guibourge <nicolasg@microsoft.com>
This commit is contained in:
Родитель
de215c67c4
Коммит
598fb367b1
|
@ -0,0 +1,15 @@
|
|||
backport of original fix (c017b2bafc24f71620de7225c5fdcd4a71ff2593)
|
||||
|
||||
diff -ru sysbench-1.0.20-orig/third_party/luajit/luajit/src/lj_debug.c sysbench-1.0.20/third_party/luajit/luajit/src/lj_debug.c
|
||||
--- sysbench-1.0.20-orig/third_party/luajit/luajit/src/lj_debug.c 2024-06-06 18:48:05.167574363 +0000
|
||||
+++ sysbench-1.0.20/third_party/luajit/luajit/src/lj_debug.c 2024-06-06 20:09:52.372314544 +0000
|
||||
@@ -429,7 +429,8 @@
|
||||
GCfunc *fn;
|
||||
if (*what == '>') {
|
||||
TValue *func = L->top - 1;
|
||||
- api_check(L, tvisfunc(func));
|
||||
+ if (!tvisfunc(func))
|
||||
+ return 0;
|
||||
fn = funcV(func);
|
||||
L->top--;
|
||||
what++;
|
|
@ -1,12 +1,13 @@
|
|||
Summary: Scriptable database and system performance benchmark
|
||||
Name: sysbench
|
||||
Version: 1.0.20
|
||||
Release: 2%{?dist}
|
||||
Release: 3%{?dist}
|
||||
License: GPLv2+
|
||||
Group: Applications/System
|
||||
URL: https://github.com/akopytov/sysbench/
|
||||
Source0: https://github.com/akopytov/%{name}/archive/%{version}/%{name}-%{version}.tar.gz
|
||||
Patch0: enable-python3.patch
|
||||
Patch1: CVE-2019-19391.patch
|
||||
BuildRequires: automake
|
||||
BuildRequires: libaio-devel
|
||||
BuildRequires: libtool
|
||||
|
@ -59,6 +60,9 @@ rm -f %{buildroot}%{_docdir}/sysbench/manual.html
|
|||
%{_datadir}/%{name}
|
||||
|
||||
%changelog
|
||||
* Thu Jun 06 2024 Nicolas Guibourge <nicolasg@microsoft.com> - 1.0.20-3
|
||||
- Address CVE-2019-19391.
|
||||
|
||||
* Wed Jul 27 2022 Sean Dougherty <sdougherty@microsoft.com> - 1.0.20-2
|
||||
- Added patch 'enable-python3' to fix issue with running tests on Python3.
|
||||
|
||||
|
|
Загрузка…
Ссылка в новой задаче