OpenPKG CVS Repository
  http://cvs.openpkg.org/
  ____________________________________________________________________________

  Server: cvs.openpkg.org                  Name:   Ralf S. Engelschall
  Root:   /v/openpkg/cvs                   Email:  [EMAIL PROTECTED]
  Module: openpkg-src                      Date:   28-Jun-2007 09:10:23
  Branch: HEAD                             Handle: 2007062808102200

  Added files:
    openpkg-src/apache-perl apache-perl.patch
  Modified files:
    openpkg-src/apache-perl apache-perl.spec

  Log:
    apply a security (CVE-2007-1349) and bug fix

  Summary:
    Revision    Changes     Path
    1.1         +24 -0      openpkg-src/apache-perl/apache-perl.patch
    1.3         +3  -1      openpkg-src/apache-perl/apache-perl.spec
  ____________________________________________________________________________

  patch -p0 <<'@@ .'
  Index: openpkg-src/apache-perl/apache-perl.patch
  ============================================================================
  $ cvs diff -u -r0 -r1.1 apache-perl.patch
  --- /dev/null 2007-06-28 09:08:01 +0200
  +++ apache-perl.patch 2007-06-28 09:10:23 +0200
  @@ -0,0 +1,24 @@
  +Index: ModPerl-Registry/lib/ModPerl/RegistryCooker.pm
  +--- ModPerl-Registry/lib/ModPerl/RegistryCooker.pm.orig      2006-11-20 
00:31:41 +0100
  ++++ ModPerl-Registry/lib/ModPerl/RegistryCooker.pm   2007-06-28 09:07:22 
+0200
  +@@ -337,7 +337,7 @@
  +     my $self = shift;
  + 
  +     my $path_info = $self->{REQ}->path_info;
  +-    my $script_name = $path_info && $self->{URI} =~ /$path_info$/
  ++    my $script_name = $path_info && $self->{URI} =~ /\Q$path_info\E$/
  +         ? substr($self->{URI}, 0, length($self->{URI}) - length($path_info))
  +         : $self->{URI};
  + 
  +Index: xs/APR/APR/Makefile.PL
  +--- xs/APR/APR/Makefile.PL.orig      2006-11-20 00:31:02 +0100
  ++++ xs/APR/APR/Makefile.PL   2007-06-28 09:07:22 +0200
  +@@ -15,7 +15,7 @@
  + 
  + my %args;
  + 
  +-%args = map { split /=/, $_ } @ARGV;
  ++%args = map { split /=/, $_, 2 } @ARGV;
  + 
  + $args{NAME}         = 'APR';
  + $args{VERSION_FROM} = 'APR.pm';
  @@ .
  patch -p0 <<'@@ .'
  Index: openpkg-src/apache-perl/apache-perl.spec
  ============================================================================
  $ cvs diff -u -r1.2 -r1.3 apache-perl.spec
  --- openpkg-src/apache-perl/apache-perl.spec  22 Jun 2007 11:04:03 -0000      
1.2
  +++ openpkg-src/apache-perl/apache-perl.spec  28 Jun 2007 07:10:22 -0000      
1.3
  @@ -36,12 +36,13 @@
   Group:        Web
   License:      Artistic/GPL
   Version:      %{V_mod_perl}
  -Release:      20070622
  +Release:      20070628
   
   #   list of sources
   Source0:      http://perl.apache.org/dist/mod_perl-%{V_mod_perl}.tar.gz
   Source1:      apache-perl.pl
   Source2:      apache-perl.conf
  +Patch0:       apache-perl.patch
   
   #   build information
   Prefix:       %{l_prefix}
  @@ -77,6 +78,7 @@
   
   %prep
       %setup -q -n mod_perl-%{V_mod_perl}
  +    %patch -p0
   
   %build
       #   configure toolkit
  @@ .
______________________________________________________________________
OpenPKG                                             http://openpkg.org
CVS Repository Commit List                     [email protected]

Reply via email to