import CS perl-JSON-XS-4.04-1.el10
This commit is contained in:
parent
7420c1f895
commit
090181fd98
@ -1 +0,0 @@
|
||||
1
|
10
.gitignore
vendored
10
.gitignore
vendored
@ -1,9 +1 @@
|
||||
JSON-XS-2.27.tar.gz
|
||||
/JSON-XS-2.3.tar.gz
|
||||
/JSON-XS-2.32.tar.gz
|
||||
/JSON-XS-2.33.tar.gz
|
||||
/JSON-XS-2.34.tar.gz
|
||||
/JSON-XS-3.01.tar.gz
|
||||
/JSON-XS-3.02.tar.gz
|
||||
/JSON-XS-3.03.tar.gz
|
||||
/JSON-XS-3.04.tar.gz
|
||||
JSON-XS-4.04.tar.gz
|
||||
|
@ -1,40 +0,0 @@
|
||||
Fix for CVE-2025-40928
|
||||
|
||||
Fix heap overflow causing crashes, possibly information disclosure or
|
||||
worse (CVE-2025-40928), and causes JSON::XS to accept invalid JSON texts
|
||||
as valid in some cases.
|
||||
|
||||
diff -up JSON-XS-3.04/XS.xs.cve JSON-XS-3.04/XS.xs
|
||||
--- JSON-XS-3.04/XS.xs.cve 2017-08-17 03:54:33.000000000 +0200
|
||||
+++ JSON-XS-3.04/XS.xs 2025-09-15 13:09:42.314411248 +0200
|
||||
@@ -247,16 +247,16 @@ json_atof_scan1 (const char *s, NV *accu
|
||||
// if we recurse too deep, skip all remaining digits
|
||||
// to avoid a stack overflow attack
|
||||
if (expect_false (--maxdepth <= 0))
|
||||
- while (((U8)*s - '0') < 10)
|
||||
+ while (*s >= '0' && *s <= '9')
|
||||
++s;
|
||||
|
||||
for (;;)
|
||||
{
|
||||
- U8 dig = (U8)*s - '0';
|
||||
+ U8 dig = *s - '0';
|
||||
|
||||
if (expect_false (dig >= 10))
|
||||
{
|
||||
- if (dig == (U8)((U8)'.' - (U8)'0'))
|
||||
+ if (dig == (U8)('.' - '0'))
|
||||
{
|
||||
++s;
|
||||
json_atof_scan1 (s, accum, expo, 1, maxdepth);
|
||||
@@ -276,8 +276,8 @@ json_atof_scan1 (const char *s, NV *accu
|
||||
else if (*s == '+')
|
||||
++s;
|
||||
|
||||
- while ((dig = (U8)*s - '0') < 10)
|
||||
- exp2 = exp2 * 10 + *s++ - '0';
|
||||
+ while (*s >= '0' && *s <= '9')
|
||||
+ exp2 = exp2 * 10 + (*s++ - '0');
|
||||
|
||||
*expo += neg ? -exp2 : exp2;
|
||||
}
|
@ -1,7 +0,0 @@
|
||||
# RHEL
|
||||
--- !Policy
|
||||
product_versions:
|
||||
- rhel-8
|
||||
decision_context: osci_compose_gate
|
||||
rules:
|
||||
- !PassingTestCaseRule {test_case_name: osci.brew-build.tier0.functional}
|
@ -1,14 +1,11 @@
|
||||
Name: perl-JSON-XS
|
||||
Summary: JSON serializing/de-serializing, done correctly and fast
|
||||
Epoch: 1
|
||||
Version: 3.04
|
||||
Release: 4%{?dist}
|
||||
License: GPL+ or Artistic
|
||||
Group: Development/Libraries
|
||||
URL: http://search.cpan.org/dist/JSON-XS/
|
||||
Source0: http://www.cpan.org/authors/id/M/ML/MLEHMANN/JSON-XS-%{version}.tar.gz
|
||||
# Fix for CVE-2025-40928 in upstream since 4.04
|
||||
Patch1: JSON-XS-3.04-Fix-for-CVE-2025-40928.patch
|
||||
Version: 4.04
|
||||
Release: 1%{?dist}
|
||||
License: GPL-1.0-or-later OR Artistic-1.0-Perl
|
||||
URL: https://metacpan.org/release/JSON-XS
|
||||
Source0: https://cpan.metacpan.org/modules/by-module/JSON/JSON-XS-%{version}.tar.gz
|
||||
# Build
|
||||
BuildRequires: coreutils
|
||||
BuildRequires: gcc
|
||||
@ -39,7 +36,7 @@ BuildRequires: perl(Tie::Hash)
|
||||
BuildRequires: perl(utf8)
|
||||
BuildRequires: perl(warnings)
|
||||
# Dependencies
|
||||
Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
|
||||
# (none)
|
||||
|
||||
%{?perl_default_filter}
|
||||
|
||||
@ -60,7 +57,6 @@ with "%{_libexecdir}/%{name}/test".
