已开启
fix(cve): 修复 CVE-2026-100792 在 mozjs140 中的漏洞 #18
infra_team创建于 23 天前
fix(cve): 修复 CVE-2026-100792 在 mozjs140 中的漏洞 #18
已开启
共 2 个文件变更+15-4
| @@ -1,3 +1,3 @@ | |||
| 1 | version https://git-lfs.github.com/spec/v1 | 1 | version https://git-lfs.github.com/spec/v1 |
| 2 | -oid sha256:358bb03c550f95172f1e31694e4287da3411560df91e931cb25210efdf90e524 | 2 | +oid sha256:4d6ed3b18b2069c55bab12d8ba95da6013ac0b036d8a031df8b9f39a25d05c33 |
| 3 | -size 640054332 | 3 | +size 637640276 |
| @@ -19,14 +19,20 @@ | |||
| 19 | %global _lto_cflags %{nil} | 19 | %global _lto_cflags %{nil} |
| 20 | %endif | 20 | %endif |
| 21 | 21 | ||
| 22 | +# Cap build parallelism: compiling SpiderMonkey's unified jit/wasm | ||
| 23 | +# translation units (clang++ with debug info + thin LTO) needs several GB | ||
| 24 | +# of RAM per job, so the default -j64 OOM-kills 16GB builders | ||
| 25 | +# (job_state=oom, oom_kill during js/src/wasm and js/src/jit compilation). | ||
| 26 | +%global _smp_mflags -j2 | ||
| 27 | + | ||
| 22 | # Big endian platforms | 28 | # Big endian platforms |
| 23 | %ifarch ppc ppc64 s390 s390x | 29 | %ifarch ppc ppc64 s390 s390x |
| 24 | %global big_endian 1 | 30 | %global big_endian 1 |
| 25 | %endif | 31 | %endif |
| 26 | 32 | ||
| 27 | Name: mozjs%{major} | 33 | Name: mozjs%{major} |
| 28 | -Version: 140.15.0 | 34 | +Version: 140.17.0 |
| 29 | -Release: 1 | 35 | +Release: 2 |
| 30 | Summary: SpiderMonkey JavaScript library | 36 | Summary: SpiderMonkey JavaScript library |
| 31 | 37 | ||
| 32 | License: MPL-2.0 AND Apache-2.0 AND BSD-3-Clause AND BSD-2-Clause AND MIT AND GPL-3.0-or-later | 38 | License: MPL-2.0 AND Apache-2.0 AND BSD-3-Clause AND BSD-2-Clause AND MIT AND GPL-3.0-or-later |
| @@ -240,6 +246,11 @@ chmod -x %{buildroot}%{_includedir}/mozjs-%{major}/js-config.h | |||
| 240 | %{_includedir}/mozjs-%{major}/ | 246 | %{_includedir}/mozjs-%{major}/ |
| 241 | 247 | ||
| 242 | %changelog | 248 | %changelog |
| 249 | +* Wed Sep 30 2026 infra_team <zhaiwenjie1@huawei.com> - 140.17.0-2 | ||
| 250 | +- fix CVE: CVE-2026-100792 | ||
| 251 | +- upgrade to 140.17.0 to fix CVE-2026-100792 (JavaScript: WebAssembly JIT miscompilation, mfsa2026-97) | ||
| 252 | +- cap %%_smp_mflags to -j2 to avoid OOM on 16GB CI builders | ||
| 253 | + | ||
| 243 | * Tue Sep 01 2026 Funda Wang <fundawang@yeah.net> - 140.15.0-1 | 254 | * Tue Sep 01 2026 Funda Wang <fundawang@yeah.net> - 140.15.0-1 |
| 244 | - update to 140.15.0 | 255 | - update to 140.15.0 |
| 245 | 256 | ||