!14 【轻量级 PR】：fix bogus date in %changelog

From: @zhangkea 
Reviewed-by: @shinwell_hu 
Signed-off-by: @shinwell_hu

backport-CVE-2014-10402.patch

@@ -0,0 +1,42 @@
+From 19d0fb169eed475e1c053e99036b8668625cfa94 Mon Sep 17 00:00:00 2001
+From: Jens Rehsack <sno@netbsd.org>
+Date: Tue, 6 Oct 2020 10:22:17 +0200
+Subject: [PATCH] lib/DBD/File.pm: fix CVE-2014-10401
+
+Dig into the root cause of RT#99508 - which resulted in CVE-2014-10401 - and
+figure out that DBI->parse_dsn is the wrong helper to parse our attributes in
+DSN, since in DBD::dr::connect only the "dbname" remains from DSN which causes
+parse_dsn to bailout.
+
+Parsing on our own similar to parse_dsn shows the way out.
+
+Signed-off-by: Jens Rehsack <sno@netbsd.org>
+---
+ lib/DBD/File.pm | 7 +++++--
+ 1 file changed, 5 insertions(+), 2 deletions(-)
+
+diff --git a/lib/DBD/File.pm b/lib/DBD/File.pm
+index fb14e9a..f55076f 100644
+--- a/lib/DBD/File.pm
++++ b/lib/DBD/File.pm
+@@ -109,7 +109,11 @@ sub connect
+     # We do not (yet) care about conflicting attributes here
+     # my $dbh = DBI->connect ("dbi:CSV:f_dir=test", undef, undef, { f_dir => "text" });
+     # will test here that both test and text should exist
+-    if (my $attr_hash = (DBI->parse_dsn ($dbname))[3]) {
++    #
++    # Parsing on our own similar to parse_dsn to find attributes in 'dbname' parameter.
++    if ($dbname) {
++	my @attrs = split /;/ => $dbname;
++	my $attr_hash = { map { split /\s*=>?\s*|\s*,\s*/, $_} @attrs };
+ 	if (defined $attr_hash->{f_dir} && ! -d $attr_hash->{f_dir}) {
+ 	    my $msg = "No such directory '$attr_hash->{f_dir}";
+ 	    $drh->set_err (2, $msg);
+@@ -120,7 +124,6 @@ sub connect
+     if ($attr and defined $attr->{f_dir} && ! -d $attr->{f_dir}) {
+ 	my $msg = "No such directory '$attr->{f_dir}";
+ 	$drh->set_err (2, $msg);
+-	$attr->{RaiseError} and croak $msg;
+ 	return;
+ 	}
+ 

perl-DBI.spec

@@ -1,12 +1,14 @@
 Name:      perl-DBI
-Version:   1.642
+Version:   1.643
 Release:   3
 Summary:   Database independent interface for Perl
 License:   GPL+ or Artistic
 URL:       http://dbi.perl.org/
 Source0:   https://cpan.metacpan.org/authors/id/T/TI/TIMB/DBI-%{version}.tar.gz
 BuildRequires: perl-generators perl-interpreter perl(ExtUtils::MakeMaker) >= 6.76 perl(Test::More)
-BuildRequires: perl-devel
+BuildRequires: perl-devel gcc
+
+Patch6000: backport-CVE-2014-10402.patch
 
 Requires:  perl(:MODULE_COMPAT_%(eval "`perl -V:version`"; echo $version)) perl(Math::BigInt)
 
@@ -67,6 +69,18 @@ make test
 %{_mandir}/*/*
 
 %changelog
+* Sat Apr 09 2022 shixuantong <shixuantong@h-partners.com> - 1.643-3
+- fix CVE-2014-10402
+
+* Wed Jun 23 2021 liudabo <liudabo1@huawei.com> - 1.643-2
+- Add gcc build dependcy
+
+* Thu Jul 23 2020 xinghe <xinghe1@huawei.com> - 1.643-1
+- Type:enhancement
+- ID:NA
+- SUG:NA
+- DESC:update version to 1.643
+
 * Wed May 13 2020 openEuler Buildteam <buildteam@openeuler.org> - 1.642-3
 - Type:enhancement
 - ID:NA

