commit 7dcd0d03e9f9c095bddbcb7a01c998e85a839e44 Author: Iain Arnell <iarnell@xxxxxxxxx> Date: Sun Oct 21 12:20:13 2012 -0600 update to 4.71 .gitignore | 1 + cve-2011-2201.patch | 18 +++++++++--------- perl-Data-FormValidator.spec | 8 +++++--- sources | 2 +- 4 files changed, 16 insertions(+), 13 deletions(-) --- diff --git a/.gitignore b/.gitignore index d32d13c..ac2a62b 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,3 @@ Data-FormValidator-4.66.tar.gz /Data-FormValidator-4.70.tar.gz +/Data-FormValidator-4.71.tar.gz diff --git a/cve-2011-2201.patch b/cve-2011-2201.patch index 3432266..9e73290 100644 --- a/cve-2011-2201.patch +++ b/cve-2011-2201.patch @@ -1,7 +1,7 @@ -diff -up Data-FormValidator-4.66/lib/Data/FormValidator/Results.pm.orig Data-FormValidator-4.66/lib/Data/FormValidator/Results.pm ---- Data-FormValidator-4.66/lib/Data/FormValidator/Results.pm.orig 2010-02-24 15:31:03.000000000 +0100 -+++ Data-FormValidator-4.66/lib/Data/FormValidator/Results.pm 2011-08-28 08:26:22.000000000 +0200 -@@ -807,7 +807,7 @@ sub _create_sub_from_RE { +diff -up Data-FormValidator-4.71/lib/Data/FormValidator/Results.pm.orig Data-FormValidator-4.71/lib/Data/FormValidator/Results.pm +--- Data-FormValidator-4.71/lib/Data/FormValidator/Results.pm.orig 2012-10-02 14:34:45.000000000 -0600 ++++ Data-FormValidator-4.71/lib/Data/FormValidator/Results.pm 2012-10-21 10:32:38.000000000 -0600 +@@ -806,7 +806,7 @@ sub _create_sub_from_RE { # With methods, the value is the second argument my $val = $force_method_p ? $_[1] : $_[0]; my ($match) = scalar ($val =~ $re); @@ -10,9 +10,9 @@ diff -up Data-FormValidator-4.66/lib/Data/FormValidator/Results.pm.orig Data-For # pass the value through a RE that matches anything to untaint it. my ($untainted) = ($& =~ m/(.*)/s); return $untainted; -diff -up Data-FormValidator-4.66/t/untaint_match_check.t.orig Data-FormValidator-4.66/t/untaint_match_check.t ---- Data-FormValidator-4.66/t/untaint_match_check.t.orig 2011-08-28 08:26:54.000000000 +0200 -+++ Data-FormValidator-4.66/t/untaint_match_check.t 2011-08-28 08:26:30.000000000 +0200 +diff -up Data-FormValidator-4.71/t/untaint_match_check.t.orig Data-FormValidator-4.71/t/untaint_match_check.t +--- Data-FormValidator-4.71/t/untaint_match_check.t.orig 2012-10-21 10:32:38.000000000 -0600 ++++ Data-FormValidator-4.71/t/untaint_match_check.t 2012-10-21 10:38:19.000000000 -0600 @@ -0,0 +1,22 @@ +use strict; +use warnings; @@ -28,11 +28,11 @@ diff -up Data-FormValidator-4.66/t/untaint_match_check.t.orig Data-FormValidator + { # validation profile + untaint_all_constraints => 1, + optional => ['a'], -+ constraints => { a => qr/never matches/, }, ++ constraints => { a => { constraint => qr/never matches/, name => 'never matches' } }, + }, +); + +ok( not $result->success ) + or diag( 'Valid: ', $result->valid ); +ok( $result->has_invalid ); -+is_deeply( scalar($result->invalid), { 'a' => [ qr/never matches/ ] } ); ++is_deeply( scalar($result->invalid), { 'a' => [ 'never matches' ] } ); diff --git a/perl-Data-FormValidator.spec b/perl-Data-FormValidator.spec index fcfcb91..421c495 100644 --- a/perl-Data-FormValidator.spec +++ b/perl-Data-FormValidator.spec @@ -1,6 +1,6 @@ Name: perl-Data-FormValidator -Version: 4.70 -Release: 5%{?dist} +Version: 4.71 +Release: 1%{?dist} Summary: Validates user input (usually from an HTML form) based on input profile License: GPL+ or Artistic Group: Development/Libraries @@ -47,7 +47,6 @@ simple format. %install ./Build install destdir=$RPM_BUILD_ROOT create_packlist=0 -find $RPM_BUILD_ROOT -depth -type d -exec rmdir {} 2>/dev/null \; %{_fixperms} $RPM_BUILD_ROOT/* @@ -60,6 +59,9 @@ find $RPM_BUILD_ROOT -depth -type d -exec rmdir {} 2>/dev/null \; %{_mandir}/man3/* %changelog +* Sun Oct 21 2012 Iain Arnell <iarnell@xxxxxxxxx> 4.71-1 +- update to latest upstream version + * Fri Jul 20 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 4.70-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild diff --git a/sources b/sources index 2bd5749..25ec15e 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -11c72c47f35a608ecbe6280ec93bf1bd Data-FormValidator-4.70.tar.gz +6043b71aa28e65ed2f42aeaed66e2737 Data-FormValidator-4.71.tar.gz -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/perl-devel