Compare commits

...

11 Commits

Author SHA1 Message Date
openeuler-ci-bot
4a417ae1a4
!14 【轻量级 PR】:fix bogus date in %changelog
From: @zhangkea 
Reviewed-by: @shinwell_hu 
Signed-off-by: @shinwell_hu
2022-06-16 09:17:52 +00:00
ut001695
276c9ef77c fix bogus date in %changelog 2022-06-15 15:47:53 +08:00
openeuler-ci-bot
ebe03a9ce4
!9 [sync] PR-7: fix CVE-2014-10402
From: @openeuler-sync-bot 
Reviewed-by: @shinwell_hu 
Signed-off-by: @shinwell_hu
2022-04-14 01:11:50 +00:00
shixuantong
edb6e9f7ab fix CVE-2014-10402
(cherry picked from commit 59651e0af597cc43cc387d61761f7f815a3b12cf)
2022-04-12 14:44:58 +08:00
openeuler-ci-bot
ff35179096 !6 Add gcc build dependency
From: @run-is-pig
Reviewed-by: @shinwell_hu
Signed-off-by: @shinwell_hu
2021-06-25 09:02:06 +00:00
yangl777
93b823fb78 Add gcc build dependcy 2021-06-25 14:54:49 +08:00
openeuler-ci-bot
7bc6fb34e2 !4 perl-DBI
Merge pull request !4 from xinghe/master
2020-07-26 16:49:48 +08:00
phanddy
c8671252b9 update version to 1.643 2020-07-23 18:36:54 +08:00
phanddy
672b6ba190 update version to 1.643 2020-07-23 18:34:54 +08:00
openeuler-ci-bot
123ff20ef0 !3 add yaml file in package
Merge pull request !3 from 吴超超/master
2020-07-02 14:52:21 +08:00
19909236985
2fe7675698 add yaml file in package 2020-06-13 17:00:50 +08:00
5 changed files with 356 additions and 2 deletions

Binary file not shown.

BIN
DBI-1.643.tar.gz Normal file

Binary file not shown.

View File

@ -0,0 +1,42 @@
From 19d0fb169eed475e1c053e99036b8668625cfa94 Mon Sep 17 00:00:00 2001
From: Jens Rehsack <sno@netbsd.org>
Date: Tue, 6 Oct 2020 10:22:17 +0200
Subject: [PATCH] lib/DBD/File.pm: fix CVE-2014-10401
Dig into the root cause of RT#99508 - which resulted in CVE-2014-10401 - and
figure out that DBI->parse_dsn is the wrong helper to parse our attributes in
DSN, since in DBD::dr::connect only the "dbname" remains from DSN which causes
parse_dsn to bailout.
Parsing on our own similar to parse_dsn shows the way out.
Signed-off-by: Jens Rehsack <sno@netbsd.org>
---
lib/DBD/File.pm | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/lib/DBD/File.pm b/lib/DBD/File.pm
index fb14e9a..f55076f 100644
--- a/lib/DBD/File.pm
+++ b/lib/DBD/File.pm
@@ -109,7 +109,11 @@ sub connect
# We do not (yet) care about conflicting attributes here
# my $dbh = DBI->connect ("dbi:CSV:f_dir=test", undef, undef, { f_dir => "text" });
# will test here that both test and text should exist
- if (my $attr_hash = (DBI->parse_dsn ($dbname))[3]) {
+ #
+ # Parsing on our own similar to parse_dsn to find attributes in 'dbname' parameter.
+ if ($dbname) {
+ my @attrs = split /;/ => $dbname;
+ my $attr_hash = { map { split /\s*=>?\s*|\s*,\s*/, $_} @attrs };
if (defined $attr_hash->{f_dir} && ! -d $attr_hash->{f_dir}) {
my $msg = "No such directory '$attr_hash->{f_dir}";
$drh->set_err (2, $msg);
@@ -120,7 +124,6 @@ sub connect
if ($attr and defined $attr->{f_dir} && ! -d $attr->{f_dir}) {
my $msg = "No such directory '$attr->{f_dir}";
$drh->set_err (2, $msg);
- $attr->{RaiseError} and croak $msg;
return;
}

