From 5f09ed2a41e0022f30d17087bce968d17e3acecd Mon Sep 17 00:00:00 2001 From: jvdias Date: Wed, 9 Nov 2005 00:55:16 +0000 Subject: [PATCH] fix bug 172739 --- perl-5.8.7-bz172739_obz36521.patch | 11 +++++++++++ perl.spec | 17 +++++++++++++++-- 2 files changed, 26 insertions(+), 2 deletions(-) create mode 100644 perl-5.8.7-bz172739_obz36521.patch diff --git a/perl-5.8.7-bz172739_obz36521.patch b/perl-5.8.7-bz172739_obz36521.patch new file mode 100644 index 0000000..648d09e --- /dev/null +++ b/perl-5.8.7-bz172739_obz36521.patch @@ -0,0 +1,11 @@ +--- perl-5.8.7/util.c.25160 2005-05-30 08:44:15.000000000 -0400 ++++ perl-5.8.7/util.c 2005-11-08 18:58:36.000000000 -0500 +@@ -1290,6 +1290,8 @@ + SV *msg; + + ENTER; ++ SAVESPTR(PL_warnhook); ++ PL_warnhook = Nullsv; + save_re_context(); + msg = newSVpvn(message, msglen); + SvFLAGS(msg) |= utf8; diff --git a/perl.spec b/perl.spec index 91445cf..e20394d 100644 --- a/perl.spec +++ b/perl.spec @@ -88,10 +88,10 @@ Patch22: perl-5.8.1-lpthread-link.patch # fix empty RPATH security issue Patch24: perl-5.8.3-empty-rpath.patch -# CAN-2004-0452 fix +# CAN-2004-0452 fix (now in 5.8.7!) Patch26: perl-5.8.0-rmtree.patch -# CAN-2005-0155 and CAN-2005-0156 fix +# CAN-2005-0155 and CAN-2005-0156 fix (now in 5.8.7!) Patch27: perl-5.8.5-CAN-2005-0155+0156.patch # bugzilla 118877, 127023 @@ -124,6 +124,10 @@ Patch172396: perl-5.8.7-172396.patch Patch172587: perl-5.8.7-bz172587.patch +Patch040976: perl-5.8.7-CAN-2004-0976.patch + +Patch172739: perl-5.8.7-bz172739_obz36521.patch + # module updatesd # Patch202: perl-5.8.0-Safe2.09.patch @@ -282,6 +286,10 @@ more secure running of setuid perl scripts. %patch172587 -p1 +%patch040976 -p1 + +%patch172739 -p1 + # Candidates for doc recoding (need case by case review): # find . -name "*.pod" -o -name "README*" -o -name "*.pm" | xargs file -i | grep charset= | grep -v '\(us-ascii\|utf-8\)' recode() @@ -491,6 +499,11 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Tue Nov 08 2005 Jason Vas Dias - 3:5.8.7-0.7 +- fix bug 172739: upstream bug 36521 : deep recursion and segfault + in CGI::Carp::warn with 'use diagnostics' : applied patch 25160. +- fix CAN-2004-0976: insecure use of temp files (ala Debian) + * Mon Nov 07 2005 Jason Vas Dias - 3:5.8.7-0.7 - fix bug 172587: apply upstream patches 26009, 26011