OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Ralf S. Engelschall
Root: /e/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-src Date: 16-Dec-2002 13:16:37
Branch: OPENPKG_1_1_SOLID Handle: 2002121612163600
Modified files: (Branch: OPENPKG_1_1_SOLID)
openpkg-src/perl perl.patch perl.spec
Log:
include security bugfix
Summary:
Revision Changes Path
1.4.2.1 +20 -0 openpkg-src/perl/perl.patch
1.57.2.2 +1 -1 openpkg-src/perl/perl.spec
____________________________________________________________________________
Index: openpkg-src/perl/perl.patch
============================================================
$ cvs diff -u -r1.4 -r1.4.2.1 perl.patch
--- openpkg-src/perl/perl.patch 26 Aug 2002 16:32:48 -0000 1.4
+++ openpkg-src/perl/perl.patch 16 Dec 2002 12:16:36 -0000 1.4.2.1
@@ -45,3 +45,23 @@
lddlflags="-shared "
else
if [ -e /usr/lib/aout ]; then
+--- ext/Opcode/Safe.pm.orig
++++ ext/Opcode/Safe.pm
+@@ -213,7 +213,7 @@
+ # Create anon sub ref in root of compartment.
+ # Uses a closure (on $expr) to pass in the code to be executed.
+ # (eval on one line to keep line numbers as expected by caller)
+- my $evalcode = sprintf('package %s; sub { eval $expr; }', $root);
++ my $evalcode = sprintf('package %s; sub { @_ = (); eval $expr; }', $root);
+ my $evalsub;
+
+ if ($strict) { use strict; $evalsub = eval $evalcode; }
+@@ -227,7 +227,7 @@
+ my $root = $obj->{Root};
+
+ my $evalsub = eval
+- sprintf('package %s; sub { do $file }', $root);
++ sprintf('package %s; sub { @_ = (); do $file }', $root);
+ return Opcode::_safe_call_sv($root, $obj->{Mask}, $evalsub);
+ }
+
Index: openpkg-src/perl/perl.spec
============================================================
$ cvs diff -u -r1.57.2.1 -r1.57.2.2 perl.spec
--- openpkg-src/perl/perl.spec 26 Aug 2002 19:54:33 -0000 1.57.2.1
+++ openpkg-src/perl/perl.spec 16 Dec 2002 12:16:36 -0000 1.57.2.2
@@ -33,7 +33,7 @@
Group: Language
License: GPL/Artistic
Version: 5.6.1
-Release: 1.1.0
+Release: 1.1.1
# list of sources
Source0: ftp://ftp.cpan.org/pub/CPAN/src/%{name}-%{version}.tar.gz
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List [EMAIL PROTECTED]