perl-DBI.yaml

@@ -0,0 +1,298 @@
+---
+version_control: metacpan
+src_repo: DBI
+tag_prefix: "^v"
+seperator: "."
+last_query:
+  time_stamp: 2020-04-26 07:40:42.711686420 +00:00
+  raw_data: |
+    {
+       "first" : false,
+       "abstract" : "Database independent interface for Perl",
+       "dependency" : [
+          {
+             "module" : "ExtUtils::MakeMaker",
+             "relationship" : "requires",
+             "version" : "0",
+             "phase" : "configure"
+          },
+          {
+             "phase" : "runtime",
+             "version" : "5.008001",
+             "relationship" : "requires",
+             "module" : "perl"
+          },
+          {
+             "relationship" : "conflicts",
+             "version" : "0.072",
+             "phase" : "runtime",
+             "module" : "DBD::RAM"
+          },
+          {
+             "module" : "DBD::Google",
+             "version" : "0.51",
+             "relationship" : "conflicts",
+             "phase" : "runtime"
+          },
+          {
+             "version" : "0.36",
+             "relationship" : "conflicts",
+             "phase" : "runtime",
+             "module" : "DBD::CSV"
+          },
+          {
+             "module" : "SQL::Statement",
+             "version" : "1.33",
+             "relationship" : "conflicts",
+             "phase" : "runtime"
+          },
+          {
+             "module" : "DBD::AnyData",
+             "phase" : "runtime",
+             "relationship" : "conflicts",
+             "version" : "0.110"
+          },
+          {
+             "relationship" : "conflicts",
+             "version" : "0.10",
+             "phase" : "runtime",
+             "module" : "DBD::Amazon"
+          },
+          {
+             "version" : "2.10",
+             "relationship" : "conflicts",
+             "phase" : "runtime",
+             "module" : "DBD::PO"
+          },
+          {
+             "relationship" : "requires",
+             "version" : "0.90",
+             "phase" : "build",
+             "module" : "Test::Simple"
+          },
+          {
+             "module" : "ExtUtils::MakeMaker",
+             "phase" : "build",
+             "relationship" : "requires",
+             "version" : "6.48"
+          }
+       ],
+       "distribution" : "DBI",
+       "status" : "latest",
+       "date" : "2020-01-31T19:02:41",
+       "maturity" : "released",
+       "download_url" : "https://cpan.metacpan.org/authors/id/T/TI/TIMB/DBI-1.643.tar.gz",
+       "name" : "DBI-1.643",
+       "tests" : {
+          "fail" : 75,
+          "pass" : 1495,
+          "unknown" : 47,
+          "na" : 0
+       },
+       "metadata" : {
+          "resources" : {
+             "x_IRC" : "irc://irc.perl.org/#dbi",
+             "repository" : {
+                "url" : "https://github.com/perl5-dbi/dbi"
+             },
+             "license" : [
+                "http://dev.perl.org/licenses/"
+             ],
+             "homepage" : "http://dbi.perl.org/",
+             "x_MailingList" : "mailto:dbi-dev@perl.org"
+          },
+          "x_suggests" : {
+             "SQL::Statement" : 1.402,
+             "Net::Daemon" : 0,
+             "DB_File" : 0,
+             "RPC::PlServer" : 0.2001,
+             "Clone" : 0.34,
+             "MLDBM" : 0
+          },
+          "dynamic_config" : 1,
+          "x_serialization_backend" : "JSON::PP version 2.27400_02",
+          "release_status" : "stable",
+          "author" : [
+             "Tim Bunce (dbi-users@perl.org)"
+          ],
+          "name" : "DBI",
+          "license" : [
+             "perl_5"
+          ],
+          "generated_by" : "ExtUtils::MakeMaker version 7.24, CPAN::Meta::Converter version 2.150010",
+          "prereqs" : {
+             "runtime" : {
+                "requires" : {
+                   "perl" : "5.008001"
+                },
+                "conflicts" : {
+                   "DBD::PO" : "2.10",
+                   "DBD::CSV" : "0.36",
+                   "DBD::Amazon" : "0.10",
+                   "DBD::AnyData" : "0.110",
+                   "SQL::Statement" : "1.33",
+                   "DBD::RAM" : "0.072",
+                   "DBD::Google" : "0.51"
+                }
+             },
+             "configure" : {
+                "requires" : {
+                   "ExtUtils::MakeMaker" : "0"
+                }
+             },
+             "build" : {
+                "requires" : {
+                   "Test::Simple" : "0.90",
+                   "ExtUtils::MakeMaker" : "6.48"
+                }
+             }
+          },
+          "abstract" : "Database independent interface for Perl",
+          "meta-spec" : {
