diff options
Diffstat (limited to 'dev-lang/perl')
-rw-r--r-- | dev-lang/perl/Manifest | 12 | ||||
-rw-r--r-- | dev-lang/perl/files/perl-5.36.1-http-tiny.patch | 71 | ||||
-rw-r--r-- | dev-lang/perl/perl-5.34.1-r4.ebuild | 2 | ||||
-rw-r--r-- | dev-lang/perl/perl-5.36.0-r1.ebuild | 2 | ||||
-rw-r--r-- | dev-lang/perl/perl-5.36.0-r2.ebuild | 2 | ||||
-rw-r--r-- | dev-lang/perl/perl-5.36.1-r2.ebuild (renamed from dev-lang/perl/perl-5.36.1-r1.ebuild) | 2 | ||||
-rw-r--r-- | dev-lang/perl/perl-5.36.1.ebuild | 2 |
7 files changed, 74 insertions, 19 deletions
diff --git a/dev-lang/perl/Manifest b/dev-lang/perl/Manifest index f5db886a8392..6bbb27ca17d7 100644 --- a/dev-lang/perl/Manifest +++ b/dev-lang/perl/Manifest @@ -1,7 +1,7 @@ AUX perl-5.34.0-crossfit.patch 388 BLAKE2B dda2f10732422857f1a3977b6aa6ec0536dffaa53658e23378083393a55cf283906ef8f41dde2eb83e0de4e5dfd6dcd06d6b236f0a91c44086172bcaf105396a SHA512 5da4dd913790bd125667851807da9e37dac9cda78cce18ecffb8780f42d30b65f46817633e65027f5438f1a39286139fcf961d4bc98caf70946152200c3e72ee AUX perl-5.34.0-fallback-getcwd-pwd.patch 8158 BLAKE2B a6870b26dbfadb54c5ea4f075a4a5caad8d789853aade84ff434e5d994e9fdd82cdef6314a576b8cdb3a9948aa73aa650c1ff4656e9c8bca4fb58384396332b1 SHA512 fe778c2348da48006927b179d02d33489790f41afa079fabe6350853b2b2d8c168d0db7b81f1b6c988e3ac46d733326aab4aa4423a04d6380acf74eed91cfc5c AUX perl-5.36.0-clang16.patch 3850 BLAKE2B f691e7e23b18c5fe32b4f17fc0c786082fb1474fc3c06a46d6ef3b8609f10537b797308f403d4ca394a2666d752421fe2e7c0c224994c5271dd9211ba5d56652 SHA512 17d022d3a5909ecdf5e2c896d9c36caba006c4b3d0ed466a2c679b874210e7f84e0efcbc0ab5eea41e3eda0344fd869af46639ac94a0b943e961fb4044ced966 -AUX perl-5.36.1-http-tiny.patch 902 BLAKE2B 97fd9b3077e26b3dd758ca2037f9e769e255c7c1dbaadcf50e4a57aa5024774508297b1b7a95eab1d43f5791b2d519a356604fda8cc27e38aaf204125b3c5389 SHA512 81430a8099ddc21d5a34342a8d4ff008c38948b1fbb2b90bad6277884d476ea3191fa578f52ef13413d9e659740a9d9359e5a38e76166dfeeaadc324f60ee2db +AUX perl-5.36.1-http-tiny.patch 3707 BLAKE2B 8fcbf0e1df773ee2ff06fdb3242b007a271c240f019b1bc95c19cc81fcc1756f79b7cf61e70b50eb8e295ab8afaaa5cb361682bacbf8c21e6ff7067c0eba59df SHA512 a9b25496e606c6035781448bc067282a2c38a20fd6418cf91034f730361a9d0ae7c96ace98310a93c6f652a71b8a8b331b85fbdf9bd2c3b6fe82efc25dd27de5 DIST perl-5.34.0-patches-1.tar.xz 20360 BLAKE2B e60074c49f357d4841708f58b5165a44201783238ff33ee81580bb83ba07d3d2dda447edd30a71ce8c9bafe5e5e0235b68e31a79081c3482bdd589231f0e898e SHA512 909e1fb22cda4ca769b51645b51a64df81b92210cfee388ac57834406bc13e404f0a1e6bad0888fafc73fc34b7fb224801fd02e87fb4c2f9145482ad74374e7b DIST perl-5.34.1-zlib-1.2.12-encrypt-standard.zip.bin 207 BLAKE2B b52e1322930d5f7b8d6e3a319d24322b5dffb2313bdc757c0c8eb8713fd03adace199c8449ccc306e49b5b71e3c1b9786b2acb0ab8780a09d718a1c54f653226 SHA512 5a7e0950f0f94bd961fa9cf3e4ab5dd30006bee0f4553da755688a32d0411a4a850a28d4f998b36e7177dcf3aba192b899ca4138e84452baffef1a0b2ed1fb7b DIST perl-5.34.1-zlib-1.2.12.patch.xz 