Compare commits
11 Commits
8bb7920325
...
4a417ae1a4
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
4a417ae1a4 | ||
|
|
276c9ef77c | ||
|
|
ebe03a9ce4 | ||
|
|
edb6e9f7ab | ||
|
|
ff35179096 | ||
|
|
93b823fb78 | ||
|
|
7bc6fb34e2 | ||
|
|
c8671252b9 | ||
|
|
672b6ba190 | ||
|
|
123ff20ef0 | ||
|
|
2fe7675698 |
BIN
DBI-1.642.tar.gz
BIN
DBI-1.642.tar.gz
Binary file not shown.
BIN
DBI-1.643.tar.gz
Normal file
BIN
DBI-1.643.tar.gz
Normal file
Binary file not shown.
42
backport-CVE-2014-10402.patch
Normal file
42
backport-CVE-2014-10402.patch
Normal file
@ -0,0 +1,42 @@
|
||||
From 19d0fb169eed475e1c053e99036b8668625cfa94 Mon Sep 17 00:00:00 2001
|
||||
From: Jens Rehsack <sno@netbsd.org>
|
||||
Date: Tue, 6 Oct 2020 10:22:17 +0200
|
||||
Subject: [PATCH] lib/DBD/File.pm: fix CVE-2014-10401
|
||||
|
||||
Dig into the root cause of RT#99508 - which resulted in CVE-2014-10401 - and
|
||||
figure out that DBI->parse_dsn is the wrong helper to parse our attributes in
|
||||
DSN, since in DBD::dr::connect only the "dbname" remains from DSN which causes
|
||||
parse_dsn to bailout.
|
||||
|
||||
Parsing on our own similar to parse_dsn shows the way out.
|
||||
|
||||
Signed-off-by: Jens Rehsack <sno@netbsd.org>
|
||||
---
|
||||
lib/DBD/File.pm | 7 +++++--
|
||||
1 file changed, 5 insertions(+), 2 deletions(-)
|
||||
|
||||
diff --git a/lib/DBD/File.pm b/lib/DBD/File.pm
|
||||
index fb14e9a..f55076f 100644
|
||||
--- a/lib/DBD/File.pm
|
||||
+++ b/lib/DBD/File.pm
|
||||
@@ -109,7 +109,11 @@ sub connect
|
||||
# We do not (yet) care about conflicting attributes here
|
||||
# my $dbh = DBI->connect ("dbi:CSV:f_dir=test", undef, undef, { f_dir => "text" });
|
||||
# will test here that both test and text should exist
|
||||
- if (my $attr_hash = (DBI->parse_dsn ($dbname))[3]) {
|
||||
+ #
|
||||
+ # Parsing on our own similar to parse_dsn to find attributes in 'dbname' parameter.
|
||||
+ if ($dbname) {
|
||||
+ my @attrs = split /;/ => $dbname;
|
||||
+ my $attr_hash = { map { split /\s*=>?\s*|\s*,\s*/, $_} @attrs };
|
||||
if (defined $attr_hash->{f_dir} && ! -d $attr_hash->{f_dir}) {
|
||||
my $msg = "No such directory '$attr_hash->{f_dir}";
|
||||
$drh->set_err (2, $msg);
|
||||
@@ -120,7 +124,6 @@ sub connect
|
||||
if ($attr and defined $attr->{f_dir} && ! -d $attr->{f_dir}) {
|
||||
my $msg = "No such directory '$attr->{f_dir}";
|
||||
$drh->set_err (2, $msg);
|
||||
- $attr->{RaiseError} and croak $msg;
|
||||
return;
|
||||
}
|
||||
|
||||
@ -1,12 +1,14 @@
|
||||
Name: perl-DBI
|
||||
Version: 1.642
|
||||
Version: 1.643
|
||||
Release: 3
|
||||
Summary: Database independent interface for Perl
|
||||
License: GPL+ or Artistic
|
||||
URL: http://dbi.perl.org/
|
||||
Source0: https://cpan.metacpan.org/authors/id/T/TI/TIMB/DBI-%{version}.tar.gz
|
||||
BuildRequires: perl-generators perl-interpreter perl(ExtUtils::MakeMaker) >= 6.76 perl(Test::More)
|
||||
BuildRequires: perl-devel
|
||||
BuildRequires: perl-devel gcc
|
||||
|
||||
Patch6000: backport-CVE-2014-10402.patch
|
||||
|
||||
Requires: perl(:MODULE_COMPAT_%(eval "`perl -V:version`"; echo $version)) perl(Math::BigInt)
|
||||
|
||||
@ -67,6 +69,18 @@ make test
|
||||
%{_mandir}/*/*
|
||||
|
||||
%changelog
|
||||
* Sat Apr 09 2022 shixuantong <shixuantong@h-partners.com> - 1.643-3
|
||||
- fix CVE-2014-10402
|
||||
|
||||
* Wed Jun 23 2021 liudabo <liudabo1@huawei.com> - 1.643-2
|
||||
- Add gcc build dependcy
|
||||
|
||||
* Thu Jul 23 2020 xinghe <xinghe1@huawei.com> - 1.643-1
|
||||
- Type:enhancement
|
||||
- ID:NA
|
||||
- SUG:NA
|
||||
- DESC:update version to 1.643
|
||||
|
||||
* Wed May 13 2020 openEuler Buildteam <buildteam@openeuler.org> - 1.642-3
|
||||
- Type:enhancement
|
||||
- ID:NA
|
||||
|
||||
298
perl-DBI.yaml
Normal file
298
perl-DBI.yaml
Normal file
@ -0,0 +1,298 @@
|
||||
---
|
||||
version_control: metacpan
|
||||
src_repo: DBI
|
||||
tag_prefix: "^v"
|
||||
seperator: "."