|
||||
|
||||
%prep
|
||||
%setup -q -n JSON-XS-%{version}
|
||||
%patch -P1 -p1
|
||||
|
||||
sed -i 's/\r//' t/*
|
||||
perl -MConfig -pi -e 's|^#!/opt/bin/perl|$Config{startperl}|' eg/*
|
||||
@ -73,11 +69,11 @@ for F in t/*.t; do
|
||||
done
|
||||
|
||||
%build
|
||||
%{__perl} Makefile.PL INSTALLDIRS=vendor OPTIMIZE="%{optflags}" NO_PACKLIST=1
|
||||
make %{?_smp_mflags}
|
||||
%{__perl} Makefile.PL INSTALLDIRS=vendor OPTIMIZE="%{optflags}" NO_PACKLIST=1 NO_PERLLOCAL=1 </dev/null
|
||||
%{make_build}
|
||||
|
||||
%install
|
||||
make pure_install DESTDIR=%{buildroot}
|
||||
%{make_install}
|
||||
# Install tests
|
||||
mkdir -p %{buildroot}%{_libexecdir}/%{name}
|
||||
cp -a t %{buildroot}%{_libexecdir}/%{name}
|
||||
@ -107,9 +103,93 @@ make test
|
||||
%{_libexecdir}/%{name}
|
||||
|
||||
%changelog
|
||||
* Mon Sep 15 2025 Jitka Plesnikova <jplesnik@redhat.com> - 1:3.04-4
|
||||
- Resolves: RHEL-113630 - Fix CVE-2025-40928
|
||||
- Package tests
|
||||
* Thu Sep 11 2025 Jitka Plesnikova <jplesnik@redhat.com> - 1:4.04-1
|
||||
- Update to 4.04
|
||||
- Resolves: RHEL-113624 - Fix CVE-2025-40928
|
||||
|
||||
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 1:4.03-16
|
||||
- Bump release for October 2024 mass rebuild:
|
||||
Resolves: RHEL-64018
|
||||
|
||||
* Thu Aug 08 2024 Troy Dawson <tdawson@redhat.com> - 1:4.03-15
|
||||
- Bump release for Aug 2024 java mass rebuild
|
||||
|
||||
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 1:4.03-14
|
||||
- Bump release for June 2024 mass rebuild
|
||||
|
||||
* Thu Jan 25 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.03-13
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
||||
|
||||
* Sun Jan 21 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.03-12
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
||||
|
||||
* Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.03-11
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
|
||||
|
||||
* Tue Jul 11 2023 Jitka Plesnikova <jplesnik@redhat.com> - 1:4.03-10
|
||||
- Perl 5.38 rebuild
|
||||
|
||||
* Fri Jan 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.03-9
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
|
||||
|
||||
* Fri Jul 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.03-8
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
|
||||
|
||||
* Tue May 31 2022 Jitka Plesnikova <jplesnik@redhat.com> - 1:4.03-7
|
||||
- Perl 5.36 rebuild
|
||||
|
||||
* Fri Jan 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.03-6
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
||||
|
||||
* Thu Jul 22 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.03-5
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
||||
|
||||
* Fri May 21 2021 Jitka Plesnikova <jplesnik@redhat.com> - 1:4.03-4
