summaryrefslogtreecommitdiff
path: root/security/p5-Crypt-OpenSSL-DSA
diff options
context:
space:
mode:
authorwen <wen>2012-10-20 14:25:58 +0000
committerwen <wen>2012-10-20 14:25:58 +0000
commite4663292a12e6fca1a154441d311d80a8f9fe3fd (patch)
treed8f5797c796a29a38187393700793a7607c26588 /security/p5-Crypt-OpenSSL-DSA
parent5766780284c7df88f092a0cf3eae54a2c6bd15f1 (diff)
downloadpkgsrc-e4663292a12e6fca1a154441d311d80a8f9fe3fd.tar.gz
Update to 0.14
Upstream changes: 0.14 October 16, 2012 - compiling with -Werror=format-security now works (Jerome Quelin, #48446) - Use Digest::SHA instead of Digest::SHA1 (Ansgar Burchardt, #60271) - Security fix, CVE-2009-0129: Missing error check in do_verify (Havard Eidnes, #79958)
Diffstat (limited to 'security/p5-Crypt-OpenSSL-DSA')
-rw-r--r--security/p5-Crypt-OpenSSL-DSA/Makefile5
-rw-r--r--security/p5-Crypt-OpenSSL-DSA/distinfo10
-rw-r--r--security/p5-Crypt-OpenSSL-DSA/patches/patch-DSA.xs16
-rw-r--r--security/p5-Crypt-OpenSSL-DSA/patches/patch-lib_Crypt_OpenSSL_DSA.pm21
4 files changed, 6 insertions, 46 deletions
diff --git a/security/p5-Crypt-OpenSSL-DSA/Makefile b/security/p5-Crypt-OpenSSL-DSA/Makefile
index c13479dc8b2..bfe0711b394 100644
--- a/security/p5-Crypt-OpenSSL-DSA/Makefile
+++ b/security/p5-Crypt-OpenSSL-DSA/Makefile
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.17 2012/10/03 21:57:28 wiz Exp $
+# $NetBSD: Makefile,v 1.18 2012/10/20 14:25:58 wen Exp $
#
-DISTNAME= Crypt-OpenSSL-DSA-0.13
+DISTNAME= Crypt-OpenSSL-DSA-0.14
PKGNAME= p5-${DISTNAME}
-PKGREVISION= 7
SVR4_PKGNAME= p5ods
CATEGORIES= security perl5
MASTER_SITES= ${MASTER_SITE_PERL_CPAN:=Crypt/}
diff --git a/security/p5-Crypt-OpenSSL-DSA/distinfo b/security/p5-Crypt-OpenSSL-DSA/distinfo
index 32bb5939d2d..fad2ef12041 100644
--- a/security/p5-Crypt-OpenSSL-DSA/distinfo
+++ b/security/p5-Crypt-OpenSSL-DSA/distinfo
@@ -1,7 +1,5 @@
-$NetBSD: distinfo,v 1.4 2012/10/02 07:58:00 he Exp $
+$NetBSD: distinfo,v 1.5 2012/10/20 14:25:58 wen Exp $
-SHA1 (Crypt-OpenSSL-DSA-0.13.tar.gz) = e0e15b244b9a1beb17ede4165f629b6beadb745c
-RMD160 (Crypt-OpenSSL-DSA-0.13.tar.gz) = dc5be607395dd747bc213491244d6c3d5c81f796
-Size (Crypt-OpenSSL-DSA-0.13.tar.gz) = 6796 bytes
-SHA1 (patch-DSA.xs) = bd14859fe2ea82c6d2f7d1eb0e018c19caf0388b
-SHA1 (patch-lib_Crypt_OpenSSL_DSA.pm) = 2429aced940250d03349ec093b66f14ae26a17f1
+SHA1 (Crypt-OpenSSL-DSA-0.14.tar.gz) = 922d400715566200dcc79c71202a901bfc070696
+RMD160 (Crypt-OpenSSL-DSA-0.14.tar.gz) = 6ed6a9e8effc54a02c6c784302d2bd0375062289
+Size (Crypt-OpenSSL-DSA-0.14.tar.gz) = 7062 bytes
diff --git a/security/p5-Crypt-OpenSSL-DSA/patches/patch-DSA.xs b/security/p5-Crypt-OpenSSL-DSA/patches/patch-DSA.xs
deleted file mode 100644
index 0b8d38b1827..00000000000
--- a/security/p5-Crypt-OpenSSL-DSA/patches/patch-DSA.xs
+++ /dev/null
@@ -1,16 +0,0 @@
-$NetBSD: patch-DSA.xs,v 1.1 2012/10/02 07:58:00 he Exp $
-
-Croak in do_verify() if the openssl library returns an error,
-similar to what is already done in verify().
-
---- DSA.xs.orig 2005-05-22 20:14:52.000000000 +0000
-+++ DSA.xs
-@@ -139,6 +139,8 @@ do_verify(dsa, dgst, sig)
- CODE:
- dgst_pv = SvPV(dgst, dgst_len);
- RETVAL = DSA_do_verify(dgst_pv, dgst_len, sig, dsa);
-+ if (RETVAL == -1)
-+ croak("Error in DSA_do_verify: %s",ERR_error_string(ERR_get_error(), NULL));
- OUTPUT:
- RETVAL
-
diff --git a/security/p5-Crypt-OpenSSL-DSA/patches/patch-lib_Crypt_OpenSSL_DSA.pm b/security/p5-Crypt-OpenSSL-DSA/patches/patch-lib_Crypt_OpenSSL_DSA.pm
deleted file mode 100644
index b5dc322311d..00000000000
--- a/security/p5-Crypt-OpenSSL-DSA/patches/patch-lib_Crypt_OpenSSL_DSA.pm
+++ /dev/null
@@ -1,21 +0,0 @@
-$NetBSD: patch-lib_Crypt_OpenSSL_DSA.pm,v 1.1 2012/10/02 07:58:00 he Exp $
-
-Document that the verify and do_verify methods will croak on library errors.
-
---- lib/Crypt/OpenSSL/DSA.pm.orig 2005-10-15 21:38:04.000000000 +0000
-+++ lib/Crypt/OpenSSL/DSA.pm
-@@ -124,10 +124,14 @@ Verifies that the $sig signature for $me
-
- $dsa is the signer's public key.
-
-+Note: it croaks if the underlying library call returns error (-1).
-+
- =item $valid = $dsa->do_verify( $message, $sig_obj );
-
- Similar to C<verify>, but uses a L<Crypt::OpenSSL::DSA::Signature> object.
-
-+Note: it croaks if the underlying library call returns error (-1).
-+
- =item $dsa->write_params( $filename );
-
- Writes the parameters into a PEM file.