Hello community, here is the log from the commit of package perl-Net-DNS checked in at Thu Jan 10 02:44:07 CET 2008. -------- --- perl-Net-DNS/perl-Net-DNS.changes 2008-01-04 13:16:34.000000000 +0100 +++ /mounts/work_src_done/STABLE/perl-Net-DNS/perl-Net-DNS.changes 2008-01-07 17:38:16.000000000 +0100 @@ -1,0 +2,5 @@ +Mon Jan 7 17:37:21 CET 2008 - anicka@suse.cz + +- fix possible DoS in Net/DNS/RR/A.pm [#350245] + +------------------------------------------------------------------- New: ---- perl-Net-DNS-0.62-A.diff ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ perl-Net-DNS.spec ++++++ --- /var/tmp/diff_new_pack.kM7923/_old 2008-01-10 02:37:03.000000000 +0100 +++ /var/tmp/diff_new_pack.kM7923/_new 2008-01-10 02:37:03.000000000 +0100 @@ -13,7 +13,7 @@ Name: perl-Net-DNS BuildRequires: perl-Digest-HMAC perl-Net-IP Version: 0.62 -Release: 1 +Release: 3 Provides: perl_dns Obsoletes: perl_dns Requires: perl-Digest-HMAC @@ -25,6 +25,7 @@ Url: http://cpan.org/modules/by-module/Net/ Summary: Perl interface to the DNS resolver Source: Net-DNS-%{version}.tar.bz2 +Patch: %{name}-%{version}-A.diff BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -40,10 +41,13 @@ %prep %setup -q -n Net-DNS-%{version} +%patch %build find demo contrib -type f | xargs -n 1 sed -i "s@/usr/local/bin/@/usr/bin/@" perl Makefile.PL OPTIMIZE="$RPM_OPT_FLAGS -Wall" + +%check make make test @@ -63,6 +67,8 @@ /var/adm/perl-modules/%{name} %changelog +* Mon Jan 07 2008 - anicka@suse.cz +- fix possible DoS in Net/DNS/RR/A.pm [#350245] * Fri Jan 04 2008 - anicka@suse.cz - update to 0.62 * Move of some functionality out of the Packet to the Question ++++++ perl-Net-DNS-0.62-A.diff ++++++ --- lib/Net/DNS/RR/A.pm +++ lib/Net/DNS/RR/A.pm @@ -18,7 +18,7 @@ sub new { my ($class, $self, $data, $offset) = @_; - if ($self->{"rdlength"} > 0) { + if ($self->{"rdlength"} >= 4) { $self->{"address"} = inet_ntoa(substr($$data, $offset, 4)); } ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org