|
||||
- Perl 5.34 rebuild
|
||||
|
||||
* Mon Feb 22 2021 Petr Pisar <ppisar@redhat.com> - 1:4.03-3
|
||||
- Package tests manually
|
||||
|
||||
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.03-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
||||
|
||||
* Wed Oct 28 2020 Paul Howarth <paul@city-fan.org> - 1:4.03-1
|
||||
- Update to 4.03
|
||||
- Use %%{make_build} and %%{make_install}
|
||||
- Simplify files list a bit
|
||||
|
||||
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.02-6
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
||||
|
||||
* Tue Jun 23 2020 Jitka Plesnikova <jplesnik@redhat.com> - 1:4.02-5
|
||||
- Perl 5.32 rebuild
|
||||
|
||||
* Thu Jan 30 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.02-4
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
||||
|
||||
* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.02-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
||||
|
||||
* Fri May 31 2019 Jitka Plesnikova <jplesnik@redhat.com> - 1:4.02-2
|
||||
- Perl 5.30 rebuild
|
||||
|
||||
* Wed Mar 6 2019 Paul Howarth <paul@city-fan.org> - 1:4.02-1
|
||||
- Update to 4.02
|
||||
|
||||
* Mon Feb 25 2019 Paul Howarth <paul@city-fan.org> - 1:4.01-1
|
||||
- Update to 4.01
|
||||
|
||||
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1:4.0-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
||||
|
||||
* Tue Nov 20 2018 Paul Howarth <paul@city-fan.org> - 1:4.0-1
|
||||
- Update to 4.0
|
||||
|
||||
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1:3.04-5
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
||||
|
||||
* Thu Jun 28 2018 Jitka Plesnikova <jplesnik@redhat.com> - 1:3.04-4
|
||||
- Perl 5.28 rebuild
|
||||
|
||||
* Wed Feb 21 2018 Paul Howarth <paul@city-fan.org> - 1:3.04-3
|
||||
- Specify all dependencies
|
||||
|
@ -1,5 +0,0 @@
|
||||
summary: Sanity tests
|
||||
discover:
|
||||
how: fmf
|
||||
execute:
|
||||
how: tmt
|
2
sources
2
sources
@ -1 +1 @@
|
||||
SHA512 (JSON-XS-3.04.tar.gz) = 69c2e199385b5b5e331d905b64805304de80e1a3b393acaf7dce21c45254b1f23f1a83b246dcd3a80c2cfdadaf8ce3634ee587c469629cb69106f0c2239c73db
|
||||
SHA512 (JSON-XS-4.04.tar.gz) = 018d02c7db58a8469afd8454c7822602a50d09a1658e41511ae38bc0f0cfe88f180758ae1dc0f1a933869c8e5c1e7535a2e4d312a9d206544df0ccb4cba11295
|
||||
|
@ -1,12 +0,0 @@
|
||||
summary: Upstream tests
|
||||
contact: Jitka Plesnikova <jplesnik@redhat.com>
|
||||
component: perl-JSON-XS
|
||||
require: perl-JSON-XS-tests
|
||||
test: /usr/libexec/perl-JSON-XS/test
|
||||
enabled: true
|
||||
tag:
|
||||
- rhel-buildroot
|
||||
adjust:
|
||||
- enabled: false
|
||||
when: distro < rhel-8 or distro < centos-stream-8
|
||||
continue: false
|
Loading…
Reference in New Issue
Block a user