|
||||
last_query:
|
||||
time_stamp: 2020-04-26 07:40:42.711686420 +00:00
|
||||
raw_data: |
|
||||
{
|
||||
"first" : false,
|
||||
"abstract" : "Database independent interface for Perl",
|
||||
"dependency" : [
|
||||
{
|
||||
"module" : "ExtUtils::MakeMaker",
|
||||
"relationship" : "requires",
|
||||
"version" : "0",
|
||||
"phase" : "configure"
|
||||
},
|
||||
{
|
||||
"phase" : "runtime",
|
||||
"version" : "5.008001",
|
||||
"relationship" : "requires",
|
||||
"module" : "perl"
|
||||
},
|
||||
{
|
||||
"relationship" : "conflicts",
|
||||
"version" : "0.072",
|
||||
"phase" : "runtime",
|
||||
"module" : "DBD::RAM"
|
||||
},
|
||||
{
|
||||
"module" : "DBD::Google",
|
||||
"version" : "0.51",
|
||||
"relationship" : "conflicts",
|
||||
"phase" : "runtime"
|
||||
},
|
||||
{
|
||||
"version" : "0.36",
|
||||
"relationship" : "conflicts",
|
||||
"phase" : "runtime",
|
||||
"module" : "DBD::CSV"
|
||||
},
|
||||
{
|
||||
"module" : "SQL::Statement",
|
||||
"version" : "1.33",
|
||||
"relationship" : "conflicts",
|
||||
"phase" : "runtime"
|
||||
},
|
||||
{
|
||||
"module" : "DBD::AnyData",
|
||||
"phase" : "runtime",
|
||||
"relationship" : "conflicts",
|
||||
"version" : "0.110"
|
||||
},
|
||||
{
|
||||
"relationship" : "conflicts",
|
||||
"version" : "0.10",
|
||||
"phase" : "runtime",
|
||||
"module" : "DBD::Amazon"
|
||||
},
|
||||
{
|
||||
"version" : "2.10",
|
||||
"relationship" : "conflicts",
|
||||
"phase" : "runtime",
|
||||
"module" : "DBD::PO"
|
||||
},
|
||||
{
|
||||
"relationship" : "requires",
|
||||
"version" : "0.90",
|
||||
"phase" : "build",
|
||||
"module" : "Test::Simple"
|
||||
},
|
||||
{
|
||||
"module" : "ExtUtils::MakeMaker",
|
||||
"phase" : "build",
|
||||
"relationship" : "requires",
|
||||
"version" : "6.48"
|
||||
}
|
||||
],
|
||||
"distribution" : "DBI",
|
||||
"status" : "latest",
|
||||
"date" : "2020-01-31T19:02:41",
|
||||
"maturity" : "released",
|
||||
"download_url" : "https://cpan.metacpan.org/authors/id/T/TI/TIMB/DBI-1.643.tar.gz",
|
||||
"name" : "DBI-1.643",
|
||||
"tests" : {
|
||||
"fail" : 75,
|
||||
"pass" : 1495,
|
||||
"unknown" : 47,
|
||||
"na" : 0
|
||||
},
|
||||
"metadata" : {
|
||||
"resources" : {
|
||||
"x_IRC" : "irc://irc.perl.org/#dbi",
|
||||
"repository" : {
|
||||
"url" : "https://github.com/perl5-dbi/dbi"
|
||||
},
|
||||
"license" : [
|
||||
"http://dev.perl.org/licenses/"
|
||||
],
|
||||
"homepage" : "http://dbi.perl.org/",
|
||||
"x_MailingList" : "mailto:dbi-dev@perl.org"
|
||||
},
|
||||
"x_suggests" : {
|
||||
"SQL::Statement" : 1.402,
|
||||
"Net::Daemon" : 0,
|
||||
"DB_File" : 0,
|
||||
"RPC::PlServer" : 0.2001,
