Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package perl-Lexical-SealRequireHints for
openSUSE:Factory checked in at 2023-03-14 18:17:37
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/perl-Lexical-SealRequireHints (Old)
and /work/SRC/openSUSE:Factory/.perl-Lexical-SealRequireHints.new.31432
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-Lexical-SealRequireHints"
Tue Mar 14 18:17:37 2023 rev:6 rq:1071467 version:0.012
Changes:
--------
---
/work/SRC/openSUSE:Factory/perl-Lexical-SealRequireHints/perl-Lexical-SealRequireHints.changes
2017-08-28 15:04:50.128757453 +0200
+++
/work/SRC/openSUSE:Factory/.perl-Lexical-SealRequireHints.new.31432/perl-Lexical-SealRequireHints.changes
2023-03-14 18:17:46.880096347 +0100
@@ -1,0 +2,52 @@
+Sat Mar 11 03:06:17 UTC 2023 - Tina Müller <[email protected]>
+
+- updated to 0.012
+ see /usr/share/doc/packages/perl-Lexical-SealRequireHints/Changes
+
+ version 0.012; 2023-03-10
+ * bugfix: comprehensive set of preemptive loads of modules for which
+ a delayed load might have been compiled while loading this module
+ * bugfix: if AutoLoader was loaded during (or before) loading this
+ module, flush its compiled code and reload it, to make subsequent
+ autoloads of *.al files not leak hints
+ * bugfix: if utf8_heavy.pl was loaded during (or before) loading this
+ module, flush its compiled code and reload it, to make subsequent
+ loads of Unicode data files not leak hints
+ * bugfix: perform preemptive loads, of modules for which a delayed
+ load might have been compiled while loading this module, regardless
+ of whether XS module loading was successful
+ * bugfix: also work around hint leakage affecting do-file, which
+ suffers exactly the same problem as require
+ * correct thread behaviour: make the XS implementation behave the way
+ the pure Perl implementation already did, by not applying workaround
+ until it has been requested in a particular thread (including being
+ requested pre-cloning in a thread from which this thread was cloned)
+ * be more conservative about maintaining op tree structure
+ * port to Perl 5.33.1, which defines a PERL_VERSION_GE() macro that
+ clashes with the one this module previously had
+ * delay the preemptive module loads, of modules potentially subject
+ to early-compiled delayed loads, until applying the fix
+ * update swash test for Perl 5.27.11, which avoids actually loading
+ swashes most of the time
+ * skip thread tests on some old versions of Perl (around 5.10.0) where
+ a core bug makes thread creation violate an internal assertion and
+ causes crashes
+ * skip thread tests on pre-5.8.9 Perls where a core bug makes thread
+ creation corrupt memory
+ * skip thread tests on pre-5.8.3 Perls where a core bug makes thread
+ completion break the global PL_sv_placeholder
+ * in t/override.t, make the test overrides of require() provide the
+ correct context to the file scope of each file being loaded
+ * test the point at which the workaround goes into effect
+ * in documentation, describe the bug affecting "do" on Perls 5.15.{5..7}
+ * in documentation, use four-column indentation for all verbatim
+ material
+ * in META.{yml,json}, point to public bug tracker
+ * use full stricture in the module, now that delayed module loads
+ compiled while loading this module are properly handled so there's
+ no need to try avoiding them entirely
+ * in XS, better argument parenthesisation in a macro
+ * avoid some compiler warnings that arise on Perl 5.6
+ * fix indentation in the reserve definition of wrap_op_checker()
+
+-------------------------------------------------------------------
Old:
----
Lexical-SealRequireHints-0.011.tar.gz
New:
----
Lexical-SealRequireHints-0.012.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ perl-Lexical-SealRequireHints.spec ++++++
--- /var/tmp/diff_new_pack.kim5hY/_old 2023-03-14 18:17:47.324098721 +0100
+++ /var/tmp/diff_new_pack.kim5hY/_new 2023-03-14 18:17:47.328098742 +0100
@@ -1,7 +1,7 @@
#
# spec file for package perl-Lexical-SealRequireHints
#
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -12,21 +12,19 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
+%define cpan_name Lexical-SealRequireHints
Name: perl-Lexical-SealRequireHints
-Version: 0.011
+Version: 0.012
Release: 0
-%define cpan_name Lexical-SealRequireHints
-Summary: Prevent Leakage of Lexical Hints
-License: Artistic-1.0 or GPL-1.0+
-Group: Development/Libraries/Perl
-Url: http://search.cpan.org/dist/Lexical-SealRequireHints/
+License: Artistic-1.0 OR GPL-1.0-or-later
+Summary: Prevent leakage of lexical hints
+URL: https://metacpan.org/release/%{cpan_name}
Source0:
https://cpan.metacpan.org/authors/id/Z/ZE/ZEFRAM/%{cpan_name}-%{version}.tar.gz
Source1: cpanspec.yml
-BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: perl
BuildRequires: perl-macros
BuildRequires: perl(Module::Build)
@@ -35,7 +33,7 @@
%description
This module works around two historical bugs in Perl's handling of the
'%^H' (lexical hints) variable. One bug causes lexical state in one file to
-leak into another that is 'require'd/'use'd from it. This bug, [perl
+leak into another that is 'require'd/'use'd/'do'ed from it. This bug, [perl
#68590], was present from Perl 5.6 up to Perl 5.10, fixed in Perl 5.11.0.
