[perl-ZMQ-LibZMQ3/el6] * EPEL6: disable tests as they require a recent Test::More
by Jose Pedro Oliveira
commit 673cf4448edf0f4daabac46ed70f528a967e6c3e
Author: Jose Pedro Oliveira <jpo(a)di.uminho.pt>
Date: Mon Jun 3 18:14:50 2013 +0100
* EPEL6: disable tests as they require a recent Test::More
perl-ZMQ-LibZMQ3.spec | 10 +++++++---
1 files changed, 7 insertions(+), 3 deletions(-)
---
diff --git a/perl-ZMQ-LibZMQ3.spec b/perl-ZMQ-LibZMQ3.spec
index 531a7b5..74cdf44 100644
--- a/perl-ZMQ-LibZMQ3.spec
+++ b/perl-ZMQ-LibZMQ3.spec
@@ -1,6 +1,6 @@
Name: perl-ZMQ-LibZMQ3
Version: 1.12
-Release: 1%{?dist}
+Release: 1%{?dist}.1
Summary: Perl wrapper for the libzmq 3.x library
License: GPL+ or Artistic
@@ -14,7 +14,8 @@ BuildRequires: perl(Cwd)
BuildRequires: perl(ExtUtils::MakeMaker)
BuildRequires: perl(File::Spec)
BuildRequires: perl(Test::Fatal)
-BuildRequires: perl(Test::More) >= 0.98
+# EPEL6: disable tests as they require a recent Test::More
+#BuildRequires: perl(Test::More) >= 0.98
BuildRequires: perl(Test::Requires)
BuildRequires: perl(Test::SharedFork)
BuildRequires: perl(Test::TCP) >= 1.08
@@ -48,7 +49,7 @@ find $RPM_BUILD_ROOT -type f -name '*.bs' -size 0 -exec rm -f {} \;
%{_fixperms} $RPM_BUILD_ROOT/*
%check
-make test
+#make test
%files
@@ -59,6 +60,9 @@ make test
%changelog
+* Mon Jun 3 2013 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.13-1
+- EPEL6: disable tests as they require a recent Test::More
+
* Thu May 30 2013 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.12-1
- Update to version 1.12
10 years, 10 months
[perl-Business-ISBN] 2.06 bump
by Petr Pisar
commit 4776847b3ffcdf8ec560f3ab08ee585b62ac1741
Author: Petr Písař <ppisar(a)redhat.com>
Date: Mon Jun 3 16:09:50 2013 +0200
2.06 bump
.gitignore | 1 +
perl-Business-ISBN.spec | 55 ++++++++++++++++++++++------------------------
sources | 2 +-
3 files changed, 28 insertions(+), 30 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 42596fa..ec731b3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
Business-ISBN-2.05.tar.gz
/Business-ISBN-2.05_03.tar.gz
+/Business-ISBN-2.06.tar.gz
diff --git a/perl-Business-ISBN.spec b/perl-Business-ISBN.spec
index 98f1d1e..41c466d 100644
--- a/perl-Business-ISBN.spec
+++ b/perl-Business-ISBN.spec
@@ -1,72 +1,69 @@
Name: perl-Business-ISBN
-Version: 2.05.03
-%define module_version 2.05_03
-Release: 3%{?dist}
+%global cpan_version 2.06
+Version: %(echo '%{cpan_version}' | tr '_' '.'})
+Release: 1%{?dist}
Summary: Perl module to work with International Standard Book Numbers
Group: Development/Libraries
License: GPL+ or Artistic
URL: http://search.cpan.org/dist/Business-ISBN/
-Source0: http://search.cpan.org/CPAN/authors/id/B/BD/BDFOY/Business-ISBN-%{module_...
-BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
-
+Source0: http://search.cpan.org/CPAN/authors/id/B/BD/BDFOY/Business-ISBN-%{cpan_ve...
