[SCM] Debian packaging of libapache2-mod-perl2 branch, master, updated. debian/2.0.7-2-5-g526b28b

Dominic Hargreaves dom at earth.li
Tue Mar 12 20:27:03 UTC 2013


The following commit has been merged in the master branch:
commit 1320e9107952a8274b263ab1d7e8d3b731e6c23c
Author: Dominic Hargreaves <dom at earth.li>
Date:   Tue Mar 12 20:04:46 2013 +0000

    add patch metadata

diff --git a/debian/patches/270_fix_hash_attack_test.patch b/debian/patches/270_fix_hash_attack_test.patch
index 3158785..1f2d88e 100644
--- a/debian/patches/270_fix_hash_attack_test.patch
+++ b/debian/patches/270_fix_hash_attack_test.patch
@@ -1,3 +1,16 @@
+Subject: Fix t/perl/hash_attack.t to work with Perl 5.14.4, 5.16.3 etc
+
+Fix t/perl/hash_attack.t to work with Perl 5.14.4, 5.16.3 etc, which
+contain a fix for CVE-2013-1667 (memory exhaustion with arbitrary hash
+keys). This resolves rt.perl.org #116863, from where the patch by Hugo
+van der Sanden was taken (with a minor edit in a comment by the committer).
+
+Tested by the committer on Windows 7 x64 with VC++ 2010 using Perls 5.14.3,
+5.14.4, 5.16.2 and 5.16.3-RC1, all against Apache 2.2.22.
+
+Bug-Debian: http://bugs.debian.org/702821
+Origin: http://svn.apache.org/viewvc?view=revision&revision=1455340
+
 --- a/t/response/TestPerl/hash_attack.pm	(revision 1451907)
 +++ b/t/response/TestPerl/hash_attack.pm	(working copy)
 @@ -5,10 +5,11 @@

-- 
Debian packaging of libapache2-mod-perl2



More information about the Pkg-perl-cvs-commits mailing list