The second bug causes lexical state (normally a blank '%^H' once the first
bug is fixed) to leak outwards from 'utf8.pm', if it is automatically
@@ -48,36 +46,36 @@
essential to work around these bugs when using such modules. On versions of
Perl that require such a workaround, this module globally changes the
behaviour of 'require', including 'use' and the implicit 'require'
-performed in Unicode regular expression matching, so that it no longer
-exhibits these bugs.
+performed in Unicode regular expression matching, and of 'do', so that they
+no longer exhibit these bugs.
The workaround supplied by this module takes effect the first time its
'import' method is called. Typically this will be done by means of a 'use'
statement. This should be done as early as possible, because it only
-affects 'require'/'use' statements that are compiled after the workaround
-goes into effect. For 'use' statements, and 'require' statements that are
-executed immediately and only once, it suffices to invoke the workaround
-when loading the first module that will set up vulnerable lexical state.
-Delayed-action 'require' statements, however, are more troublesome, and can
-require the workaround to be loaded much earlier. Ultimately, an affected
-Perl program may need to load the workaround as very nearly its first
-action. Invoking this module multiple times, from multiple modules, is not
-a problem: the workaround is only applied once, and applies to everything
-subsequently compiled.
+affects 'require'/'use'/'do' statements that are compiled after the
+workaround goes into effect. For 'use' statements, and 'require' and 'do'
+statements that are executed immediately and only once, it suffices to
+invoke the workaround when loading the first module that will set up
+vulnerable lexical state. Delayed-action 'require' and 'do' statements,
+however, are more troublesome, and can require the workaround to be loaded
+much earlier. Ultimately, an affected Perl program may need to load the
+workaround as very nearly its first action. Invoking this module multiple
+times, from multiple modules, is not a problem: the workaround is only
+applied once, and applies to everything subsequently compiled.
This module is implemented in XS, with a pure Perl backup version for
systems that can't handle XS modules. The XS version has a better chance of
-playing nicely with other modules that modify 'require' handling. The pure
-Perl version can't work at all on some Perl versions; users of those
-versions must use the XS. On all Perl versions suffering the underlying
-hint leakage bug, pure Perl hooking of 'require' breaks the use of
-'require' without an explicit parameter (implicitly using '$_').
+playing nicely with other modules that modify 'require' or 'do' handling.
+The pure Perl version can't work at all on some Perl versions; users of
+those versions must use the XS. On all Perl versions suffering the
+underlying hint leakage bug, pure Perl hooking of 'require' breaks the use
+of 'require' without an explicit parameter (implicitly using '$_').
%prep
-%setup -q -n %{cpan_name}-%{version}
+%autosetup -n %{cpan_name}-%{version}
%build
-%{__perl} Build.PL installdirs=vendor optimize="%{optflags}"
+perl Build.PL installdirs=vendor optimize="%{optflags}"
./Build build flags=%{?_smp_mflags}
%check
@@ -88,7 +86,6 @@
%perl_gen_filelist
%files -f %{name}.files
-%defattr(-,root,root,755)
%doc Changes README
%changelog
++++++ Lexical-SealRequireHints-0.011.tar.gz ->
Lexical-SealRequireHints-0.012.tar.gz ++++++
++++ 2195 lines of diff (skipped)
