[Jifty-commit] jifty-dbi branch, master, updated. 0.67-6-gb92e703

Jifty commits jifty-commit at lists.jifty.org
Thu Apr 14 12:19:32 EDT 2011


The branch, master has been updated
       via  b92e703b6c4813014bab39c85db253e226921343 (commit)
      from  45df75f8f5e2caceaffc106d233b5c48a2442b70 (commit)

Summary of changes:
 Changes          |   14 ++++++++++++++
 META.yml         |    2 +-
 SIGNATURE        |   20 ++++++++++----------
 lib/Jifty/DBI.pm |    2 +-
 4 files changed, 26 insertions(+), 12 deletions(-)

- Log -----------------------------------------------------------------
commit b92e703b6c4813014bab39c85db253e226921343
Author: Shawn M Moore <sartak at bestpractical.com>
Date:   Thu Apr 14 12:16:24 2011 -0400

    0.68 and its Changes; regenerate SIGNATURE

diff --git a/Changes b/Changes
index acb1fc6..bcc7cb1 100644
--- a/Changes
+++ b/Changes
@@ -1,5 +1,19 @@
 Revision history for Perl extension Jifty::DBI.
 
+0.68 2011-04-14
+- Security:
+    * Prevent SQL injection in column names, operators, order and group by
+      (Alex Vandiver)
+    * Fix distinct_query to catch injection and correctly rewrite to
+      function => '' (Alex Vandiver)
+    * Prevent SQL injection via IS
+
+- Fixes:
+    * There is no need to check $args{column} around our LIKE adjustments
+      (Alex Vandiver)
+    * Slightly unify nigh-identical codepaths between Pg and Oracle
+      (Alex Vandiver)
+
 0.67 2011-02-28
 - Features:
     * Make ->distinct_column_values use ->simple_query, thus going through our
diff --git a/META.yml b/META.yml
index 0fdf1cd..3bc3c92 100644
--- a/META.yml
+++ b/META.yml
@@ -47,4 +47,4 @@ requires:
   version: 0
 resources:
   license: http://dev.perl.org/licenses/
-version: 0.67
+version: 0.68
diff --git a/SIGNATURE b/SIGNATURE
index 5e2d4a6..157b947 100644
--- a/SIGNATURE
+++ b/SIGNATURE
@@ -15,9 +15,9 @@ not run its Makefile.PL or Build.PL.
 Hash: SHA1
 
