[perl-Config-IniFiles/el6] 2.72, fix CVE-2012-2451

Tom Callaway spot at fedoraproject.org
Fri May 11 20:52:05 UTC 2012


commit 7b07f8f9289b1ed6ad5f2ca45651801eab045725
Author: Tom Callaway <spot at fedoraproject.org>
Date:   Fri May 11 16:52:03 2012 -0400

    2.72, fix CVE-2012-2451

 perl-Config-IniFiles.spec |   13 +++++++++++--
 sources                   |    2 +-
 2 files changed, 12 insertions(+), 3 deletions(-)
---
diff --git a/perl-Config-IniFiles.spec b/perl-Config-IniFiles.spec
index 3356b29..2301d9a 100644
--- a/perl-Config-IniFiles.spec
+++ b/perl-Config-IniFiles.spec
@@ -1,6 +1,6 @@
 Name:           perl-Config-IniFiles
-Version:        2.68
-Release:        3%{?dist}
+Version:        2.72
+Release:        1%{?dist}
 Summary:        A module for reading .ini-style configuration files
 
 Group:          Development/Libraries
@@ -12,6 +12,7 @@ BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 BuildRequires:  perl(Module::Build::Compat)
 BuildRequires:  perl(ExtUtils::MakeMaker)
 BuildRequires:  perl(Test::More)
+BuildRequires:	perl(List::MoreUtils)
 BuildArch:      noarch
 Requires:       perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
 # Not autodetected. Found in lib/Config/IniFiles.pm:2265
@@ -56,6 +57,14 @@ rm -rf $RPM_BUILD_ROOT
 
 
 %changelog
+* Fri May 11 2012 Tom Callaway <spot at fedoraproject.org> - 2.72-1
+- update to 2.72
+- notable fix: SECURITY BUG FIX: Config::IniFiles used to write 
+  to a temporary filename with a predictable name 
+  ("${filename}-new") which opens the door for potential
+  exploits.
+  Fixes CVE-2012-2451
+
 * Tue Feb 21 2012 Tom Callaway <spot at fedoraproject.org> - 2.68-3
 - add missing Requires: perl(IO::Scalar) >= 2.109 (bz 791078)
 
diff --git a/sources b/sources
index 7d20be9..5a15349 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-c860f04b2d7d3cb0cc462ed896112c62  Config-IniFiles-2.68.tar.gz
+513d01cf4945e9b1faccc80e153bd27e  Config-IniFiles-2.72.tar.gz


More information about the scm-commits mailing list