OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Ralf S. Engelschall
Root: /v/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-src Date: 03-Dec-2005 14:10:26
Branch: OPENPKG_2_3_SOLID Handle: 2005120313102501
Modified files: (Branch: OPENPKG_2_3_SOLID)
openpkg-src/perl perl.patch perl.spec
Log:
Security Fix (CVE-2005-3962, OpenPKG-SA-2005.025-perl)
Summary:
Revision Changes Path
1.15.2.1 +20 -0 openpkg-src/perl/perl.patch
1.99.2.2 +1 -1 openpkg-src/perl/perl.spec
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-src/perl/perl.patch
============================================================================
$ cvs diff -u -r1.15 -r1.15.2.1 perl.patch
--- openpkg-src/perl/perl.patch 5 Feb 2005 14:12:27 -0000 1.15
+++ openpkg-src/perl/perl.patch 3 Dec 2005 13:10:25 -0000 1.15.2.1
@@ -365,3 +365,23 @@
vsprintf(buffer+len, fmt, ap);
PerlLIO_write(dbg, buffer, strlen(buffer));
+-----------------------------------------------------------------------------
+
+Security Fix (CVE-2005-3962, OpenPKG-SA-2005.025-perl)
+
+Index: sv.c
+--- sv.c.orig 2005-05-27 12:38:11 +0200
++++ sv.c 2005-12-03 13:49:26 +0100
+@@ -8519,7 +8519,10 @@
+ if (EXPECT_NUMBER(q, width)) {
+ if (*q == '$') {
+ ++q;
+- efix = width;
++ if (width > PERL_INT_MAX)
++ efix = PERL_INT_MAX;
++ else
++ efix = width;
+ } else {
+ goto gotwidth;
+ }
+
@@ .
patch -p0 <<'@@ .'
Index: openpkg-src/perl/perl.spec
============================================================================
$ cvs diff -u -r1.99.2.1 -r1.99.2.2 perl.spec
--- openpkg-src/perl/perl.spec 21 Feb 2005 17:07:58 -0000 1.99.2.1
+++ openpkg-src/perl/perl.spec 3 Dec 2005 13:10:26 -0000 1.99.2.2
@@ -34,7 +34,7 @@
Group: Language
License: GPL/Artistic
Version: 5.8.6
-Release: 2.3.0
+Release: 2.3.1
# list of sources
Source0: ftp://ftp.cpan.org/pub/CPAN/src/perl-%{version}.tar.gz
@@ .
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List [email protected]