 SHA1 418a58763132c9a476627cbdce5ff01395ce84d4 .gitignore
-SHA1 45d9eaf8a622fdfc0bb9680396e2843eca5ec346 Changes
+SHA1 59a52f546dcd1cd87813bc59babf7b1cd32ac2d3 Changes
 SHA1 c2fb135f967d7093a6191d1b7e5e596e30040246 MANIFEST
-SHA1 f21d5f2dc45943fbc09ac079b2b18d942a6f3f81 META.yml
+SHA1 da76cdd7f1c89f107d3d5c9608aff9f886e503f8 META.yml
 SHA1 48bd6ca8a37ec79b7cae91028d7e9489ad33a03b Makefile.PL
 SHA1 e29d7b270f78a5a406921571b08290c46f2a42f6 README
 SHA1 82d6ac3f6def48558d09f8b6e3b53ed4194d8c81 ROADMAP
@@ -41,8 +41,8 @@ SHA1 b721c93ca5bc9a6aa863b49af15f1b1de6125935 inc/Module/Install/Makefile.pm
 SHA1 026cc0551a0ad399d195e395b46bdf842e115192 inc/Module/Install/Metadata.pm
 SHA1 5457015ea5a50e93465bf2dafa29feebd547f85b inc/Module/Install/Win32.pm
 SHA1 051e7fa8063908befa3440508d0584a2497b97db inc/Module/Install/WriteAll.pm
-SHA1 84ab56168fb14f1530c035b549c2af0750f0fd60 lib/Jifty/DBI.pm
-SHA1 e0375edf9f501e6b9c723fced70431108188419b lib/Jifty/DBI/Collection.pm
+SHA1 3a442252053b99436c8cdd084ced4801e4e22381 lib/Jifty/DBI.pm
+SHA1 fcab228fade86231a4a6024bd2c06813bbe4e555 lib/Jifty/DBI/Collection.pm
 SHA1 503ca4cf6693580dedf8adee58267532f8467908 lib/Jifty/DBI/Collection/Union.pm
 SHA1 bcba77fd2bacf0475aea1de97f57365c8de92ca6 lib/Jifty/DBI/Collection/Unique.pm
 SHA1 3ff96d74a769439111fba7b42b0c100d180ba6cd lib/Jifty/DBI/Column.pm
@@ -62,8 +62,8 @@ SHA1 ad030f4ec217584bedef2fe2720e4f9b1bc5af19 lib/Jifty/DBI/Filter/utf8.pm
 SHA1 b043cbb2d750aa1b93e25718ec563d62b3cf13b8 lib/Jifty/DBI/Handle.pm
 SHA1 719a11c911aac5306baa4b44f683aa76261100c7 lib/Jifty/DBI/Handle/Informix.pm
 SHA1 338116a45f8eb6bfca5e76e8d3be78fb61fffe81 lib/Jifty/DBI/Handle/ODBC.pm
-SHA1 960fd0b63f3de11924c5d47a3c0c6d1db105ed5b lib/Jifty/DBI/Handle/Oracle.pm
-SHA1 d1757e2c992ead86f70f0dfc9c659387dc9600cf lib/Jifty/DBI/Handle/Pg.pm
+SHA1 8281a163b21bb4a5cb0f2b24ce4a55dab716c408 lib/Jifty/DBI/Handle/Oracle.pm
+SHA1 754666e0c41143aec23a34ea3326bf4fd1b8a24e lib/Jifty/DBI/Handle/Pg.pm
 SHA1 2f4c08340712bd21679282ebd669ce7b99d6d646 lib/Jifty/DBI/Handle/SQLite.pm
 SHA1 bba2314c20fcc3ef71cc69090f1cd6bd515cd9b4 lib/Jifty/DBI/Handle/Sybase.pm
 SHA1 cf80896a175702a157770f64ae469430678c3357 lib/Jifty/DBI/Handle/mysql.pm
@@ -120,9 +120,9 @@ SHA1 f0ce911fe0b4bdc70fe9dbb524d8cd89bedfc904 t/metadata.t
 SHA1 97e60dd523a74a886c170eeb05b813aa551f5efe t/testmodels.pl
 SHA1 653c2f961d8b4f195e5391cd261f37815068e8d5 t/utils.pl
 -----BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.10 (GNU/Linux)
+Version: GnuPG v1.4.10 (Darwin)
 
-iD8DBQFNa8XhHdv9ZfNcOAcRAmUeAJ4zMQK4gRNn+i7pu3EzlZN2jhXkpQCfcgER
-Z8gawoecAhAUhGjBuFm0yAM=
-=1fkV
+iEYEARECAAYFAk2nHj0ACgkQsxfQtHhyRPrWkQCfc7CyLd/KO0JgsR6RKGRhlkkh
+gyYAnioe5ZVx9iTThRBm2gmhnDZEDgfy
+=JFMa
 -----END PGP SIGNATURE-----
diff --git a/lib/Jifty/DBI.pm b/lib/Jifty/DBI.pm
index 2489fc2..656a1b6 100644
--- a/lib/Jifty/DBI.pm
+++ b/lib/Jifty/DBI.pm
@@ -2,7 +2,7 @@ package Jifty::DBI;
 use warnings;
 use strict;
 
-$Jifty::DBI::VERSION = '0.67';
+$Jifty::DBI::VERSION = '0.68';
 
 =head1 NAME
 

-----------------------------------------------------------------------


More information about the Jifty-commit mailing list