BuildArch: noarch
-
+BuildRequires: perl
BuildRequires: perl(ExtUtils::MakeMaker)
+# Test::Manifest 1.21 is optional
+# Run-time:
BuildRequires: perl(base)
-BuildRequires: perl(Business::ISBN::Data)
+BuildRequires: perl(Business::ISBN::Data) >= 20120719.001
BuildRequires: perl(Carp)
BuildRequires: perl(Data::Dumper)
BuildRequires: perl(Exporter)
+BuildRequires: perl(strict)
+BuildRequires: perl(subs)
+BuildRequires: perl(vars)
+# Optinonal run-time
BuildRequires: perl(GD::Barcode::EAN13)
-BuildRequires: perl(IO::Socket)
# Break build dependency cycle involving LWP::Simple and URI
%if 0%{!?perl_bootstrap:1}
BuildRequires: perl(LWP::Simple)
%endif
-BuildRequires: perl(Test::More)
-BuildRequires: perl(Test::Pod) >= 1.00
+# Tests:
+BuildRequires: perl(IO::Socket)
+BuildRequires: perl(Test::More) >= 0.95
BuildRequires: perl(Test::Pod::Coverage)
-Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
-
+BuildRequires: perl(warnings)
+# Optional tests:
+BuildRequires: perl(Test::Pod) >= 1.00
+Requires: perl(:MODULE_COMPAT_%(eval "`perl -V:version`"; echo $version))
%description
This modules handles International Standard Book Numbers, including
ISBN-10 and ISBN-13.
-
%prep
-%setup -q -n Business-ISBN-%{module_version}
+%setup -q -n Business-ISBN-%{cpan_version}
%build
-%{__perl} Makefile.PL INSTALLDIRS=vendor
+perl Makefile.PL INSTALLDIRS=vendor
make %{?_smp_mflags}
-
%install
-rm -rf $RPM_BUILD_ROOT
-make pure_install PERL_INSTALL_ROOT=$RPM_BUILD_ROOT
+make pure_install DESTDIR=$RPM_BUILD_ROOT
find $RPM_BUILD_ROOT -type f -name .packlist -exec rm -f {} ';'
-find $RPM_BUILD_ROOT -depth -type d -exec rmdir {} 2>/dev/null ';'
chmod -R u+w $RPM_BUILD_ROOT/*
-
%check
make test
-
-%clean
-rm -rf $RPM_BUILD_ROOT
-
-
%files
-%defattr(-,root,root,-)
-%doc Changes README LICENSE examples/
+%doc Changes LICENSE README
%{perl_vendorlib}/*
%{_mandir}/man3/*.3*
-
%changelog
+* Mon Jun 03 2013 Petr Pisar <ppisar(a)redhat.com> - 2.06-1
+- 2.06 bump
+
* Wed Feb 27 2013 Paul Howarth <paul(a)city-fan.org> - 2.05.03-3
- Don't BR: perl(LWP::Simple) for optional tests when bootstrapping; this is a
cleaner fix than nobbling perl-URI's runtime dependencies
diff --git a/sources b/sources
index 5bb24f5..3c94565 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-c1a2d0ae95b6fc371a98f821620dc4e0 Business-ISBN-2.05_03.tar.gz
+7348e6da7cb0f87702bd5c4be89baf2f Business-ISBN-2.06.tar.gz
10 years, 10 months
Broken dependencies: perl-Bio-ASN1-EntrezGene
by Fedora Koji Build System
perl-Bio-ASN1-EntrezGene has broken dependencies in the rawhide tree:
On x86_64:
perl-Bio-ASN1-EntrezGene-1.091-17.fc19.noarch requires perl(Bio::Index::AbstractSeq)
On i386:
perl-Bio-ASN1-EntrezGene-1.091-17.fc19.noarch requires perl(Bio::Index::AbstractSeq)
Please resolve this as soon as possible.
10 years, 10 months
Broken dependencies: perl-Bio-SamTools
by Fedora Koji Build System
perl-Bio-SamTools has broken dependencies in the rawhide tree:
On x86_64:
perl-Bio-SamTools-1.35-2.fc19.x86_64 requires perl(Bio::SeqFeature::Lite)
perl-Bio-SamTools-1.35-2.fc19.x86_64 requires perl(Bio::PrimarySeq)
On i386:
perl-Bio-SamTools-1.35-2.fc19.i686 requires perl(Bio::SeqFeature::Lite)
perl-Bio-SamTools-1.35-2.fc19.i686 requires perl(Bio::PrimarySeq)
Please resolve this as soon as possible.