View File

@ -1,12 +1,14 @@
Name: perl-DBI
Version: 1.642
Version: 1.643
Release: 3
Summary: Database independent interface for Perl
License: GPL+ or Artistic
URL: http://dbi.perl.org/
Source0: https://cpan.metacpan.org/authors/id/T/TI/TIMB/DBI-%{version}.tar.gz
BuildRequires: perl-generators perl-interpreter perl(ExtUtils::MakeMaker) >= 6.76 perl(Test::More)
BuildRequires: perl-devel
BuildRequires: perl-devel gcc
Patch6000: backport-CVE-2014-10402.patch
Requires: perl(:MODULE_COMPAT_%(eval "`perl -V:version`"; echo $version)) perl(Math::BigInt)
@ -67,6 +69,18 @@ make test
%{_mandir}/*/*
%changelog
* Sat Apr 09 2022 shixuantong <shixuantong@h-partners.com> - 1.643-3
- fix CVE-2014-10402
* Wed Jun 23 2021 liudabo <liudabo1@huawei.com> - 1.643-2
- Add gcc build dependcy
* Thu Jul 23 2020 xinghe <xinghe1@huawei.com> - 1.643-1
- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.643
* Wed May 13 2020 openEuler Buildteam <buildteam@openeuler.org> - 1.642-3
- Type:enhancement
- ID:NA

