[libhttp-body-perl] 02/03: Update CVE-2013-4407.patch

Xavier Guimard xguimard-guest at moszumanska.debian.org
Sun Dec 22 12:49:27 UTC 2013


This is an automated email from the git hooks/post-receive script.

xguimard-guest pushed a commit to branch master
in repository libhttp-body-perl.

commit 6fe66467e9d88e73ec66c76f94a05a9f8c90dcca
Author: Xavier Guimard <x.guimard at free.fr>
Date:   Sun Dec 22 13:48:06 2013 +0100

    Update CVE-2013-4407.patch
---
 debian/patches/CVE-2013-4407.patch | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)

diff --git a/debian/patches/CVE-2013-4407.patch b/debian/patches/CVE-2013-4407.patch
index 5071bac..c61d86a 100644
--- a/debian/patches/CVE-2013-4407.patch
+++ b/debian/patches/CVE-2013-4407.patch
@@ -11,16 +11,19 @@ Bug-Debian: http://bugs.debian.org/721634
 Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1005669
 Forwarded: no
 Author: Salvatore Bonaccorso <carnil at debian.org>
-Last-Update: 2013-10-21
+Reviewed-By: Xavier Guimard <x.guimard at free.fr>
+Last-Update: 2013-12-22
 
 --- a/lib/HTTP/Body/MultiPart.pm
 +++ b/lib/HTTP/Body/MultiPart.pm
-@@ -275,7 +275,7 @@
+@@ -258,8 +258,8 @@ sub parse_body {
  
-             if ( $filename ne "" ) {
-                 my $basename = (File::Spec->splitpath($filename))[2];
--                my $suffix = $basename =~ /[^.]+(\.[^\\\/]+)$/ ? $1 : q{};
-+                my $suffix = $basename =~ /(\.\w+(?:\.\w+)*)$/ ? $1 : q{};
+ =cut
  
-                 my $fh = File::Temp->new( UNLINK => 0, DIR => $self->tmpdir, SUFFIX => $suffix );
+-our $basename_regexp = qr/[^.]+(\.[^\\\/]+)$/;
+-#our $basename_regexp = qr/(\.\w+(?:\.\w+)*)$/;
++#our $basename_regexp = qr/[^.]+(\.[^\\\/]+)$/;
++our $basename_regexp = qr/(\.\w+(?:\.\w+)*)$/;
  
+ sub handler {
+     my ( $self, $part ) = @_;

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libhttp-body-perl.git



More information about the Pkg-perl-cvs-commits mailing list