180480 BLAKE2B 39da5c1ef406d018f73e641d86ff81d5257cf1f7d6c1b0caac9651a546d70a2e0fff53bf0fc584907e792cb681a961c8442ab355f8f0c2cfffbb26c997cdbac0 SHA512 b32b57721b10943e21003429b42c535f7833e450f097855162241775a161a557fe0ea86ce615d6a9c885f165f45438cabba5580f9b299796d3a3da5ea720f1ff @@ -12,9 +12,9 @@ DIST perl-5.36.1.tar.xz 13053604 BLAKE2B baab610d16e444338ad7d529bad6a88e1201078 DIST perl-cross-1.3.7.tar.gz 118291 BLAKE2B dc9c060857d6905c817e91c3f5b1f546b76e02c6de02dc260185e0de8628a5ead3a557501da75549e2585cd30879190558740e697b1c78a69fa08ccb5649efcd SHA512 1111274f34f8b46e9f418883e9b1652ba4a5a9b4a5880a9a5b38bc8aeb5d75a9f4943233870f5ebf5fbcdc0c30b2983ace11ad051b55d3283327d8f2c15e172c DIST perl-cross-1.4.1.tar.gz 117688 BLAKE2B e01103fb92764213dafb1ab92954fdc4bdcf1bd71a0064279ee75fed55a1c71850eaabdf667d6ab1c15eadccf7497668e5bb5ab13de33fef707fba14bfd52912 SHA512 5f403d3a52f724383d25c23b08e8001954300fa8f07a5b49df440ef4d06ef756404a6e448093c4f4d4f9a470b1c3f2b1b8b27d3d227ac1823552f6a377edd06a DIST perl-cross-1.4.tar.gz 113861 BLAKE2B 7c7783afccc6a04ab122a7c60b1cff7f0a2725655b2b63325ca25d7b8acb0cf993b496e2a590db943054336337ad215550b6b2a565f1d91a5aa9cfe3a4c36db4 SHA512 bde73cac13c0b42c4c6783d7e30dea491d70b65131e1c8434ef75db1f39a8e15ef5857568b706e8456faa3822402676dd247a1f20f4bed983597fdd5a6b4faad -EBUILD perl-5.34.1-r4.ebuild 26353 BLAKE2B e6d0d5e4675c9abe78703b3f1bc4f181c658970bbf48a5d0cf9d7ed8ec37a7d677c2a5677f0ca001e90ac60a169c5dfcb467ba3a2320db4594294b4e8b7ffdc2 SHA512 a90717da8c1c4f6abe0896f5804914cb2ef9ce12a39cf76a637dc1b13922c876950b9f0cbe0d204a3cc97be9fc9535609cc859dd5f3c3547907c10be36608662 -EBUILD perl-5.36.0-r1.ebuild 25569 BLAKE2B 918b6f8406b35ef44b9cd395d7b01ebfbf3b96f9fe38896cc11a582cdd871d4e20ec3c38d4dbf22b9ce7005ce5de276594972468eea716168f5a4096d642dbaa SHA512 048878a521839e196ee157fa1eea3c2d721845a224fd6a689b8909ca70c60524e993aad4f21eaef2738dda4cf47322a3477a81a4cec798a80303125990bac738 -EBUILD perl-5.36.0-r2.ebuild 25783 BLAKE2B 9dc329a37e2fe3aeab171e64cef7b180c00751a634f695c5c84fb9849f9792d60f971571425f6ff3a586720bbca3112d09dcd5441d7c5ebbe739497b10077235 SHA512 b8519c54aad8c9267134012008108da2e91caba78332cbef930c17f6b8c0ac930b0c3c7eefd4f30077acbccc61dcd9d54688376bfc7b0be2eceb9a26910bb9c7 -EBUILD perl-5.36.1-r1.ebuild 25794 BLAKE2B cfe39661d86629e40c22f5d233b56891c7989e393fb0098aa7126b888addae64492566bea8ab596bc2e590d744ea1b37fd858a0d0d6a76f4741574bbc0d7ed05 SHA512 e15ce4491609e18f28d107238e3bca64f332203d45df623e8d4a958537f93d8519011d80ffc181eacd68b7eaf9650cb5ab18e3a4526c482ae319016328f765fb -EBUILD perl-5.36.1.ebuild 25578 BLAKE2B d4634439ca54d23b0e15fbad17cfb83dafab63a4f65d516b8f36731299424e6e3d22d5cf68f4657f4d8fbd7162e0df16849b69e338a54ce8eaca0ebe2e35b7ff SHA512 fe360900443f4524b1d7e7c7fa76cb290d7fa4c0ffc8428da82c738981d559b2f77c83c209c9ced24fcf0081721cc78976b3f98fec58e38d3558e4e2c858962a +EBUILD perl-5.34.1-r4.ebuild 26309 BLAKE2B b741a135daef8564e368c9d090ad0595c646d8bec9740f98e97681751e4bc692d139c8e0b7556159377f94c7b0cb0df0d2664ba8de21dd2a35152e853a09924d