[perl-Data-Dumper] 2.154 bump

Petr Pisar ppisar at fedoraproject.org
Fri Sep 19 08:57:42 UTC 2014


commit 788ba277385071b1abc2489a356f1d538c4b9902
Author: Petr Písař <ppisar at redhat.com>
Date:   Fri Sep 19 10:57:14 2014 +0200

    2.154 bump

 .gitignore            |    1 +
 perl-Data-Dumper.spec |    8 ++++++--
 sources               |    2 +-
 3 files changed, 8 insertions(+), 3 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 8b2d0d0..e7c640e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,3 +5,4 @@
 /Data-Dumper-2.143.tar.gz
 /Data-Dumper-2.145.tar.gz
 /Data-Dumper-2.151.tar.gz
+/Data-Dumper-2.154.tar.gz
diff --git a/perl-Data-Dumper.spec b/perl-Data-Dumper.spec
index 3ffece7..3a83544 100644
--- a/perl-Data-Dumper.spec
+++ b/perl-Data-Dumper.spec
@@ -1,7 +1,7 @@
-%global cpan_version 2.151
+%global cpan_version 2.154
 Name:           perl-Data-Dumper
 Version:        %(echo '%{cpan_version}' | tr '_' '.')
-Release:        311%{?dist}
+Release:        1%{?dist}
 Summary:        Stringify perl data structures, suitable for printing and eval
 License:        GPL+ or Artistic
 Group:          Development/Libraries
@@ -71,6 +71,10 @@ make test
 %{_mandir}/man3/*
 
 %changelog
+* Fri Sep 19 2014 Petr Pisar <ppisar at redhat.com> - 2.154-1
+- 2.154 bump (fixes CVE-2014-4330 (limit recursion when dumping deep data
+  structures))
+
 * Sun Sep 07 2014 Jitka Plesnikova <jplesnik at redhat.com> - 2.151-311
 - Perl 5.20 re-rebuild of bootstrapped packages
 
diff --git a/sources b/sources
index 74c051b..8390767 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-b804bf2137b6b62382136598baafa645  Data-Dumper-2.151.tar.gz
+577b4d4e53d7609457d36d674b6169a7  Data-Dumper-2.154.tar.gz



More information about the perl-devel mailing list