|
||||
"Clone" : 0.34,
|
||||
"MLDBM" : 0
|
||||
},
|
||||
"dynamic_config" : 1,
|
||||
"x_serialization_backend" : "JSON::PP version 2.27400_02",
|
||||
"release_status" : "stable",
|
||||
"author" : [
|
||||
"Tim Bunce (dbi-users@perl.org)"
|
||||
],
|
||||
"name" : "DBI",
|
||||
"license" : [
|
||||
"perl_5"
|
||||
],
|
||||
"generated_by" : "ExtUtils::MakeMaker version 7.24, CPAN::Meta::Converter version 2.150010",
|
||||
"prereqs" : {
|
||||
"runtime" : {
|
||||
"requires" : {
|
||||
"perl" : "5.008001"
|
||||
},
|
||||
"conflicts" : {
|
||||
"DBD::PO" : "2.10",
|
||||
"DBD::CSV" : "0.36",
|
||||
"DBD::Amazon" : "0.10",
|
||||
"DBD::AnyData" : "0.110",
|
||||
"SQL::Statement" : "1.33",
|
||||
"DBD::RAM" : "0.072",
|
||||
"DBD::Google" : "0.51"
|
||||
}
|
||||
},
|
||||
"configure" : {
|
||||
"requires" : {
|
||||
"ExtUtils::MakeMaker" : "0"
|
||||
}
|
||||
},
|
||||
"build" : {
|
||||
"requires" : {
|
||||
"Test::Simple" : "0.90",
|
||||
"ExtUtils::MakeMaker" : "6.48"
|
||||
}
|
||||
}
|
||||
},
|
||||
"abstract" : "Database independent interface for Perl",
|
||||
"meta-spec" : {
|
||||
"url" : "http://search.cpan.org/perldoc?CPAN::Meta::Spec",
|
||||
"version" : 2
|
||||
},
|
||||
"no_index" : {
|
||||
"directory" : [
|
||||
"t",
|
||||
"inc",
|
||||
"t",
|
||||
"xt",
|
||||
"inc",
|
||||
"local",
|
||||
"perl5",
|
||||
"fatlib",
|
||||
"example",
|
||||
"blib",
|
||||
"examples",
|
||||
"eg"
|
||||
]
|
||||
},
|
||||
"version" : "1.643"
|
||||
},
|
||||
"deprecated" : false,
|
||||
"version" : "1.643",
|
||||
"stat" : {
|
||||
"mode" : 33204,
|
||||
"mtime" : 1580497361,
|
||||
"size" : 612372
|
||||
},
|
||||
"authorized" : true,
|
||||
"provides" : [
|
||||
"Bundle::DBI",
|
||||
"DBD::DBM",
|
||||
"DBD::DBM::Statement",
|
||||
"DBD::DBM::Table",
|
||||
"DBD::DBM::db",
|
||||
"DBD::DBM::dr",
|
||||
"DBD::DBM::st",
|
||||
"DBD::ExampleP",
|
||||
"DBD::ExampleP::db",
|
||||
"DBD::ExampleP::dr",
|
||||
"DBD::ExampleP::st",
|
||||
"DBD::File",
|
||||
"DBD::File::DataSource::File",
|
||||
"DBD::File::DataSource::Stream",
|
||||
"DBD::File::Statement",
|
||||
"DBD::File::Table",
|
||||
"DBD::File::TableSource::FileSystem",
|
||||
"DBD::File::db",
|
||||
"DBD::File::dr",
|
||||
"DBD::File::st",
|
||||
"DBD::Gofer",
|
||||
"DBD::Gofer::Policy::Base",
|
||||
"DBD::Gofer::Policy::classic",
|
||||
"DBD::Gofer::Policy::pedantic",
|
||||
"DBD::Gofer::Policy::rush",
|
||||
"DBD::Gofer::Transport::Base",
|
||||
"DBD::Gofer::Transport::corostream",
|
||||
"DBD::Gofer::Transport::null",
|
||||
"DBD::Gofer::Transport::pipeone",
|
||||
"DBD::Gofer::Transport::stream",
|
||||
"DBD::Gofer::db",
|