SHA512 097dab5bab229ab6dbe0ab761fcee0641cf84c880a2cf5c1e21b53d7147a0b7fc66aef2a0197f6496983db13f71d8e79d3d1a7ce0b91f4f0ca130bf0302c527c +EBUILD perl-5.36.0-r1.ebuild 25525 BLAKE2B a7a289a0455462689df60df1298f5160722fcd777a956052437aec9c95a309e28f891374c054bf4d91522ccbc9b211c8b3c71c2367461d9469b3ec70bb8a2a9a SHA512 1ffaa9fea64724aa39e49b6362a9005889965565ba92c023aabb048139262a3ea68879733892b8eb059b90280afbce1c88e3680d0a7f9b22914bf9a1eac6df97 +EBUILD perl-5.36.0-r2.ebuild 25739 BLAKE2B 9d128d9215b00e301154d27896f8819d7c1c1f0ee3a664f661cdee243f99017494359fd6f80c1d3d4a2d512587882d2813bfe159021576a8805fc6e7949cb009 SHA512 4409ddeb95af9922f6db2356709394825fb63907beac4861642e6afe2d7cf1894112906870dc81b1c4c0ada091c4d2f33cfe9ad3acebc2db2c263d722d9ef496 +EBUILD perl-5.36.1-r2.ebuild 25750 BLAKE2B 68228e6919eb64d5ec6d53642fa25268f1b8fb420d1273697c150051c2c55c5332ed547a2e7485899d9a13d7b1cdb832a9d04ffe061b9e229aa68b9b2e9eb316 SHA512 63c250507fdac0bc55712a296e1235d7e772972c4fce62b8acfe5c24b18d1b69fec28d869f41c3a0422e2c753843db8ad7ceb1b5877a830635eb2cc9092b57d0 +EBUILD perl-5.36.1.ebuild 25534 BLAKE2B 77418ac225bc990279b0f71a4125859ac46ea4cf1455575e068a900410a51a68e4617ecf7efb317cf0a65ad4399ff03f0120023f4c3fa4bc7c6c951535298a59 SHA512 28924b5868c3386f2e11ddb6ab158865df5b74af8b9a9bfce98adf3ad241004a06dff3aa220b0afe2dc0a600befe45c07f78d4cde05ee9615c195a495c183d52 MISC metadata.xml 621 BLAKE2B 8a14a3efd31858bd5be39476ff86bb9facf3984bbb1110c5b30c3af7aacfe0148357cf7c838ad94799c090a42ed036cc5a51205c3fcfd0d010833e0dad0e4820 SHA512 656902acadb21bf951bf08ca7775c095a5ec76f881215a2b7d3a42eb344a2b9e337cb9260ab87ff5a1730b5a0ef4efe852affdf2e418df9c7c39f18a0a7b89d4 diff --git a/dev-lang/perl/files/perl-5.36.1-http-tiny.patch b/dev-lang/perl/files/perl-5.36.1-http-tiny.patch index 34907cc6d9fd..2144b4d4ff86 100644 --- a/dev-lang/perl/files/perl-5.36.1-http-tiny.patch +++ b/dev-lang/perl/files/perl-5.36.1-http-tiny.patch @@ -1,19 +1,35 @@ -in current year, we should verify tls certs by default. -not doing so is as good as not using tls -https://www.openwall.com/lists/oss-security/2023/04/18/14 - Source: -https://git.alpinelinux.org/aports/plain/main/perl/default-https-perl-http-tiny.patch?id=fc21c0f7930ae3a9e2f50bacc305fb167a456ded +https://github.com/NixOS/nixpkgs/blob/5b709277f48df630c8fa7aab0cf6157f71a5b45c/pkgs/development/interpreters/perl/http-tiny-verify-ssl-by-default.patch Bug: https://bugs.gentoo.org/905296 See-also: https://github.com/chansen/p5-http-tiny/pull/151 See-also: https://github.com/chansen/p5-http-tiny/issues/152 - +See-also: https://www.openwall.com/lists/oss-security/2023/04/18/14 -- -diff --git a/cpan/HTTP-Tiny/lib/HTTP/Tiny.pm b/cpan/HTTP-Tiny/lib/HTTP/Tiny.pm -index 83ca06d..dc6217a 100644 +Patch for HTTP::Tiny that defaults verify_SSL to 1 + +Based on proposed Debian patch by Dominic Hargreaves: +https://salsa.debian.org/perl-team/interpreter/perl/-/commit/1490431e40e22052f75a0b3449f1f53cbd27ba92 --- a/cpan/HTTP-Tiny/lib/HTTP/Tiny.pm +++ b/cpan/HTTP-Tiny/lib/HTTP/Tiny.pm +@@ -41,7 +41,7 @@ sub _croak { require Carp; Carp::croak(@_) } + #pod read or write takes longer than the timeout, the request response status code + #pod will be 599. + #pod * C<verify_SSL> — A boolean that indicates whether to validate the SSL +-#pod certificate of an C<https> — connection (default is false) ++#pod certificate of an C<https> — connection (default is true) + #pod * C<SSL_options> — A hashref of C<SSL_*> — options to pass through to + #pod L<IO::Socket::SSL> + #pod +@@ -115,7 +115,7 @@ sub new { + max_redirect => 5, + timeout => defined $args{timeout} ? $args{timeout} : 60, + keep_alive => 1, +- verify_SSL => $args{verify_SSL} || $args{verify_ssl} || 0, # no verification by default ++ verify_SSL => $args{verify_SSL} // $args{verify_ssl} // 1, # verification by default + no_proxy => $ENV{no_proxy}, + }; + @@ -1055,7 +1055,7 @@ sub new { timeout => 60, max_line_size => 16384, @@ -23,3 +39,42 @@ index 83ca06d..dc6217a 100644 SSL_options => {}, %args }, $class; +@@ -1797,7 +1797,7 @@ C<timeout> — Request timeout in seconds (default is 60) If a socket open, read + + =item * + +-C<verify_SSL> — A boolean that indicates whether to validate the SSL certificate of an C<https> — connection (default is false) ++C<verify_SSL> — A boolean that indicates whether to validate the SSL certificate of an C<https> — connection (default is true) + + =item * + +@@ -2069,7 +2069,7 @@ Verification of server identity + + =back + +-B<By default, HTTP::Tiny does not verify server identity>. ++B<By default, HTTP::Tiny in Gentoo verifies server identity>. + + Server identity verification is controversial and potentially tricky because it + depends on a (usually paid) third-party Certificate Authority (CA) trust model +@@ -2077,16 +2077,14 @@ to validate a certificate as legitimate. This discriminates against servers + with self-signed certificates or certificates signed by free, community-driven + CA's such as L<CAcert.org|http://cacert.org>. + +-By default, HTTP::Tiny does not make any assumptions about your trust model, +-threat level or risk tolerance. It just aims to give you an encrypted channel +-when you need one. +- + Setting the C<verify_SSL> attribute to a true value will make HTTP::Tiny verify + that an SSL connection has a valid SSL certificate corresponding to the host + name of the connection and that the SSL certificate has been verified by a CA. + Assuming you trust the CA, this will protect against a L<man-in-the-middle +-attack|http://en.wikipedia.org/wiki/Man-in-the-middle_attack>. If you are +-concerned about security, you should enable this option. ++attack|http://en.wikipedia.org/wiki/Man-in-the-middle_attack>. ++ ++If you are not concerned about security, and this default in Gentoo causes ++problems, you should disable this option. + + Certificate verification requires a file containing trusted CA certificates. + diff --git a/dev-lang/perl/perl-5.34.1-r4.ebuild b/dev-lang/perl/perl-5.34.1-r4.ebuild index ba7dde8c47c1..8afad57bbf3d 100644 --- a/dev-lang/perl/perl-5.34.1-r4.ebuild +++ b/dev-lang/perl/perl-5.34.1-r4.ebuild @@ -58,7 +58,7 @@ LICENSE="|| ( Artistic GPL-1+ )" SLOT="0/${SUBSLOT}" if [[ "${PV##*.