public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Paul Howarth <paul@city-fan.org>
To: git-commits@fedoraproject.org
Subject: [rpms/perl-GD] f43: Update to 2.86
Date: Tue, 09 Jun 2026 17:26:07 GMT	[thread overview]
Message-ID: <178102596748.1.6119163484614539920.rpms-perl-GD-e7b38dd85d62@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/perl-GD
            Branch : f43
            Commit : e7b38dd85d62c6b5fd53f9beab1fab751301d390
            Author : Paul Howarth <paul@city-fan.org>
            Date   : 2026-06-09T17:06:36+01:00
            Stats  : +7/-2 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/perl-GD/c/e7b38dd85d62c6b5fd53f9beab1fab751301d390?branch=f43

            Log:
            Update to 2.86

- New upstream release 2.86
  - Fix command injection via 2-arg open() in _make_filehandle (CVE-2026-11526)

---
diff --git a/perl-GD.spec b/perl-GD.spec
index e58dc44..db52471 100644
--- a/perl-GD.spec
+++ b/perl-GD.spec
@@ -1,5 +1,5 @@
 Name:           perl-GD
-Version:        2.85
+Version:        2.86
 Release:        1%{?dist}
 Summary:        Perl interface to the GD graphics library
 License:        GPL-1.0-or-later OR Artistic-2.0
@@ -37,6 +37,7 @@ BuildRequires:  perl(vars)
 # Test Suite
 # Note: optional test requirement perl(Test::Fork) not currently available in Fedora
 BuildRequires:  perl(constant)
+BuildRequires:  perl(File::Temp)
 BuildRequires:  perl(FindBin)
 BuildRequires:  perl(IO::Dir)
 BuildRequires:  perl(lib)
@@ -101,6 +102,10 @@ make test TEST_VERBOSE=1
 %{_mandir}/man3/GD::Simple.3*
 
 %changelog
+* Tue Jun  9 2026 Paul Howarth <paul@city-fan.org> - 2.86-1
+- Update to 2.86
+  - Fix command injection via 2-arg open() in _make_filehandle (CVE-2026-11526)
+
 * Tue Jun  2 2026 Paul Howarth <paul@city-fan.org> - 2.85-1
 - Update to 2.85
   - Tolerate runtime TIFF decode failures in autodetect (GH#62)

diff --git a/sources b/sources
index e9acbeb..35a4f86 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (GD-2.85.tar.gz) = b7a6cf8a4ae527589c90eaafcaf178f8fb3466b31d25dfc523b44e444de32a15f426da506f47a106ef31549be5a64e66ad92815fa621d387daa56d828a9e396f
+SHA512 (GD-2.86.tar.gz) = 30bbcaf59f396d2c198c47c235135ca995b9561cb5513ff28202617c22435ae9ee300170acd8468870ecdaef564160eed7c293b17059728e652944eca31e2315

                 reply	other threads:[~2026-06-09 17:26 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178102596748.1.6119163484614539920.rpms-perl-GD-e7b38dd85d62@fedoraproject.org \
    --to=paul@city-fan.org \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox