diff options
author | wen <wen> | 2012-10-20 14:25:58 +0000 |
---|---|---|
committer | wen <wen> | 2012-10-20 14:25:58 +0000 |
commit | e4663292a12e6fca1a154441d311d80a8f9fe3fd (patch) | |
tree | d8f5797c796a29a38187393700793a7607c26588 /security | |
parent | 5766780284c7df88f092a0cf3eae54a2c6bd15f1 (diff) | |
download | pkgsrc-e4663292a12e6fca1a154441d311d80a8f9fe3fd.tar.gz |
Update to 0.14
Upstream changes:
0.14 October 16, 2012
- compiling with -Werror=format-security now works (Jerome Quelin, #48446)
- Use Digest::SHA instead of Digest::SHA1 (Ansgar Burchardt, #60271)
- Security fix, CVE-2009-0129: Missing error check in do_verify (Havard Eidnes, #79958)
Diffstat (limited to 'security')
-rw-r--r-- | security/p5-Crypt-OpenSSL-DSA/Makefile | 5 | ||||
-rw-r--r-- | security/p5-Crypt-OpenSSL-DSA/distinfo | 10 | ||||
-rw-r--r-- | security/p5-Crypt-OpenSSL-DSA/patches/patch-DSA.xs | 16 | ||||
-rw-r--r-- | security/p5-Crypt-OpenSSL-DSA/patches/patch-lib_Crypt_OpenSSL_DSA.pm | 21 |
4 files changed, 6 insertions, 46 deletions
diff --git a/security/p5-Crypt-OpenSSL-DSA/Makefile b/security/p5-Crypt-OpenSSL-DSA/Makefile index c13479dc8b2..bfe0711b394 100644 --- a/security/p5-Crypt-OpenSSL-DSA/Makefile +++ b/security/p5-Crypt-OpenSSL-DSA/Makefile @@ -1,9 +1,8 @@ -# $NetBSD: Makefile,v 1.17 2012/10/03 21:57:28 wiz Exp $ +# $NetBSD: Makefile,v 1.18 2012/10/20 14:25:58 wen Exp $ # -DISTNAME= Crypt-OpenSSL-DSA-0.13 +DISTNAME= Crypt-OpenSSL-DSA-0.14 PKGNAME= p5-${DISTNAME} -PKGREVISION= 7 SVR4_PKGNAME= p5ods CATEGORIES= security perl5 MASTER_SITES= ${MASTER_SITE_PERL_CPAN:=Crypt/} diff --git a/security/p5-Crypt-OpenSSL-DSA/distinfo b/security/p5-Crypt-OpenSSL-DSA/distinfo index 32bb5939d2d..fad2ef12041 100644 --- a/security/p5-Crypt-OpenSSL-DSA/distinfo +++ b/security/p5-Crypt-OpenSSL-DSA/distinfo @@ -1,7 +1,5 @@ -$NetBSD: distinfo,v 1.4 2012/10/02 07:58:00 he Exp $ +$NetBSD: distinfo,v 1.5 2012/10/20 14:25:58 wen Exp $ -SHA1 (Crypt-OpenSSL-DSA-0.13.tar.gz) = e0e15b244b9a1beb17ede4165f629b6beadb745c -RMD160 (Crypt-OpenSSL-DSA-0.13.tar.gz) = dc5be607395dd747bc213491244d6c3d5c81f796 -Size (Crypt-OpenSSL-DSA-0.13.tar.gz) = 6796 bytes -SHA1 (patch-DSA.xs) = bd14859fe2ea82c6d2f7d1eb0e018c19caf0388b -SHA1 (patch-lib_Crypt_OpenSSL_DSA.pm) = 2429aced940250d03349ec093b66f14ae26a17f1 +SHA1 (Crypt-OpenSSL-DSA-0.14.tar.gz) = 922d400715566200dcc79c71202a901bfc070696 +RMD160 (Crypt-OpenSSL-DSA-0.14.tar.gz) = 6ed6a9e8effc54a02c6c784302d2bd0375062289 +Size (Crypt-OpenSSL-DSA-0.14.tar.gz) = 7062 bytes diff --git a/security/p5-Crypt-OpenSSL-DSA/patches/patch-DSA.xs b/security/p5-Crypt-OpenSSL-DSA/patches/patch-DSA.xs deleted file mode 100644 index 0b8d38b1827..00000000000 --- a/security/p5-Crypt-OpenSSL-DSA/patches/patch-DSA.xs +++ /dev/null @@ -1,16 +0,0 @@ -$NetBSD: patch-DSA.xs,v 1.1 2012/10/02 07:58:00 he Exp $ - -Croak in do_verify() if the openssl library returns an error, -similar to what is already done in verify(). - ---- DSA.xs.orig 2005-05-22 20:14:52.000000000 +0000 -+++ DSA.xs -@@ -139,6 +139,8 @@ do_verify(dsa, dgst, sig) - CODE: - dgst_pv = SvPV(dgst, dgst_len); - RETVAL = DSA_do_verify(dgst_pv, dgst_len, sig, dsa); -+ if (RETVAL == -1) -+ croak("Error in DSA_do_verify: %s",ERR_error_string(ERR_get_error(), NULL)); - OUTPUT: - RETVAL - diff --git a/security/p5-Crypt-OpenSSL-DSA/patches/patch-lib_Crypt_OpenSSL_DSA.pm b/security/p5-Crypt-OpenSSL-DSA/patches/patch-lib_Crypt_OpenSSL_DSA.pm deleted file mode 100644 index b5dc322311d..00000000000 --- a/security/p5-Crypt-OpenSSL-DSA/patches/patch-lib_Crypt_OpenSSL_DSA.pm +++ /dev/null @@ -1,21 +0,0 @@ -$NetBSD: patch-lib_Crypt_OpenSSL_DSA.pm,v 1.1 2012/10/02 07:58:00 he Exp $ - -Document that the verify and do_verify methods will croak on library errors. - ---- lib/Crypt/OpenSSL/DSA.pm.orig 2005-10-15 21:38:04.000000000 +0000 -+++ lib/Crypt/OpenSSL/DSA.pm -@@ -124,10 +124,14 @@ Verifies that the $sig signature for $me - - $dsa is the signer's public key. - -+Note: it croaks if the underlying library call returns error (-1). -+ - =item $valid = $dsa->do_verify( $message, $sig_obj ); - - Similar to C<verify>, but uses a L<Crypt::OpenSSL::DSA::Signature> object. - -+Note: it croaks if the underlying library call returns error (-1). -+ - =item $dsa->write_params( $filename ); - - Writes the parameters into a PEM file. |