diff --git a/.gitignore b/.gitignore index bffe42d..3036d76 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/Digest-1.17.tar.gz +Digest-1.20.tar.gz diff --git a/.perl-Digest.metadata b/.perl-Digest.metadata deleted file mode 100644 index 844d802..0000000 --- a/.perl-Digest.metadata +++ /dev/null @@ -1 +0,0 @@ -7f06ec78496a8a865313be75d1905d73ced602e9 SOURCES/Digest-1.17.tar.gz diff --git a/SOURCES/Digest-0.17-CVE-2016-1238-prevent-loading-optional-modules-from-.patch b/SOURCES/Digest-0.17-CVE-2016-1238-prevent-loading-optional-modules-from-.patch deleted file mode 100644 index 5552a4b..0000000 --- a/SOURCES/Digest-0.17-CVE-2016-1238-prevent-loading-optional-modules-from-.patch +++ /dev/null @@ -1,41 +0,0 @@ -From 8cfc4916736280dd76655fdef5b78331bfac414d Mon Sep 17 00:00:00 2001 -From: Tony Cook -Date: Wed, 27 Jul 2016 14:04:59 +1000 -Subject: [PATCH] CVE-2016-1238: prevent loading optional modules from default - . - -Digest attempts to load Digest::SHA, only failing if Digest::SHA2 -is also unavailable. - -If a system has Digest installed, but not Digest::SHA, and a user -attempts to run a program using Digest with SHA-256 from a world -writable directory such as /tmp and since perl adds "." to the end -of @INC an attacker can run code as the original user by creating -/tmp/Digest/SHA.pm. - -The change temporarily removes the default "." entry from the end of -@INC preventing that attack. ---- - Digest.pm | 6 +++++- - 1 file changed, 5 insertions(+), 1 deletion(-) - -diff --git a/Digest.pm b/Digest.pm -index 2ae6eec..c75649f 100644 ---- a/Digest.pm -+++ b/Digest.pm -@@ -42,7 +42,11 @@ sub new - unless (exists ${"$class\::"}{"VERSION"}) { - my $pm_file = $class . ".pm"; - $pm_file =~ s{::}{/}g; -- eval { require $pm_file }; -+ eval { -+ local @INC = @INC; -+ pop @INC if $INC[-1] eq '.'; -+ require $pm_file; -+ }; - if ($@) { - $err ||= $@; - next; --- -2.1.4 - diff --git a/SPECS/perl-Digest.spec b/SPECS/perl-Digest.spec deleted file mode 100644 index aa7021a..0000000 --- a/SPECS/perl-Digest.spec +++ /dev/null @@ -1,129 +0,0 @@ -Name: perl-Digest -Version: 1.17 -Release: 396%{?dist} -Summary: Modules that calculate message digests -License: GPL+ or Artistic -Group: Development/Libraries -URL: http://search.cpan.org/dist/Digest/ -Source0: http://www.cpan.org/authors/id/G/GA/GAAS/Digest-%{version}.tar.gz -# Avoid loading optional modules from default . (CVE-2016-1238) -Patch0: Digest-0.17-CVE-2016-1238-prevent-loading-optional-modules-from-.patch -BuildArch: noarch -BuildRequires: coreutils -BuildRequires: findutils -BuildRequires: make -BuildRequires: perl-interpreter -BuildRequires: perl-generators -BuildRequires: perl(Carp) -BuildRequires: perl(Exporter) -BuildRequires: perl(ExtUtils::MakeMaker) -BuildRequires: perl(MIME::Base64) -# Tests only: -BuildRequires: perl(lib) -BuildRequires: perl(Test::More) >= 0.47 -Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) -Requires: perl(MIME::Base64) - -%description -The Digest:: modules calculate digests, also called "fingerprints" or -"hashes", of some data, called a message. The digest is (usually) -some small/fixed size string. The actual size of the digest depend of -the algorithm used. The message is simply a sequence of arbitrary -bytes or bits. - -%prep -%setup -q -n Digest-%{version} -%patch0 -p1 -chmod -x digest-bench - -%build -%{__perl} Makefile.PL INSTALLDIRS=vendor -make %{?