!13 [sync] PR-12: Fix CVE-2023-4759

From: @openeuler-sync-bot 
Reviewed-by: @cherry530 
Signed-off-by: @cherry530
This commit is contained in:
openeuler-ci-bot 2025-02-18 01:20:40 +00:00 committed by Gitee
commit 557655a093
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
2 changed files with 1703 additions and 1 deletions

1697
CVE-2023-4759.patch Normal file

File diff suppressed because it is too large Load Diff

View File

@ -1,13 +1,14 @@
%global gittag 5.11.0.202103091610-r %global gittag 5.11.0.202103091610-r
Name: eclipse-jgit Name: eclipse-jgit
Version: 5.11.0 Version: 5.11.0
Release: 1 Release: 2
Summary: Eclipse JGit Summary: Eclipse JGit
License: BSD License: BSD
URL: https://www.eclipse.org/jgit/ URL: https://www.eclipse.org/jgit/
Source0: https://git.eclipse.org/c/jgit/jgit.git/snapshot/jgit-%{gittag}.tar.xz Source0: https://git.eclipse.org/c/jgit/jgit.git/snapshot/jgit-%{gittag}.tar.xz
Patch0: 0001-Ensure-the-correct-classpath-is-set-for-the-jgit-com.patch Patch0: 0001-Ensure-the-correct-classpath-is-set-for-the-jgit-com.patch
Patch1: 0002-Don-t-embed-versions-of-third-party-libs-use-feature.patch Patch1: 0002-Don-t-embed-versions-of-third-party-libs-use-feature.patch
Patch2: CVE-2023-4759.patch
BuildArch: noarch BuildArch: noarch
ExcludeArch: s390 %{arm} %{ix86} ExcludeArch: s390 %{arm} %{ix86}
BuildRequires: tycho jgit = %{version} BuildRequires: tycho jgit = %{version}
@ -19,6 +20,7 @@ A pure Java implementation of the Git version control system.
%setup -n jgit-%{gittag} -q %setup -n jgit-%{gittag} -q
%patch0 -p1 %patch0 -p1
%patch1 -p1 %patch1 -p1
%patch2 -p1
rm .mvn/maven.config rm .mvn/maven.config
for p in $(find org.eclipse.jgit.packaging -name pom.xml) ; do for p in $(find org.eclipse.jgit.packaging -name pom.xml) ; do
grep -q dependencies $p && %pom_xpath_remove "pom:dependencies" $p grep -q dependencies $p && %pom_xpath_remove "pom:dependencies" $p
@ -48,6 +50,9 @@ popd
%doc README.md %doc README.md
%changelog %changelog
* Mon Feb 17 2025 wangkai <13474090681@163.com> - 5.11.0-2
- Fix CVE-2023-4759
* Sat Nov 26 2022 yaoxin <yaoxin30@h-partners.com> - 5.11.0-1 * Sat Nov 26 2022 yaoxin <yaoxin30@h-partners.com> - 5.11.0-1
- Update to 5.11.0 - Update to 5.11.0