public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/perl-DBI] f45: 1.653 bump (rhbz#2530990)
@ 2026-09-10 8:57 Jitka Plesnikova
0 siblings, 0 replies; only message in thread
From: Jitka Plesnikova @ 2026-09-10 8:57 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/perl-DBI
Branch : f45
Commit : c15368328cdf92c8475085c921c8634ba0156d26
Author : Jitka Plesnikova <jplesnik@redhat.com>
Date : 2026-09-10T10:53:28+02:00
Stats : +9/-28 in 4 file(s)
URL : https://src.fedoraproject.org/rpms/perl-DBI/c/c15368328cdf92c8475085c921c8634ba0156d26?branch=f45
Log:
1.653 bump (rhbz#2530990)
Fix CVE-2026-78030 (arbitrary module and file loading via dbm_type/dbm_mldbm)
Fix CVE-2026-15392 (tighten symlink outside of f_dir check)
---
diff --git a/.gitignore b/.gitignore
index 4e84bc8..5a3fc5c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -34,3 +34,4 @@ DBI-1.613.tar.gz
/DBI-1.650.tgz
/DBI-1.651.tgz
/DBI-1.652.tgz
+/DBI-1.653.tgz
diff --git a/DBI-1.652-Fix-test-for-32bit-perl-report-in-PR-189.patch b/DBI-1.652-Fix-test-for-32bit-perl-report-in-PR-189.patch
deleted file mode 100644
index 74fcd74..0000000
--- a/DBI-1.652-Fix-test-for-32bit-perl-report-in-PR-189.patch
+++ /dev/null
@@ -1,25 +0,0 @@
-From acc903db3086a737936643a5dbbc0e22f9d5c421 Mon Sep 17 00:00:00 2001
-From: "H.Merijn Brand - Tux" <linux@tux.freedom.nl>
-Date: Mon, 17 Aug 2026 09:49:56 +0200
-Subject: [PATCH] Fix test for 32bit-perl (report in PR#189)
-
----
- t/60preparse.t | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/t/60preparse.t b/t/60preparse.t
-index 92bdc89..eff39be 100755
---- a/t/60preparse.t
-+++ b/t/60preparse.t
-@@ -148,7 +148,7 @@ ok( $DBI::err );
- is( $DBI::errstr, "preparse found :p100000 which is outside the allowed range.");
- is( pp($dbh, 'a = :2147483648', DBIpp_ph_qm, DBIpp_ph_cs|DBIpp_ph_cn), undef, 'exceeds limit');
- ok( $DBI::err );
--is( $DBI::errstr, "preparse found :p-2147483648 which is outside the allowed range.");
-+like( $DBI::errstr, qr{^preparse found :p(?:-2147483648|2147483647) which is outside the allowed range.$});
- is( pp($dbh, 'a = :12345678987654321', DBIpp_ph_qm, DBIpp_ph_cs|DBIpp_ph_cn), undef, 'exceeds limit');
- ok( $DBI::err );
- like( $DBI::errstr, qr{^preparse found :p\d+ which is outside the allowed range.$});
---
-2.55.0
-
diff --git a/perl-DBI.spec b/perl-DBI.spec
index 0f4f429..089cc81 100644
--- a/perl-DBI.spec
+++ b/perl-DBI.spec
@@ -30,13 +30,12 @@
%endif
Name: perl-DBI
-Version: 1.652
+Version: 1.653
Release: 1%{?dist}
Summary: A database access API for perl
License: GPL-1.0-or-later OR Artistic-1.0-Perl
URL: http://dbi.perl.org/
Source0: https://cpan.metacpan.org/authors/id/H/HM/HMBRAND/DBI-%{version}.tgz
-Patch0: DBI-1.652-Fix-test-for-32bit-perl-report-in-PR-189.patch
BuildRequires: coreutils
BuildRequires: findutils
@@ -106,6 +105,7 @@ BuildRequires: perl(Benchmark)
BuildRequires: perl(Encode)
BuildRequires: perl(File::Copy)
BuildRequires: perl(File::Path)
+BuildRequires: perl(File::Temp)
BuildRequires: perl(lib)
BuildRequires: perl(overload)
BuildRequires: perl(Test::More)
@@ -268,6 +268,11 @@ make test
%{_libexecdir}/%{name}
%changelog
+* Thu Sep 10 2026 Jitka Plesnikova <jplesnik@redhat.com> - 1.653-1
+- 1.653 bump (rhbz#2530990)
+- Fix CVE-2026-78030 (arbitrary module and file loading via dbm_type/dbm_mldbm)
+- Fix CVE-2026-15392 (tighten symlink outside of f_dir check)
+
* Mon Aug 17 2026 Jitka Plesnikova <jplesnik@redhat.com> - 1.652-1
- 1.652 bump (rhbz#2517102)
- Fix CVE-2026-73194 and CVE-2026-73193
diff --git a/sources b/sources
index 6f9cebf..65ce217 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (DBI-1.652.tgz) = b695a177c7e3a1c0da70b4f2864521264fdda9560fd12f416add42d6f23099344bab5b13e9477c2283265a603013fad90a025610fdab1498b0792ae741c89a00
+SHA512 (DBI-1.653.tgz) = ed646a428df291cc087cf70e313971c66de9352a5094bf826d72d00e72fa5e600032bcccea14a7362a62cea26b9128cad6e4a1e27483d19a0f1d7eb247c3119a
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-09-10 8:57 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-10 8:57 [rpms/perl-DBI] f45: 1.653 bump (rhbz#2530990) Jitka Plesnikova
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox