rpms/perl-Net-SSLeay/FC-3 perl-Net-SSLeay-1.2.5-CVE-2005-0106.patch, NONE, 1.1 perl-Net-SSLeay.spec, 1.1, 1.2

[Jose Pedro Oliveira (jpo)]

Author: jpo

Update of /cvs/extras/rpms/perl-Net-SSLeay/FC-3
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv3726/FC-3

Modified Files:
	perl-Net-SSLeay.spec 
Added Files:
	perl-Net-SSLeay-1.2.5-CVE-2005-0106.patch 
Log Message:
CVE-2005-0106 (#191351)

perl-Net-SSLeay-1.2.5-CVE-2005-0106.patch:

--- NEW FILE perl-Net-SSLeay-1.2.5-CVE-2005-0106.patch ---
--- Net_SSLeay.pm-1.25/SSLeay.pm.cve-2005-0106	2006-01-25 12:37:11.540102265 -0700
+++ Net_SSLeay.pm-1.25/SSLeay.pm	2006-01-25 12:38:16.994260984 -0700
@@ -1853,8 +1853,8 @@
     my ($rn_seed_file, $seed, $egd_path) = @_;
     my $rnsf = defined($rn_seed_file) && -r $rn_seed_file;
 
+    $egd_path = '';
     $egd_path = $ENV{'EGD_PATH'} if $ENV{'EGD_PATH'};
-    $egd_path = '/tmp/entropy'   unless $egd_path;
     
     RAND_seed(rand() + $$);  # Stir it with time and pid
     
@@ -1865,7 +1865,7 @@
     RAND_load_file($rn_seed_file, -s _) if $rnsf;
     RAND_seed($seed) if $seed;
     RAND_seed($ENV{RND_SEED}) if $ENV{RND_SEED};
-    RAND_egd($egd_path) if -S $egd_path;
+    RAND_egd($egd_path) if -e $egd_path && -S $egd_path;
     RAND_load_file($Net::SSLeay::random_device, $Net::SSLeay::how_random/8)
 	if -r $Net::SSLeay::random_device;
 }


Index: perl-Net-SSLeay.spec
===================================================================
RCS file: /cvs/extras/rpms/perl-Net-SSLeay/FC-3/perl-Net-SSLeay.spec,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -r1.1 -r1.2
--- perl-Net-SSLeay.spec	20 Dec 2004 17:25:07 -0000	1.1
+++ perl-Net-SSLeay.spec	11 May 2006 19:15:36 -0000	1.2
@@ -2,7 +2,7 @@
 
 Name:           perl-Net-SSLeay
 Version:        1.26
-Release:        1
+Release:        2%{?dist}
 Epoch:          0
 Summary:        Perl extension for using OpenSSL
 
@@ -11,10 +11,12 @@
 URL:            http://search.cpan.org/dist/Net_SSLeay.pm/
 Source0:        http://www.fas.harvard.edu/~behrooz/Net_SSLeay.pm-1.26.tar.gz
 Patch0:         %{name}-test14.patch
+Patch1:         perl-Net-SSLeay-1.2.5-CVE-2005-0106.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
-BuildRequires:  perl >= 1:5.6.1, openssl-devel
-Requires:  perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
+BuildRequires:  perl >= 1:5.6.1
+BuildRequires:  openssl-devel
+Requires:       perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
 Provides:       perl-Net_SSLeay = %{epoch}:%{version}-%{release}
 
 %description
@@ -28,8 +30,10 @@
 %prep
 %setup -q -n Net_SSLeay.pm-%{version}
 %patch0 -p0
+%patch1 -p1
 cp -p Net-SSLeay-Handle-*/Changes Changes.Net-SSLeay-Handle
-chmod 644 examples/*
+chmod -c 644 examples/*
+%{__perl} -pi -e 's|/usr/local/bin/perl|%{__perl}|' examples/*.pl
 iconv -f iso-8859-1 -t utf-8 SSLeay.pm > SSLeay.pm.utf8
 mv SSLeay.pm.utf8 SSLeay.pm
 
@@ -59,13 +63,16 @@
 
 %files
 %defattr(-,root,root,-)
-%doc Changes* Credits QuickRef README examples
-%{perl_vendorarch}/auto/Net
-%{perl_vendorarch}/Net
+%doc Changes* Credits QuickRef README examples/
+%{perl_vendorarch}/auto/Net/
+%{perl_vendorarch}/Net/
 %{_mandir}/man3/Net::SSLeay*.3*
 
 
 %changelog
+* Thu May 11 2006 Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:1.26-2
+- CVE-2005-0106 (#191351).
+
 * Mon Dec 20 2004 Ville Skyttä <ville.skytta at iki.fi> - 0:1.26-1
 - Drop fedora.us release prefix and suffix.