298
perl-DBI.yaml Normal file
View File

@ -0,0 +1,298 @@
---
version_control: metacpan
src_repo: DBI
tag_prefix: "^v"
seperator: "."
last_query:
time_stamp: 2020-04-26 07:40:42.711686420 +00:00
raw_data: |
{
"first" : false,
"abstract" : "Database independent interface for Perl",
"dependency" : [
{
"module" : "ExtUtils::MakeMaker",
"relationship" : "requires",
"version" : "0",
"phase" : "configure"
},
{
"phase" : "runtime",
"version" : "5.008001",
"relationship" : "requires",
"module" : "perl"
},
{
"relationship" : "conflicts",
"version" : "0.072",
"phase" : "runtime",
"module" : "DBD::RAM"
},
{
"module" : "DBD::Google",
"version" : "0.51",
"relationship" : "conflicts",
"phase" : "runtime"
},
{
"version" : "0.36",
"relationship" : "conflicts",
"phase" : "runtime",
"module" : "DBD::CSV"
},
{
"module" : "SQL::Statement",
"version" : "1.33",
"relationship" : "conflicts",
"phase" : "runtime"
},
{
"module" : "DBD::AnyData",
"phase" : "runtime",
"relationship" : "conflicts",
"version" : "0.110"
},
{
"relationship" : "conflicts",
"version" : "0.10",
"phase" : "runtime",
"module" : "DBD::Amazon"
},
{
"version" : "2.10",
"relationship" : "conflicts",
"phase" : "runtime",
"module" : "DBD::PO"
},
{
"relationship" : "requires",
"version" : "0.90",
"phase" : "build",
"module" : "Test::Simple"
},
{
"module" : "ExtUtils::MakeMaker",
"phase" : "build",
"relationship" : "requires",
"version" : "6.48"
}
],
"distribution" : "DBI",
"status" : "latest",
"date" : "2020-01-31T19:02:41",
"maturity" : "released",
"download_url" : "https://cpan.metacpan.org/authors/id/T/TI/TIMB/DBI-1.643.tar.gz",
"name" : "DBI-1.643",
"tests" : {
"fail" : 75,
"pass" : 1495,
"unknown" : 47,
"na" : 0
},
"metadata" : {
"resources" : {
"x_IRC" : "irc://irc.perl.org/#dbi",
"repository" : {
"url" : "https://github.com/perl5-dbi/dbi"
},
"license" : [
"http://dev.perl.org/licenses/"
],
"homepage" : "http://dbi.perl.org/",
"x_MailingList" : "mailto:dbi-dev@perl.org"
},
"x_suggests" : {
"SQL::Statement" : 1.402,
"Net::Daemon" : 0,
"DB_File" : 0,
"RPC::PlServer" : 0.2001,
"Clone" : 0.34,
"MLDBM" : 0
},
"dynamic_config" : 1,
"x_serialization_backend" : "JSON::PP version 2.27400_02",
"release_status" : "stable",
"author" : [
"Tim Bunce (dbi-users@perl.org)"
],
"name" : "DBI",
"license" : [
"perl_5"
],
"generated_by" : "ExtUtils::MakeMaker version 7.24, CPAN::Meta::Converter version 2.150010",
"prereqs" : {
"runtime" : {
"requires" : {
"perl" : "5.008001"
},
"conflicts" : {
"DBD::PO" : "2.10",
"DBD::CSV" : "0.36",
"DBD::Amazon" : "0.10",
"DBD::AnyData" : "0.110",
"SQL::Statement" : "1.33",
"DBD::RAM" : "0.072",
"DBD::Google" : "0.51"
}
},
"configure" : {
"requires" : {
"ExtUtils::MakeMaker" : "0"
}
},
"build" : {
"requires" : {
"Test::Simple" : "0.90",
"ExtUtils::MakeMaker" : "6.48"
}
}
},
"abstract" : "Database independent interface for Perl",
"meta-spec" : {
"url" : "http://search.cpan.org/perldoc?CPAN::Meta::Spec",
"version" : 2
},
"no_index" : {
"directory" : [
"t",
"inc",
"t",
"xt",
"inc",
"local",
"perl5",
"fatlib",
"example",
"blib",
"examples",
"eg"
]
},
"version" : "1.643"
},
"deprecated" : false,
"version" : "1.643",
"stat" : {
"mode" : 33204,
"mtime" : 1580497361,
"size" : 612372
},
"authorized" : true,
"provides" : [
"Bundle::DBI",
"DBD::DBM",
"DBD::DBM::Statement",
"DBD::DBM::Table",
"DBD::DBM::db",
"DBD::DBM::dr",
"DBD::DBM::st",
"DBD::ExampleP",
"DBD::ExampleP::db",
"DBD::ExampleP::dr",
"DBD::ExampleP::st",
"DBD::File",
"DBD::File::DataSource::File",
"DBD::File::DataSource::Stream",
"DBD::File::Statement",
"DBD::File::Table",
"DBD::File::TableSource::FileSystem",
"DBD::File::db",
"DBD::File::dr",
"DBD::File::st",
"DBD::Gofer",
"DBD::Gofer::Policy::Base",
"DBD::Gofer::Policy::classic",
"DBD::Gofer::Policy::pedantic",
"DBD::Gofer::Policy::rush",
"DBD::Gofer::Transport::Base",
"DBD::Gofer::Transport::corostream",
"DBD::Gofer::Transport::null",
"DBD::Gofer::Transport::pipeone",
"DBD::Gofer::Transport::stream",
"DBD::Gofer::db",
"DBD::Gofer::dr",
"DBD::Gofer::st",
"DBD::Mem",
"DBD::Mem::DataSource",
"DBD::Mem::Statement",
"DBD::Mem::Table",
"DBD::Mem::db",
"DBD::Mem::dr",
"DBD::Mem::st",
"DBD::NullP",
"DBD::NullP::db",
"DBD::NullP::dr",
"DBD::NullP::st",
"DBD::Proxy",
"DBD::Proxy::RPC::PlClient",
"DBD::Proxy::db",
"DBD::Proxy::dr",
"DBD::Proxy::st",
"DBD::Sponge",
"DBD::Sponge::db",
"DBD::Sponge::dr",
"DBD::Sponge::st",
"DBDI",
"DBI",
"DBI::Const::GetInfo::ANSI",
"DBI::Const::GetInfo::ODBC",
"DBI::Const::GetInfoReturn",
"DBI::Const::GetInfoType",
"DBI::DBD",
"DBI::DBD::Metadata",
"DBI::DBD::SqlEngine",
"DBI::DBD::SqlEngine::DataSource",
"DBI::DBD::SqlEngine::Statement",
"DBI::DBD::SqlEngine::Table",
"DBI::DBD::SqlEngine::TableSource",
"DBI::DBD::SqlEngine::TieMeta",
"DBI::DBD::SqlEngine::TieTables",
"DBI::DBD::SqlEngine::db",
"DBI::DBD::SqlEngine::dr",
"DBI::DBD::SqlEngine::st",
"DBI::Gofer::Execute",
"DBI::Gofer::Request",
"DBI::Gofer::Response",
"DBI::Gofer::Serializer::Base",
"DBI::Gofer::Serializer::DataDumper",
"DBI::Gofer::Serializer::Storable",
"DBI::Gofer::Transport::Base",
"DBI::Gofer::Transport::pipeone",
"DBI::Gofer::Transport::stream",
"DBI::Profile",
"DBI::ProfileData",
"DBI::ProfileDumper",
"DBI::ProfileDumper::Apache",
"DBI::ProfileSubs",
"DBI::ProxyServer",
"DBI::ProxyServer::db",
"DBI::ProxyServer::dr",
"DBI::ProxyServer::st",
"DBI::SQL::Nano",
"DBI::SQL::Nano::Statement_",
"DBI::SQL::Nano::Table_",
"DBI::Util::CacheMemory",
"DBI::Util::_accessor",
"DBI::common"
],
"id" : "wUU9iUXrS9CuMzYmqtw3WWNgrBc",
"checksum_md5" : "352f80b1e23769c116082a90905d7398",
"main_module" : "DBI",
"resources" : {
"license" : [
"http://dev.perl.org/licenses/"
],
"repository" : {
"url" : "https://github.com/perl5-dbi/dbi"
},
"homepage" : "http://dbi.perl.org/"
},
"checksum_sha256" : "8a2b993db560a2c373c174ee976a51027dd780ec766ae17620c20393d2e836fa",
"changes_file" : "Changes",
"author" : "TIMB",
"archive" : "DBI-1.643.tar.gz",
"license" : [
"perl_5"
],
"version_numified" : 1.643
}