+             "url" : "http://search.cpan.org/perldoc?CPAN::Meta::Spec",
+             "version" : 2
+          },
+          "no_index" : {
+             "directory" : [
+                "t",
+                "inc",
+                "t",
+                "xt",
+                "inc",
+                "local",
+                "perl5",
+                "fatlib",
+                "example",
+                "blib",
+                "examples",
+                "eg"
+             ]
+          },
+          "version" : "1.643"
+       },
+       "deprecated" : false,
+       "version" : "1.643",
+       "stat" : {
+          "mode" : 33204,
+          "mtime" : 1580497361,
+          "size" : 612372
+       },
+       "authorized" : true,
+       "provides" : [
+          "Bundle::DBI",
+          "DBD::DBM",
+          "DBD::DBM::Statement",
+          "DBD::DBM::Table",
+          "DBD::DBM::db",
+          "DBD::DBM::dr",
+          "DBD::DBM::st",
+          "DBD::ExampleP",
+          "DBD::ExampleP::db",
+          "DBD::ExampleP::dr",
+          "DBD::ExampleP::st",
+          "DBD::File",
+          "DBD::File::DataSource::File",
+          "DBD::File::DataSource::Stream",
+          "DBD::File::Statement",
+          "DBD::File::Table",
+          "DBD::File::TableSource::FileSystem",
+          "DBD::File::db",
+          "DBD::File::dr",
+          "DBD::File::st",
+          "DBD::Gofer",
+          "DBD::Gofer::Policy::Base",
+          "DBD::Gofer::Policy::classic",
+          "DBD::Gofer::Policy::pedantic",
+          "DBD::Gofer::Policy::rush",
+          "DBD::Gofer::Transport::Base",
+          "DBD::Gofer::Transport::corostream",
+          "DBD::Gofer::Transport::null",
+          "DBD::Gofer::Transport::pipeone",
+          "DBD::Gofer::Transport::stream",
+          "DBD::Gofer::db",
+          "DBD::Gofer::dr",
+          "DBD::Gofer::st",
+          "DBD::Mem",
+          "DBD::Mem::DataSource",
+          "DBD::Mem::Statement",
+          "DBD::Mem::Table",
+          "DBD::Mem::db",
+          "DBD::Mem::dr",
+          "DBD::Mem::st",
+          "DBD::NullP",
+          "DBD::NullP::db",
+          "DBD::NullP::dr",
+          "DBD::NullP::st",
+          "DBD::Proxy",
+          "DBD::Proxy::RPC::PlClient",
+          "DBD::Proxy::db",
+          "DBD::Proxy::dr",
+          "DBD::Proxy::st",
+          "DBD::Sponge",
+          "DBD::Sponge::db",
+          "DBD::Sponge::dr",
+          "DBD::Sponge::st",
+          "DBDI",
+          "DBI",
+          "DBI::Const::GetInfo::ANSI",
+          "DBI::Const::GetInfo::ODBC",
+          "DBI::Const::GetInfoReturn",
+          "DBI::Const::GetInfoType",
+          "DBI::DBD",
+          "DBI::DBD::Metadata",
+          "DBI::DBD::SqlEngine",
+          "DBI::DBD::SqlEngine::DataSource",
+          "DBI::DBD::SqlEngine::Statement",
+          "DBI::DBD::SqlEngine::Table",
+          "DBI::DBD::SqlEngine::TableSource",
+          "DBI::DBD::SqlEngine::TieMeta",
+          "DBI::DBD::SqlEngine::TieTables",
+          "DBI::DBD::SqlEngine::db",
+          "DBI::DBD::SqlEngine::dr",
+          "DBI::DBD::SqlEngine::st",
+          "DBI::Gofer::Execute",
+          "DBI::Gofer::Request",
+          "DBI::Gofer::Response",
+          "DBI::Gofer::Serializer::Base",
+          "DBI::Gofer::Serializer::DataDumper",
+          "DBI::Gofer::Serializer::Storable",
+          "DBI::Gofer::Transport::Base",
+          "DBI::Gofer::Transport::pipeone",
+          "DBI::Gofer::Transport::stream",
+          "DBI::Profile",
+          "DBI::ProfileData",
+          "DBI::ProfileDumper",
+          "DBI::ProfileDumper::Apache",
+          "DBI::ProfileSubs",
+          "DBI::ProxyServer",
+          "DBI::ProxyServer::db",
+          "DBI::ProxyServer::dr",
+          "DBI::ProxyServer::st",
+          "DBI::SQL::Nano",
+          "DBI::SQL::Nano::Statement_",
+          "DBI::SQL::Nano::Table_",
+          "DBI::Util::CacheMemory",
+          "DBI::Util::_accessor",
+          "DBI::common"
+       ],
+       "id" : "wUU9iUXrS9CuMzYmqtw3WWNgrBc",
+       "checksum_md5" : "352f80b1e23769c116082a90905d7398",
+       "main_module" : "DBI",
+       "resources" : {
+          "license" : [
+             "http://dev.perl.org/licenses/"
+          ],
+          "repository" : {
+             "url" : "https://github.com/perl5-dbi/dbi"
+          },
+          "homepage" : "http://dbi.perl.org/"
+       },
+       "checksum_sha256" : "8a2b993db560a2c373c174ee976a51027dd780ec766ae17620c20393d2e836fa",
+       "changes_file" : "Changes",
+       "author" : "TIMB",
+       "archive" : "DBI-1.643.tar.gz",
+       "license" : [
+          "perl_5"
+       ],
+       "version_numified" : 1.643
+    }