_smp_mflags} - -%install -make pure_install PERL_INSTALL_ROOT=$RPM_BUILD_ROOT -find $RPM_BUILD_ROOT -type f -name .packlist -exec rm -f {} \; -find $RPM_BUILD_ROOT -depth -type d -exec rmdir {} 2>/dev/null \; -%{_fixperms} $RPM_BUILD_ROOT/* - -%check -make test - -%files -%doc Changes digest-bench README -%{perl_vendorlib}/* -%{_mandir}/man3/* - -%changelog -* Fri Mar 29 2019 Jitka Plesnikova - 1.17-396 -- Rebuild with enable hardening (bug #1636329) - -* Thu Feb 08 2018 Fedora Release Engineering - 1.17-395 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - -* Thu Jul 27 2017 Fedora Release Engineering - 1.17-394 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - -* Sat Jun 03 2017 Jitka Plesnikova - 1.17-393 -- Perl 5.26 rebuild - -* Sat Feb 11 2017 Fedora Release Engineering - 1.17-367 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - -* Tue Aug 02 2016 Jitka Plesnikova - 1.17-366 -- Avoid loading optional modules from default . (CVE-2016-1238) - -* Sat May 14 2016 Jitka Plesnikova - 1.17-365 -- Increase release to favour standalone package - -* Thu Feb 04 2016 Fedora Release Engineering - 1.17-347 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - -* Thu Jun 18 2015 Fedora Release Engineering - 1.17-346 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - -* Thu Jun 04 2015 Jitka Plesnikova - 1.17-345 -- Increase release to favour standalone package - -* Wed Jun 03 2015 Jitka Plesnikova - 1.17-311 -- Perl 5.22 rebuild - -* Wed Sep 03 2014 Jitka Plesnikova - 1.17-310 -- Increase release to favour standalone package - -* Tue Aug 26 2014 Jitka Plesnikova - 1.17-293 -- Perl 5.20 rebuild - -* Sat Jun 07 2014 Fedora Release Engineering - 1.17-292 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - -* Sat Aug 03 2013 Fedora Release Engineering - 1.17-291 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - -* Mon Jul 15 2013 Petr Pisar - 1.17-290 -- Increase release to favour standalone package - -* Fri Jul 12 2013 Petr Pisar - 1.17-245 -- Perl 5.18 rebuild - -* Fri May 03 2013 Petr Pisar - 1.17-244 -- Increase release number to supersede perl sub-package (bug #957931) - -* Thu Feb 14 2013 Fedora Release Engineering - 1.17-241 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - -* Mon Aug 13 2012 Marcela Mašláňová - 1.17-240 -- bump release to override sub-package from perl.spec - -* Fri Jul 20 2012 Fedora Release Engineering - 1.17-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - -* Wed Jun 06 2012 Petr Pisar - 1.17-3 -- Perl 5.16 rebuild - -* Fri Jan 13 2012 Fedora Release Engineering - 1.17-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - -* Tue Oct 04 2011 Petr Pisar 1.17-1 -- Specfile autogenerated by cpanspec 1.78. -- Remove BuildRoot and defattr from spec code. diff --git a/perl-Digest.spec b/perl-Digest.spec new file mode 100644 index 0000000..26ade29 --- /dev/null +++ b/perl-Digest.spec @@ -0,0 +1,228 @@ +Name: perl-Digest +Version: 1.20 +Release: 511%{?dist} +Summary: Modules that calculate message digests +License: GPL-1.0-or-later OR Artistic-1.0-Perl +URL: https://metacpan.org/release/Digest +Source0: https://cpan.metacpan.org/authors/id/T/TO/TODDR/Digest-%{version}.tar.gz +BuildArch: noarch +BuildRequires: coreutils +BuildRequires: make +BuildRequires: perl-generators +BuildRequires: perl-interpreter +BuildRequires: perl(:VERSION) >= 5.6 +BuildRequires: perl(Config) +BuildRequires: perl(ExtUtils::MakeMaker) >= 6.76 +BuildRequires: perl(strict) +BuildRequires: perl(warnings) +# Run-time: +BuildRequires: perl(Carp) +BuildRequires: perl(Exporter) +BuildRequires: perl(MIME::Base64) +# Tests only: +BuildRequires: perl(File::Temp) +BuildRequires: perl(lib) +BuildRequires: perl(Test::More) >= 0.47 +Requires: perl(MIME::Base64) + +# Filter modules bundled for tests +%global __provides_exclude_from %{?