From 210111da38fa5acd252d8c6959bd0639cdbbde9d Mon Sep 17 00:00:00 2001 From: trace Date: Sat, 5 Sep 2026 14:20:58 +0000 Subject: [PATCH 1/2] trace-pr anchor From 2a96c4fb95dd09f5e559126f9a38ac0411ce7702 Mon Sep 17 00:00:00 2001 From: trace Date: Sat, 5 Sep 2026 14:20:58 +0000 Subject: [PATCH 2/2] perlPackages.FileFindRule: 0.34 (fix CVE-2011-10007) --- .../perl-modules/FileFindRule-CVE-2011-10007.patch | 13 +++++++++++++ pkgs/top-level/perl-packages.nix | 1 + 2 files changed, 14 insertions(+) create mode 100644 pkgs/development/perl-modules/FileFindRule-CVE-2011-10007.patch diff --git a/pkgs/development/perl-modules/FileFindRule-CVE-2011-10007.patch b/pkgs/development/perl-modules/FileFindRule-CVE-2011-10007.patch new file mode 100644 index 0000000000000..5eca511e5a1e2 --- /dev/null +++ b/pkgs/development/perl-modules/FileFindRule-CVE-2011-10007.patch @@ -0,0 +1,13 @@ +diff --git a/lib/File/Find/Rule.pm b/lib/File/Find/Rule.pm +index feccc76..d4dc475 100644 +--- a/lib/File/Find/Rule.pm ++++ b/lib/File/Find/Rule.pm +@@ -420,7 +420,7 @@ sub grep { + + $self->exec( sub { + local *FILE; +- open FILE, $_ or return; ++ open FILE, '<', $_ or return; + local ($_, $.); + while () { + for my $p (@pattern) { diff --git a/pkgs/top-level/perl-packages.nix b/pkgs/top-level/perl-packages.nix index b4a23d1986b53..2ff8ea39da2e3 100644 --- a/pkgs/top-level/perl-packages.nix +++ b/pkgs/top-level/perl-packages.nix @@ -13327,6 +13327,7 @@ with self; url = "mirror://cpan/authors/id/R/RC/RCLAMP/File-Find-Rule-0.34.tar.gz"; hash = "sha256-fm8WzDPrHyn/Jb7lHVE/S4qElHu/oY7bLTzECi1kyv4="; }; + patches = [ ../development/perl-modules/FileFindRule-CVE-2011-10007.patch ]; propagatedBuildInputs = [ NumberCompare TextGlob