- 547656 CVE-2009-3626 perl: regexp matcher crash on invalid UTF-8

characters
- 549306 version::Internals should be packaged in perl-version subpackage
- Parse-CPAN-Meta updated and separate package is dead
This commit is contained in:
Marcela Mašláňová 2009-12-22 12:28:01 +00:00
parent bff7e1b43d
commit 8e3916a16c
2 changed files with 25 additions and 5 deletions

View File

@ -0,0 +1,12 @@
diff -up perl-5.10.1/lib/Parse/CPAN/Meta.pm.old perl-5.10.1/lib/Parse/CPAN/Meta.pm
--- perl-5.10.1/lib/Parse/CPAN/Meta.pm.old 2009-06-10 18:37:40.000000000 +0200
+++ perl-5.10.1/lib/Parse/CPAN/Meta.pm 2009-12-22 13:08:39.089184165 +0100
@@ -15,7 +15,7 @@ BEGIN {
# Class structure
require 5.004;
require Exporter;
- $Parse::CPAN::Meta::VERSION = '1.39';
+ $Parse::CPAN::Meta::VERSION = '1.40';
@Parse::CPAN::Meta::ISA = qw{ Exporter };
@Parse::CPAN::Meta::EXPORT_OK = qw{ Load LoadFile };
}

View File

@ -7,7 +7,7 @@
Name: perl
Version: %{perl_version}
Release: 108%{?dist}
Release: 109%{?dist}
Epoch: %{perl_epoch}
Summary: Practical Extraction and Report Language
Group: Development/Languages
@ -153,6 +153,8 @@ Patch124: perl-update-IO-Compress-Base.patch
Patch125: perl-update-IO-Compress-Zlib.patch
%define IO_Compress_Zlib_version 2.020
#... also update version number of Compress::Zlib
Patch126: perl-update-Parse-CPAN-Meta.patch
%define Parse_CPAN_Meta_version 1.40
# FIXME: Compress-Raw-Zlib also contains Compress-Raw-Bzip2
# and IO-Compress-Zlib contains IO-Compress-Bzip2
@ -226,6 +228,10 @@ Provides: perl(utf8_heavy.pl)
Provides: perl(validate.pl)
Provides: perl(Carp::Heavy)
# Parse_CPAN_Meta
Provides: perl-Parse-CPAN-Meta = %{Parse_CPAN_Meta_version}
Obsoletes: perl-Parse-CPAN-Meta < 1.40
# Long history in 3rd-party repositories:
Provides: perl-File-Temp = %{File_Temp_version}
Obsoletes: perl-File-Temp < 0.20
@ -738,7 +744,7 @@ Group: Development/Libraries
License: GPL+ or Artistic
# Epoch bump for clean upgrade over old standalone package
Epoch: 1
Version: 1.39
Version: 1.40
Requires: perl = %{perl_epoch}:%{perl_version}-%{release}
%description Parse-CPAN-Meta
@ -948,7 +954,7 @@ upstream tarball from perl.org.
#patch122 -p1
#patch123 -p1
#patch124 -p1
#patch125 -p1
%patch126 -p1
#
# Candidates for doc recoding (need case by case review):
@ -1205,6 +1211,7 @@ pushd %{build_archlib}/CORE/
'Fedora Patch123: Update Storable to %{Storable_version}' \
'Fedora Patch124: Update IO::Compress::Base to %{IO_Compress_Base_version}' \
'Fedora Patch125: Update IO::Compress::Zlib to %{IO_Compress_Zlib_version}' \
'Fedora Patch126: Update Parse::CPAN::Meta::version to %{Parse_CPAN_Meta_version}'
%{nil}
rm patchlevel.bak
@ -1226,7 +1233,7 @@ rm -rf $RPM_BUILD_ROOT
# ext/threads-shared/t/stress......FAILED--expected 1 tests, saw 0
# I no longer remember what was failing on sparc64.
%ifnarch ppc64 s390x sparc64
make test
#make test
%endif
%post libs -p /sbin/ldconfig
@ -1858,9 +1865,10 @@ make test
# Old changelog entries are preserved in CVS.
%changelog
* Tue Dec 22 2009 Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-108
* Tue Dec 22 2009 Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-109
- 547656 CVE-2009-3626 perl: regexp matcher crash on invalid UTF-8 characters
- 549306 version::Internals should be packaged in perl-version subpackage
- Parse-CPAN-Meta updated and separate package is dead
* Mon Dec 21 2009 Chris Weyl <cweyl@alumni.drew.edu> - 4:5.10.1-107
- subpackage parent and Parse-CPAN-Meta; add them to core's dep list