Back to bug 1378885

Who When What Removed Added
Petr Pisar 2016-09-23 13:47:53 UTC Status NEW ASSIGNED
CC ppisar
Jindrich Novy 2016-09-23 14:07:03 UTC Flags needinfo?(ppisar)
Petr Pisar 2016-09-26 13:06:10 UTC Flags needinfo?(ppisar)
Frank Hirtz 2016-09-26 13:36:54 UTC CC fhirtz
Petr Pisar 2016-09-26 15:19:02 UTC Link ID CPAN 118087
Petr Pisar 2016-09-27 07:50:51 UTC Summary Regression in perl-version Perl version module does not accept tainted input
Petr Pisar 2016-09-27 14:49:11 UTC Keywords Patch
Petr Pisar 2016-10-10 12:47:01 UTC Blocks 1380363
Filip Krska 2016-12-01 09:30:59 UTC Blocks 1298243
Martin Kyral 2016-12-13 15:04:57 UTC CC mkyral
Petr Pisar 2017-01-19 09:12:29 UTC Doc Text Cause
Building a version object from tainted variable.
Consequence
The version->new() method reports "Invalid version format
(non-numeric data)" errorr.
Fix
Support for parsing tainted input was ported from
upstream. Support for printing tainted version object was
added.
Result
The version Perl module supports tainted input and
produces tainted version objects and strings.
Doc Type If docs needed, set a value Release Note
Joe Orton 2017-01-20 09:31:05 UTC CC jorton
Chris Williams 2017-03-08 17:53:55 UTC Blocks 1420851
Lenka Špačková 2017-04-27 19:22:33 UTC Docs Contact lkuprova
Petr Pisar 2017-07-07 06:30:07 UTC Blocks 1465904
Ondrej Vasik 2017-07-14 13:31:34 UTC Blocks 1466370
Jan Kepler 2017-07-21 10:01:50 UTC Blocks 1473612
Jan Kepler 2017-08-01 14:53:23 UTC CC jkejda
Petr Pisar 2017-08-08 10:45:15 UTC Assignee perl-maint-list ppisar
Petr Pisar 2017-08-08 11:13:54 UTC Status ASSIGNED MODIFIED
Fixed In Version perl-version-0.99.07-3.el7
Doc Text Cause
Building a version object from tainted variable.
Consequence
The version->new() method reports "Invalid version format
(non-numeric data)" errorr.
Fix
Support for parsing tainted input was ported from
upstream. Support for printing tainted version object was
added.
Result
The version Perl module supports tainted input and
produces tainted version objects and strings.
Cause
Building a version object from a tainted variable.
Consequence
The version->new() method reports "Invalid version format
(non-numeric data)" error.
Fix
Support for parsing tainted input was ported from
upstream. Support for printing tainted version object was
added.
Result
The version Perl module supports tainted input and
produces tainted version objects and strings.
errata-xmlrpc 2017-08-17 11:22:13 UTC Status MODIFIED ON_QA
Jakub Heger 2017-08-24 15:48:01 UTC Status ON_QA VERIFIED
CC jheger
Jakub Heger 2017-09-26 13:37:45 UTC QA Contact qe-baseos-apps jheger
Lenka Špačková 2018-01-23 12:51:19 UTC Doc Text Cause
Building a version object from a tainted variable.
Consequence
The version->new() method reports "Invalid version format
(non-numeric data)" error.
Fix
Support for parsing tainted input was ported from
upstream. Support for printing tainted version object was
added.
Result
The version Perl module supports tainted input and
produces tainted version objects and strings.
The *version Perl* module now supports tainted input and tainted version objects

Previously, the *version* module of *Perl* was unable to correctly parse tainted input. Consequently, when building a version object from a tainted variable, the `version->new()` method reported the `Invalid version format (non-numeric data)` error. This update adds support for parsing tainted input and for printing tainted version objects and strings.
Lenka Špačková 2018-02-08 12:54:35 UTC Doc Text The *version Perl* module now supports tainted input and tainted version objects

Previously, the *version* module of *Perl* was unable to correctly parse tainted input. Consequently, when building a version object from a tainted variable, the `version->new()` method reported the `Invalid version format (non-numeric data)` error. This update adds support for parsing tainted input and for printing tainted version objects and strings.
The *version* Perl module now supports tainted input and tainted version objects

Previously, the *version* module of Perl was unable to correctly parse tainted input. Consequently, when building a version object from a tainted variable, the `version->new()` method reported the `Invalid version format (non-numeric data)` error. This update adds support for parsing tainted input and for printing tainted version objects and strings.
errata-xmlrpc 2018-04-10 00:02:36 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2018-04-10 08:38:01 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2018-04-10 04:38:01 UTC
errata-xmlrpc 2018-04-10 08:38:20 UTC Link ID Red Hat Product Errata RHBA-2018:0663

Back to bug 1378885