}" != "9999" ]] && [[ "${PV/rc//}" == "${PV}" ]] ; then -KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~x64-cygwin ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris" +KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris" fi IUSE="berkdb debug doc gdbm ithreads minimal quadmath" diff --git a/dev-lang/perl/perl-5.36.0-r1.ebuild b/dev-lang/perl/perl-5.36.0-r1.ebuild index 7dae7ebd30e7..0b1e5c494634 100644 --- a/dev-lang/perl/perl-5.36.0-r1.ebuild +++ b/dev-lang/perl/perl-5.36.0-r1.ebuild @@ -53,7 +53,7 @@ LICENSE="|| ( Artistic GPL-1+ )" SLOT="0/${SUBSLOT}" if [[ "${PV##*.}" != "9999" ]] && [[ "${PV/rc//}" == "${PV}" ]] ; then -KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~x64-cygwin ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris" +KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris" fi IUSE="berkdb debug doc gdbm ithreads minimal quadmath" diff --git a/dev-lang/perl/perl-5.36.0-r2.ebuild b/dev-lang/perl/perl-5.36.0-r2.ebuild index b6585386c41a..04f2ba877964 100644 --- a/dev-lang/perl/perl-5.36.0-r2.ebuild +++ b/dev-lang/perl/perl-5.36.0-r2.ebuild @@ -53,7 +53,7 @@ LICENSE="|| ( Artistic GPL-1+ )" SLOT="0/${SUBSLOT}" if [[ "${PV##*.}" != "9999" ]] && [[ "${PV/rc//}" == "${PV}" ]] ; then - KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~x64-cygwin ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris" + KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris" fi IUSE="berkdb debug doc gdbm ithreads minimal quadmath" diff --git a/dev-lang/perl/perl-5.36.1-r1.ebuild b/dev-lang/perl/perl-5.36.1-r2.ebuild index a0f421214526..859e6f4e5921 100644 --- a/dev-lang/perl/perl-5.36.1-r1.ebuild +++ b/dev-lang/perl/perl-5.36.1-r2.ebuild @@ -53,7 +53,7 @@ LICENSE="|| ( Artistic GPL-1+ )" SLOT="0/${SUBSLOT}" if [[ "${PV##*.}" != "9999" ]] && [[ "${PV/rc//}" == "${PV}" ]] ; then - KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~x64-cygwin ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris" + KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris" fi IUSE="berkdb debug doc gdbm ithreads minimal quadmath" diff --git a/dev-lang/perl/perl-5.36.1.ebuild b/dev-lang/perl/perl-5.36.1.ebuild index 7b6a21802eb7..645849c0a0b6 100644 --- a/dev-lang/perl/perl-5.36.1.ebuild +++ b/dev-lang/perl/perl-5.36.1.ebuild @@ -53,7 +53,7 @@ LICENSE="|| ( Artistic GPL-1+ )" SLOT="0/${SUBSLOT}" if [[ "${PV##*.}" != "9999" ]] && [[ "${PV/rc//}" == "${PV}" ]] ; then - KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~x64-cygwin ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris" + KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris" fi IUSE="berkdb debug doc gdbm ithreads minimal quadmath" |