This is an automated email from the git hooks/post-receive script.
gregoa pushed a commit to branch master
in repository libnet-dns-perl.
commit b3183c15c75e4c8ef986b9ec4d489ca6a30b7585
Author: gregor herrmann <gre...@debian.org>
Date: Mon Jul 25 21:37:19 2016 +0200
Remove . from @INC when loading modules dynamically [CVE-2016-1238].
---
debian/patches/CVE-2016-1238.patch | 25 +++++++++++++++++++++++++
debian/patches/series | 1 +
2 files changed, 26 insertions(+)
diff --git a/debian/patches/CVE-2016-1238.patch
b/debian/patches/CVE-2016-1238.patch
new file mode 100644
index 0000000..4673aa2
--- /dev/null
+++ b/debian/patches/CVE-2016-1238.patch
@@ -0,0 +1,25 @@
+From a8acf39ad82f41049908cfc239e0fb3c3ff53f64 Mon Sep 17 00:00:00 2001
+From: Dominic Hargreaves <d...@earth.li>
+Date: Mon, 25 Jul 2016 10:22:43 +0100
+Subject: [PATCH] Remove . from @INC when loading modules dynamically
+ [CVE-2016-1238]
+
+---
+ lib/Net/DNS/Domain.pm | 2 ++
+ 1 file changed, 2 insertions(+)
+
+--- a/lib/Net/DNS/Domain.pm
++++ b/lib/Net/DNS/Domain.pm
+@@ -54,7 +54,11 @@
+ LIBUTF8 && Encode::find_encoding('utf8'); # encoding
object
+ };
+
+-use constant LIBIDN => UTF8 && defined eval 'require Net::LibIDN';
++use constant LIBIDN => UTF8 && defined eval {
++ local @INC = @INC;
++ pop @INC if $INC[-1] eq '.';
++ require Net::LibIDN;
++};
+
+
+ # perlcc: address of encoding objects must be determined at runtime
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..34520df
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1 @@
+CVE-2016-1238.patch
--
Alioth's /usr/local/bin/git-commit-notice on
/srv/git.debian.org/git/pkg-perl/packages/libnet-dns-perl.git
_______________________________________________
Pkg-perl-cvs-commits mailing list
Pkg-perl-cvs-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-perl-cvs-commits
