diff options
| author | root <root@alpha.trunkmasters.com> | 2026-06-04 16:24:49 -0500 |
|---|---|---|
| committer | root <root@alpha.trunkmasters.com> | 2026-06-04 16:24:49 -0500 |
| commit | a3ceca1b4c0d9bdb550dc23f06ffbb5a8e033bc7 (patch) | |
| tree | 0c52bbae1c242fbc296bd650fcd1167685f81492 /dev-perl/HTTP-Body | |
| parent | bfd9c39e4712ebdb442d4ca0673061faed1e70e1 (diff) | |
| download | baldeagleos-repo-a3ceca1b4c0d9bdb550dc23f06ffbb5a8e033bc7.tar.gz baldeagleos-repo-a3ceca1b4c0d9bdb550dc23f06ffbb5a8e033bc7.tar.xz baldeagleos-repo-a3ceca1b4c0d9bdb550dc23f06ffbb5a8e033bc7.zip | |
Adding metadata
Diffstat (limited to 'dev-perl/HTTP-Body')
| -rw-r--r-- | dev-perl/HTTP-Body/HTTP-Body-1.230.0.ebuild | 43 | ||||
| -rw-r--r-- | dev-perl/HTTP-Body/Manifest | 1 | ||||
| -rw-r--r-- | dev-perl/HTTP-Body/files/HTTP-Body-1.230.0-CVE-2013-4407.patch | 33 | ||||
| -rw-r--r-- | dev-perl/HTTP-Body/metadata.xml | 17 |
4 files changed, 0 insertions, 94 deletions
diff --git a/dev-perl/HTTP-Body/HTTP-Body-1.230.0.ebuild b/dev-perl/HTTP-Body/HTTP-Body-1.230.0.ebuild deleted file mode 100644 index 3abd6a926755..000000000000 --- a/dev-perl/HTTP-Body/HTTP-Body-1.230.0.ebuild +++ /dev/null @@ -1,43 +0,0 @@ -# Copyright 1999-2024 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=8 - -DIST_AUTHOR=GETTY -DIST_VERSION=1.23 -inherit perl-module - -DESCRIPTION="HTTP Body Parser" - -SLOT="0" -KEYWORDS="~alpha amd64 ~ppc ~ppc64 ~sparc x86" - -# HTTP::Headers -> HTTP-Message -# HTTP::Request::Common -> HTTP-Message -# IO::File -> IO -RDEPEND=" - virtual/perl-Carp - virtual/perl-Digest-MD5 - >=virtual/perl-File-Temp-0.140.0 - dev-perl/HTTP-Message - >=virtual/perl-IO-1.140.0 -" -BDEPEND="${RDEPEND} - virtual/perl-ExtUtils-MakeMaker - test? ( - virtual/perl-Encode - virtual/perl-File-Spec - >=virtual/perl-File-Temp-0.140.0 - dev-perl/HTTP-Message - dev-perl/Test-Deep - >=virtual/perl-Test-Simple-0.860.0 - ) -" - -PERL_RM_FILES=( - t/02pod.t - t/03podcoverage.t - t/04critic.t -) - -PATCHES=( "${FILESDIR}/${PN}-1.230.0-CVE-2013-4407.patch" ) diff --git a/dev-perl/HTTP-Body/Manifest b/dev-perl/HTTP-Body/Manifest deleted file mode 100644 index 02289d6db01a..000000000000 --- a/dev-perl/HTTP-Body/Manifest +++ /dev/null @@ -1 +0,0 @@ -DIST HTTP-Body-1.23.tar.gz 26980 BLAKE2B 2ad08b894a26a06089dff6294f978583d49ee5aa770fb195d01fc6db7a39bda0cb831ed5137afabbc75598e2dbe3fb8dd0681f688776270d01f99498abb17c23 SHA512 b02fb8652ceebdaa858ff12fe759ded62eefa7f23e5bf8b90e31a52d4433f13d29986f9646141b92a6a4ea58e1be007c6f675c3e2b26559fa0ff9333e69f3ebb diff --git a/dev-perl/HTTP-Body/files/HTTP-Body-1.230.0-CVE-2013-4407.patch b/dev-perl/HTTP-Body/files/HTTP-Body-1.230.0-CVE-2013-4407.patch deleted file mode 100644 index e4046ec3fec3..000000000000 --- a/dev-perl/HTTP-Body/files/HTTP-Body-1.230.0-CVE-2013-4407.patch +++ /dev/null @@ -1,33 +0,0 @@ -Description: Allow only word characters in filename suffixes - CVE-2013-4407: Allow only word characters in filename suffixes. An - attacker able to upload files to a service that uses - HTTP::Body::Multipart could use this issue to upload a file and create - a specifically-crafted temporary filename on the server, that when - processed without further validation, could allow execution of commands - on the server. -Origin: vendor -Bug: https://rt.cpan.org/Ticket/Display.html?id=88342 -Bug-Debian: http://bugs.debian.org/721634 -Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1005669 -Forwarded: no -Author: Salvatore Bonaccorso <carnil@debian.org> -Last-Update: 2013-10-21 - -Updated by Andreas K. Huettel <dilfridge@gentoo.org> for HTTP-Body-1.19 -Updated by Andreas K. Huettel <dilfridge@gentoo.org> for HTTP-Body-1.23 - This version has a fix for the CVE, but the stricter regexp has served - us well so far... - -diff -ruN HTTP-Body-1.23.orig/lib/HTTP/Body/MultiPart.pm HTTP-Body-1.23/lib/HTTP/Body/MultiPart.pm ---- HTTP-Body-1.23.orig/lib/HTTP/Body/MultiPart.pm 2024-03-30 14:27:57.000000000 +1100 -+++ HTTP-Body-1.23/lib/HTTP/Body/MultiPart.pm 2024-05-02 13:07:21.794271606 +1100 -@@ -255,7 +255,7 @@ - - =cut - --our $basename_regexp = qr/[^.]+(\.[^\\\/]+)$/; -+our $basename_regexp = qr/(\.\w+(?:\.\w+)*)$/; - our $file_temp_suffix = '.upload'; - our $file_temp_template; - our %file_temp_parameters; - diff --git a/dev-perl/HTTP-Body/metadata.xml b/dev-perl/HTTP-Body/metadata.xml deleted file mode 100644 index 57214cf6de25..000000000000 --- a/dev-perl/HTTP-Body/metadata.xml +++ /dev/null @@ -1,17 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd"> -<pkgmetadata> - <maintainer type="project"> - <email>perl@gentoo.org</email> - <name>Gentoo Perl Project</name> - </maintainer> - <upstream> - <remote-id type="cpan">HTTP-Body</remote-id> - <remote-id type="cpan-module">HTTP::Body</remote-id> - <remote-id type="cpan-module">HTTP::Body::MultiPart</remote-id> - <remote-id type="cpan-module">HTTP::Body::OctetStream</remote-id> - <remote-id type="cpan-module">HTTP::Body::UrlEncoded</remote-id> - <remote-id type="cpan-module">HTTP::Body::XForms</remote-id> - <remote-id type="cpan-module">HTTP::Body::XFormsMultipart</remote-id> - </upstream> -</pkgmetadata> |