10 years, 10 months
Broken dependencies: perl-Bio-ASN1-EntrezGene
by Fedora Koji Build System
perl-Bio-ASN1-EntrezGene has broken dependencies in the F-19 tree:
On x86_64:
perl-Bio-ASN1-EntrezGene-1.091-17.fc19.noarch requires perl(Bio::Index::AbstractSeq)
On i386:
perl-Bio-ASN1-EntrezGene-1.091-17.fc19.noarch requires perl(Bio::Index::AbstractSeq)
Please resolve this as soon as possible.
10 years, 10 months
Broken dependencies: perl-Bio-SamTools
by Fedora Koji Build System
perl-Bio-SamTools has broken dependencies in the F-19 tree:
On x86_64:
perl-Bio-SamTools-1.35-2.fc19.x86_64 requires perl(Bio::SeqFeature::Lite)
perl-Bio-SamTools-1.35-2.fc19.x86_64 requires perl(Bio::PrimarySeq)
On i386:
perl-Bio-SamTools-1.35-2.fc19.i686 requires perl(Bio::SeqFeature::Lite)
perl-Bio-SamTools-1.35-2.fc19.i686 requires perl(Bio::PrimarySeq)
Please resolve this as soon as possible.
10 years, 10 months
[perl-Dancer/f17] Fix CVE-2012-5572 (cookie name CR-LF injection)
by Petr Pisar
commit c91f4c020033d2c7a9e233ade12c5afa40f9d24b
Author: Petr Písař <ppisar(a)redhat.com>
Date: Mon Jun 3 13:24:45 2013 +0200
Fix CVE-2012-5572 (cookie name CR-LF injection)
Dancer-1.3113-CVE-2012-5572-1.patch | 59 +++++++++++++++++++++++++++++++++++
Dancer-1.3113-CVE-2012-5572-2.patch | 29 +++++++++++++++++
perl-Dancer.spec | 11 ++++++-
3 files changed, 98 insertions(+), 1 deletions(-)
---
diff --git a/Dancer-1.3113-CVE-2012-5572-1.patch b/Dancer-1.3113-CVE-2012-5572-1.patch
new file mode 100644
index 0000000..23c3628
--- /dev/null
+++ b/Dancer-1.3113-CVE-2012-5572-1.patch
@@ -0,0 +1,59 @@
+From d21a0983fa95ffea2b50ad5af84cc93f4ce5f4d2 Mon Sep 17 00:00:00 2001
+From: Colin Keith <colinmkeith(a)gmail.com>
+Date: Sat, 25 May 2013 00:46:53 -0400
+Subject: [PATCH 1/2] test and resolution for CVE-2012-5572, \r\n sequence
+ being allowed in a cookie name fixes PerlDancer/Dancer#859
+
+---
+ t/12_response/11_CVE-2012-5572.t | 39 +++++++++++++++++++++++++++++++++++++++
+ 1 file changed, 39 insertions(+)
+ create mode 100644 t/12_response/11_CVE-2012-5572.t
+
+diff --git a/t/12_response/11_CVE-2012-5572.t b/t/12_response/11_CVE-2012-5572.t
+new file mode 100644
+index 0000000..2b6eacb
+--- /dev/null
++++ b/t/12_response/11_CVE-2012-5572.t
+@@ -0,0 +1,39 @@
++package main;
++use strict;
++use warnings;
++use Test::More tests => 2, import => ['!pass'];
++
++{
++ use Dancer;
++ get '/CVE-2012-5572-cookie' => sub {
++ cookie "test\r\nX-Evil-Header: " => "evil";
++ };
++}
++
++
++use Dancer::Test;
++{
++ note "Testing CVE-2012-5572 (CRLF in response headers)";
++ my $req = [GET => '/CVE-2012-5572-cookie'];
++ route_exists $req;
++ my $response = Dancer::Test::_req_to_response($req);
++
++ my $CRLF = "\r\n";
++
++ my $tb = Test::Builder->new;
++ my %headers = @{$response->headers_to_array};
++ my $foundCRLF = 0;
++ while (my($name, $value) = each %headers) {
