[perl-Config-IniFiles/f15] 2.72, fix CVE-2012-2451

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



commit b3932dae9785b9d18efb09f0636bedb23470c5fa
Author: Tom Callaway <spot@xxxxxxxxxxxxxxxxx>
Date:   Fri May 11 16:52:15 2012 -0400

    2.72, fix CVE-2012-2451

 perl-Config-IniFiles.spec |   13 +++++++++++--
 sources                   |    2 +-
 2 files changed, 12 insertions(+), 3 deletions(-)
---
diff --git a/perl-Config-IniFiles.spec b/perl-Config-IniFiles.spec
index 3356b29..2301d9a 100644
--- a/perl-Config-IniFiles.spec
+++ b/perl-Config-IniFiles.spec
@@ -1,6 +1,6 @@
 Name:           perl-Config-IniFiles
-Version:        2.68
-Release:        3%{?dist}
+Version:        2.72
+Release:        1%{?dist}
 Summary:        A module for reading .ini-style configuration files
 
 Group:          Development/Libraries
@@ -12,6 +12,7 @@ BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 BuildRequires:  perl(Module::Build::Compat)
 BuildRequires:  perl(ExtUtils::MakeMaker)
 BuildRequires:  perl(Test::More)
+BuildRequires:	perl(List::MoreUtils)
 BuildArch:      noarch
 Requires:       perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
 # Not autodetected. Found in lib/Config/IniFiles.pm:2265
@@ -56,6 +57,14 @@ rm -rf $RPM_BUILD_ROOT
 
 
 %changelog
+* Fri May 11 2012 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 2.72-1
+- update to 2.72
+- notable fix: SECURITY BUG FIX: Config::IniFiles used to write 
+  to a temporary filename with a predictable name 
+  ("${filename}-new") which opens the door for potential
+  exploits.
+  Fixes CVE-2012-2451
+
 * Tue Feb 21 2012 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 2.68-3
 - add missing Requires: perl(IO::Scalar) >= 2.109 (bz 791078)
 
diff --git a/sources b/sources
index 7d20be9..5a15349 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-c860f04b2d7d3cb0cc462ed896112c62  Config-IniFiles-2.68.tar.gz
+513d01cf4945e9b1faccc80e153bd27e  Config-IniFiles-2.72.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/perl-devel



[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Legacy Announce]     [Fedora PHP Devel]     [Kernel Devel]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite Information]
  Powered by Linux