rpms/perl-Date-Manip
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Date manipulation routines
7 Commits 7 Branches 9 Tags 141 KiB
Shell 100%
b027af3b64
Go to file
RHEL Packaging Agent b027af3b64 Fix CVE-2026-60075: prevent ReDoS in perl-Date-Manip date/time parsing 
Backport the upstream CVE-2026-60075 fix from CPANSec to
perl-Date-Manip 6.60. The patch adds a $MAXLENGTH=256 constant
and length checks at the entry points of parse() and
parse_time() in lib/Date/Manip/Date.pm, rejecting overly long
input strings before any regex processing. This prevents a
Regular Expression Denial of Service (ReDoS) caused by crafted
strings with long interior whitespace runs that trigger
quadratic backtracking in the unanchored time-matching regex.

CVE: CVE-2026-60075
Upstream patches:
 - https://security.metacpan.org/patches/D/Date-Manip/6.99/CVE-2026-60075-r1.patch
Resolves: RHEL-239807

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-13 13:57:56 +00:00
.fmf Resolves: rhbz#2219504 - Replace versioned MODULE_COMPAT by non-versioned perl-libs 2023-07-27 14:42:59 +02:00
plans Resolves: rhbz#2219504 - Replace versioned MODULE_COMPAT by non-versioned perl-libs 2023-07-27 14:42:59 +02:00
tests Resolves: rhbz#2219504 - Update tests tags 2023-08-08 10:38:35 +02:00
.gitignore Import rpm: c8s 2023-02-27 14:47:23 -05:00
gating.yaml Resolves: rhbz#2219504 - Replace versioned MODULE_COMPAT by non-versioned perl-libs 2023-07-27 14:42:59 +02:00
perl-Date-Manip-6.60-CVE-2026-60075.patch Fix CVE-2026-60075: prevent ReDoS in perl-Date-Manip date/time parsing 2026-08-13 13:57:56 +00:00
perl-Date-Manip.spec Fix CVE-2026-60075: prevent ReDoS in perl-Date-Manip date/time parsing 2026-08-13 13:57:56 +00:00
sources Auto sync2gitlab import of perl-Date-Manip-6.60-2.el8.src.rpm 2022-05-26 12:53:31 -04:00