__provides_exclude_from:%__provides_exclude_from|}^%{_libexecdir} + +%description +The Digest:: modules calculate digests, also called "fingerprints" or +"hashes", of some data, called a message. The digest is (usually) some +small/fixed size string. The actual size of the digest depends of the +algorithm used. The message is simply a sequence of arbitrary bytes or bits. + +%package tests +Summary: Tests for %{name} +Requires: %{name} = %{?epoch:%{epoch}:}%{version}-%{release} +Requires: perl-Test-Harness + +%description tests +Tests from %{name}. Execute them +with "%{_libexecdir}/%{name}/test". + +%prep +%setup -q -n Digest-%{version} +chmod -x digest-bench + +# Help generators to recognize Perl scripts +for F in t/*.t; do + perl -i -MConfig -ple 'print $Config{startperl} if $. == 1 && !s{\A#!.*perl\b}{$Config{startperl}}' "$F" + chmod +x "$F" +done + +%build +perl Makefile.PL INSTALLDIRS=vendor NO_PACKLIST=1 NO_PERLLOCAL=1 +%{make_build} + +%install +%{make_install} +%{_fixperms} %{buildroot}/* + +# Install tests +mkdir -p %{buildroot}%{_libexecdir}/%{name} +cp -a t %{buildroot}%{_libexecdir}/%{name} +cat > %{buildroot}%{_libexecdir}/%{name}/test << 'EOF' +#!/bin/sh +cd %{_libexecdir}/%{name} && exec prove -I . -j "$(getconf _NPROCESSORS_ONLN)" +EOF +chmod +x %{buildroot}%{_libexecdir}/%{name}/test + +%check +export HARNESS_OPTIONS=j$(perl -e 'if ($ARGV[0] =~ /.*-j([0-9][0-9]*).*/) {print $1} else {print 1}' -- '%{?_smp_mflags}') +make test + +%files +%doc Changes digest-bench README +%{perl_vendorlib}/* +%{_mandir}/man3/* + +%files tests +%{_libexecdir}/%{name} + +%changelog +* Tue Oct 29 2024 Troy Dawson - 1.20-511 +- Bump release for October 2024 mass rebuild: + Resolves: RHEL-64018 + +* Thu Jul 18 2024 Jitka Plesnikova - 1.20-510 +- Increase release to favour standalone package + +* Mon Jun 24 2024 Troy Dawson - 1.20-503 +- Bump release for June 2024 mass rebuild + +* Thu Jan 25 2024 Fedora Release Engineering - 1.20-502 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + +* Sun Jan 21 2024 Fedora Release Engineering - 1.20-501 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + +* Thu Jul 20 2023 Fedora Release Engineering - 1.20-500 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild + +* Tue Jul 11 2023 Jitka Plesnikova - 1.20-499 +- Increase release to favour standalone package + +* Fri Jan 20 2023 Fedora Release Engineering - 1.20-490 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild + +* Fri Jul 22 2022 Fedora Release Engineering - 1.20-489 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild + +* Mon May 30 2022 Jitka Plesnikova - 1.20-488 +- Increase release to favour standalone package + +* Fri Jan 21 2022 Fedora Release Engineering - 1.20-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + +* Thu Sep 02 2021 Jitka Plesnikova - 1.20-1 +- 1.20 bump +- Package tests + +* Thu Jul 22 2021 Fedora Release Engineering - 1.19-478 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + +* Fri May 21 2021 Jitka Plesnikova - 1.19-477 +- Increase release to favour standalone package + +* Wed Jan 27 2021 Fedora Release Engineering - 1.19-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + +* Wed Oct 14 2020 Petr Pisar - 1.19-1 +- 1.19 bump + +* Tue Jul 28 2020 Fedora Release Engineering - 1.17-457 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Mon Jun 22 2020 Jitka Plesnikova - 1.17-456 +- Increase release to favour standalone package + +* Wed Jan 29 2020 Fedora Release Engineering - 1.17-440 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Fri Jul 26 2019 Fedora Release Engineering - 1.17-439 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Thu May 30 2019 Jitka Plesnikova - 1.17-438 +- Increase release to favour standalone package + +* Fri Feb 01 2019 Fedora Release Engineering - 1.17-418 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Fri Jul 13 2018 Fedora Release Engineering - 1.17-417 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Wed Jun 27 2018 Jitka Plesnikova - 1.17-416 +- Increase release to favour standalone package + +* Thu Feb 08 2018 Fedora Release Engineering - 1.17-395 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Thu Jul 27 2017 Fedora Release Engineering - 1.17-394 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Sat Jun 03 2017 Jitka Plesnikova - 1.17-393 +- Perl 5.26 rebuild + +* Sat Feb 11 2017 Fedora Release Engineering - 1.17-367 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Tue Aug 02 2016 Jitka Plesnikova - 1.17-366 +- Avoid loading optional modules from default . (CVE-2016-1238) + +* Sat May 14 2016 Jitka Plesnikova - 1.17-365 +- Increase release to favour standalone package + +* Thu Feb 04 2016 Fedora Release Engineering - 1.17-347 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Thu Jun 18 2015 Fedora Release Engineering - 1.17-346 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Thu Jun 04 2015 Jitka Plesnikova - 1.17-345 +- Increase release to favour standalone package + +* Wed Jun 03 2015 Jitka Plesnikova - 1.17-311 +- Perl 5.22 rebuild + +* Wed Sep 03 2014 Jitka Plesnikova - 1.17-310 +- Increase release to favour standalone package + +* Tue Aug 26 2014 Jitka Plesnikova - 1.17-293 +- Perl 5.20 rebuild + +* Sat Jun 07 2014 Fedora Release Engineering - 1.17-292 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Sat Aug 03 2013 Fedora Release Engineering - 1.17-291 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild + +* Mon Jul 15 2013 Petr Pisar - 1.17-290 +- Increase release to favour standalone package + +* Fri Jul 12 2013 Petr Pisar - 1.17-245 +- Perl 5.18 rebuild + +* Fri May 03 2013 Petr Pisar - 1.17-244 +- Increase release number to supersede perl sub-package (bug #957931) + +* Thu Feb 14 2013 Fedora Release Engineering - 1.17-241 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild + +* Mon Aug 13 2012 Marcela Mašláňová - 1.17-240 +- bump release to override sub-package from perl.spec + +* Fri Jul 20 2012 Fedora Release Engineering - 1.17-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Wed Jun 06 2012 Petr Pisar - 1.17-3 +- Perl 5.16 rebuild + +* Fri Jan 13 2012 Fedora Release Engineering - 1.17-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Tue Oct 04 2011 Petr Pisar 1.17-1 +- Specfile autogenerated by cpanspec 1.78. +- Remove BuildRoot and defattr from spec code. diff --git a/sources b/sources new file mode 100644 index 0000000..ee11f7f --- /dev/null +++ b/sources @@ -0,0 +1 @@ +SHA512 (Digest-1.20.tar.gz) = bf65c9e3287be7b18a1ded9b518108a2933b5141af510268cabe0c41a7c437ab4f08504b0edf51e55f982d0956a3f41cb3b73bfd41a90799705418b1ac88db86