++ index($value, $CRLF) == -1
++ && index($name, $CRLF) == -1
++ && next;
++ $foundCRLF = 1;
++ last;
++ }
++
++ $tb->ok(!$foundCRLF, 'Headers do not contain CRLF (CVE-2012-5572)');
++}
++
++
++1;
++
+--
+1.8.1.4
+
diff --git a/Dancer-1.3113-CVE-2012-5572-2.patch b/Dancer-1.3113-CVE-2012-5572-2.patch
new file mode 100644
index 0000000..911f32b
--- /dev/null
+++ b/Dancer-1.3113-CVE-2012-5572-2.patch
@@ -0,0 +1,29 @@
+From 46ef9124f3149f697455061499ac7cee40930349 Mon Sep 17 00:00:00 2001
+From: Colin Keith <colinmkeith(a)gmail.com>
+Date: Sat, 25 May 2013 22:56:31 -0400
+Subject: [PATCH 2/2] resolution for CVE-2012-5572, \r\n sequence being allowed
+ in a cookie name fixes PerlDancer/Dancer#859
+
+---
+ lib/Dancer/Cookie.pm | 5 ++++-
+ 1 file changed, 4 insertions(+), 1 deletion(-)
+
+diff --git a/lib/Dancer/Cookie.pm b/lib/Dancer/Cookie.pm
+index efcb1a3..e736ab8 100644
+--- a/lib/Dancer/Cookie.pm
++++ b/lib/Dancer/Cookie.pm
+@@ -29,7 +29,10 @@ sub to_header {
+ my $value = join('&', map {uri_escape($_)} $self->value);
+ my $no_httponly = defined( $self->http_only ) && $self->http_only == 0;
+
+- my @headers = $self->name . '=' . $value;
++ my $name = $self->name;
++ $name =~ s/[=,; \t\r\n\013\014]//mg;
++
++ my @headers = $name . '=' . $value;
+ push @headers, "path=" . $self->path if $self->path;
+ push @headers, "expires=" . $self->expires if $self->expires;
+ push @headers, "domain=" . $self->domain if $self->domain;
+--
+1.8.1.4
+
diff --git a/perl-Dancer.spec b/perl-Dancer.spec
index 36c7be6..5fefe6d 100644
--- a/perl-Dancer.spec
+++ b/perl-Dancer.spec
@@ -1,6 +1,6 @@
Name: perl-Dancer
Version: 1.3093
-Release: 2%{?dist}
+Release: 3%{?dist}
Summary: Lightweight yet powerful web application framework
License: GPL+ or Artistic
Group: Development/Libraries
@@ -8,6 +8,10 @@ URL: http://search.cpan.org/dist/Dancer/
Source0: http://www.cpan.org/authors/id/X/XS/XSAWYERX/Dancer-%{version}.tar.gz
# Bug #960184, GitHub #PerlDancer/Dancer/919
Patch0: Dancer-1.3112-Return-non-zero-exit-code-on-bad-application-name.patch
+# Bug #880330, test for CVE-2012-5572, GiHub #PerlDancer/Dancer/859
+Patch1: Dancer-1.3113-CVE-2012-5572-1.patch
+# Bug #880330, fix for CVE-2012-5572, GiHub #PerlDancer/Dancer/859
+Patch2: Dancer-1.3113-CVE-2012-5572-2.patch
BuildArch: noarch
BuildRequires: perl(base)
BuildRequires: perl(Carp)
@@ -86,6 +90,8 @@ your code.
%prep
%setup -q -n Dancer-%{version}
%patch0 -p1
+%patch1 -p1
+%patch2 -p1
%build
perl Makefile.PL INSTALLDIRS=vendor
@@ -108,6 +114,9 @@ make test
%{_mandir}/man3/*
%changelog
+* Mon Jun 03 2013 Petr Pisar <ppisar(a)redhat.com> - 1.3093-3
+- Fix CVE-2012-5572 (cookie name CR-LF injection) (bug #880330)
+
* Tue May 07 2013 Petr Pisar <ppisar(a)redhat.com> - 1.3093-2
- Return proper exit code on dancer tool failure (bug #960184)
10 years, 10 months