||||
"DBD::Gofer::dr",
|
||||
"DBD::Gofer::st",
|
||||
"DBD::Mem",
|
||||
"DBD::Mem::DataSource",
|
||||
"DBD::Mem::Statement",
|
||||
"DBD::Mem::Table",
|
||||
"DBD::Mem::db",
|
||||
"DBD::Mem::dr",
|
||||
"DBD::Mem::st",
|
||||
"DBD::NullP",
|
||||
"DBD::NullP::db",
|
||||
"DBD::NullP::dr",
|
||||
"DBD::NullP::st",
|
||||
"DBD::Proxy",
|
||||
"DBD::Proxy::RPC::PlClient",
|
||||
"DBD::Proxy::db",
|
||||
"DBD::Proxy::dr",
|
||||
"DBD::Proxy::st",
|
||||
"DBD::Sponge",
|
||||
"DBD::Sponge::db",
|
||||
"DBD::Sponge::dr",
|
||||
"DBD::Sponge::st",
|
||||
"DBDI",
|
||||
"DBI",
|
||||
"DBI::Const::GetInfo::ANSI",
|
||||
"DBI::Const::GetInfo::ODBC",
|
||||
"DBI::Const::GetInfoReturn",
|
||||
"DBI::Const::GetInfoType",
|
||||
"DBI::DBD",
|
||||
"DBI::DBD::Metadata",
|
||||
"DBI::DBD::SqlEngine",
|
||||
"DBI::DBD::SqlEngine::DataSource",
|
||||
"DBI::DBD::SqlEngine::Statement",
|
||||
"DBI::DBD::SqlEngine::Table",
|
||||
"DBI::DBD::SqlEngine::TableSource",
|
||||
"DBI::DBD::SqlEngine::TieMeta",
|
||||
"DBI::DBD::SqlEngine::TieTables",
|
||||
"DBI::DBD::SqlEngine::db",
|
||||
"DBI::DBD::SqlEngine::dr",
|
||||
"DBI::DBD::SqlEngine::st",
|
||||
"DBI::Gofer::Execute",
|
||||
"DBI::Gofer::Request",
|
||||
"DBI::Gofer::Response",
|
||||
"DBI::Gofer::Serializer::Base",
|
||||
"DBI::Gofer::Serializer::DataDumper",
|
||||
"DBI::Gofer::Serializer::Storable",
|
||||
"DBI::Gofer::Transport::Base",
|
||||
"DBI::Gofer::Transport::pipeone",
|
||||
"DBI::Gofer::Transport::stream",
|
||||
"DBI::Profile",
|
||||
"DBI::ProfileData",
|
||||
"DBI::ProfileDumper",
|
||||
"DBI::ProfileDumper::Apache",
|
||||
"DBI::ProfileSubs",
|
||||
"DBI::ProxyServer",
|
||||
"DBI::ProxyServer::db",
|
||||
"DBI::ProxyServer::dr",
|
||||
"DBI::ProxyServer::st",
|
||||
"DBI::SQL::Nano",
|
||||
"DBI::SQL::Nano::Statement_",
|
||||
"DBI::SQL::Nano::Table_",
|
||||
"DBI::Util::CacheMemory",
|
||||
"DBI::Util::_accessor",
|
||||
"DBI::common"
|
||||
],
|
||||
"id" : "wUU9iUXrS9CuMzYmqtw3WWNgrBc",
|
||||
"checksum_md5" : "352f80b1e23769c116082a90905d7398",
|
||||
"main_module" : "DBI",
|
||||
"resources" : {
|
||||
"license" : [
|
||||
"http://dev.perl.org/licenses/"
|
||||
],
|
||||
"repository" : {
|
||||
"url" : "https://github.com/perl5-dbi/dbi"
|
||||
},
|
||||
"homepage" : "http://dbi.perl.org/"
|
||||
},
|
||||
"checksum_sha256" : "8a2b993db560a2c373c174ee976a51027dd780ec766ae17620c20393d2e836fa",
|
||||
"changes_file" : "Changes",
|
||||
"author" : "TIMB",
|
||||
"archive" : "DBI-1.643.tar.gz",
|
||||
"license" : [
|
||||
"perl_5"
|
||||
],
|
||||
"version_numified" : 1.643
|
||||
}
|
||||
Loading…
x
Reference in New Issue
Block a user