Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package perl-LWP-Protocol-https for
openSUSE:Factory checked in at 2023-08-16 14:16:22
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/perl-LWP-Protocol-https (Old)
and /work/SRC/openSUSE:Factory/.perl-LWP-Protocol-https.new.11712 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-LWP-Protocol-https"
Wed Aug 16 14:16:22 2023 rev:17 rq:1103914 version:6.110.0
Changes:
--------
---
/work/SRC/openSUSE:Factory/perl-LWP-Protocol-https/perl-LWP-Protocol-https.changes
2020-12-21 12:35:23.966963918 +0100
+++
/work/SRC/openSUSE:Factory/.perl-LWP-Protocol-https.new.11712/perl-LWP-Protocol-https.changes
2023-08-16 14:16:25.938712445 +0200
@@ -1,0 +2,27 @@
+Fri Aug 11 16:36:32 UTC 2023 - Tina Müller <[email protected]>
+
+- Remove CVE-2014-3230.patch, upstream was fixed. CVE-2014-3230, Debian #746576
+
+-------------------------------------------------------------------
+Fri Aug 11 16:30:24 UTC 2023 - Tina Müller <[email protected]>
+
+- Update LWP-Protocol-https-6.09-systemca.diff
+
+-------------------------------------------------------------------
+Mon Jul 10 03:06:48 UTC 2023 - Tina Müller <[email protected]>
+
+- updated to 6.11
+ see /usr/share/doc/packages/perl-LWP-Protocol-https/Changes
+
+ 6.11 2023-07-09 15:10:30Z
+ - Remove Authority section from dist.ini (GH#64) (Olaf Alders)
+ - Add very basic diagnostic information via test (GH#73) (Olaf Alders)
+ - CVE-2014-3230 - don't disable verification if only hostnames should not
+ (GH#14) (Steffen Ullrich)
+ - Make explicit requirement of Mozilla::CA obsolete (GH#72) (Steffen
+ Ullrich and Olaf Alders)
+ - Remove _in_san and _cn_match. Empty out the _check_sock hook (GH#71)
+ (Chase Whitener)
+ - Use warnings (GH#69) (Pete Houston)
+
+-------------------------------------------------------------------
Old:
----
CVE-2014-3230.patch
LWP-Protocol-https-6.10.tar.gz
New:
----
LWP-Protocol-https-6.11.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ perl-LWP-Protocol-https.spec ++++++
--- /var/tmp/diff_new_pack.zgH2iN/_old 2023-08-16 14:16:26.614716725 +0200
+++ /var/tmp/diff_new_pack.zgH2iN/_new 2023-08-16 14:16:26.618716750 +0200
@@ -1,7 +1,7 @@
#
# spec file for package perl-LWP-Protocol-https
#
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -16,35 +16,35 @@
#
+%define cpan_name LWP-Protocol-https
Name: perl-LWP-Protocol-https
-Version: 6.10
+Version: 6.110.0
Release: 0
-%define cpan_name LWP-Protocol-https
-Summary: Provide https support for LWP::UserAgent
+%define cpan_version 6.11
License: Artistic-1.0 OR GPL-1.0-or-later
-Group: Development/Libraries/Perl
+Summary: Provide https support for LWP::UserAgent
URL: https://metacpan.org/release/%{cpan_name}
-Source0:
https://cpan.metacpan.org/authors/id/O/OA/OALDERS/%{cpan_name}-%{version}.tar.gz
+Source0:
https://cpan.metacpan.org/authors/id/O/OA/OALDERS/%{cpan_name}-%{cpan_version}.tar.gz
Source1: cpanspec.yml
Patch0: %{cpan_name}-6.09-systemca.diff
-Patch1: CVE-2014-3230.patch
BuildArch: noarch
-BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: perl
BuildRequires: perl-macros
-BuildRequires: perl(IO::Socket::SSL) >= 1.54
+BuildRequires: perl(IO::Socket::SSL) >= 1.970
BuildRequires: perl(IO::Socket::SSL::Utils)
BuildRequires: perl(LWP::Protocol::http)
BuildRequires: perl(LWP::UserAgent) >= 6.06
-#BuildRequires: perl(Mozilla::CA) >= 20180117
BuildRequires: perl(Net::HTTPS) >= 6
BuildRequires: perl(Test::More) >= 0.96
+BuildRequires: perl(Test::Needs) >= 0.002010
BuildRequires: perl(Test::RequiresInternet)
-Requires: perl(IO::Socket::SSL) >= 1.54
+Requires: perl(IO::Socket::SSL) >= 1.970
Requires: perl(LWP::Protocol::http)
Requires: perl(LWP::UserAgent) >= 6.06
-#Requires: perl(Mozilla::CA) >= 20180117
Requires: perl(Net::HTTPS) >= 6
+Provides: perl(LWP::Protocol::https) = 6.110.0
+Provides: perl(LWP::Protocol::https::Socket) = 6.110.0
+%define __perllib_provides /bin/true
%{perl_requires}
%description
@@ -66,13 +66,11 @@
what underlying modules to install.
%prep
-%setup -q -n %{cpan_name}-%{version}
-%patch0 -p1
-%patch1 -p1
+%autosetup -n %{cpan_name}-%{cpan_version} -p1
%build
perl Makefile.PL INSTALLDIRS=vendor
-make %{?_smp_mflags}
+%make_build
%check
make test
@@ -83,7 +81,6 @@
%perl_gen_filelist
%files -f %{name}.files
-%defattr(-,root,root,755)
%doc Changes CONTRIBUTING.md
%license LICENSE
++++++ LWP-Protocol-https-6.09-systemca.diff ++++++
--- /var/tmp/diff_new_pack.zgH2iN/_old 2023-08-16 14:16:26.642716902 +0200
+++ /var/tmp/diff_new_pack.zgH2iN/_new 2023-08-16 14:16:26.642716902 +0200
@@ -1,25 +1,15 @@
-diff -ur LWP-Protocol-https-6.09/lib/LWP/Protocol/https.pm
LWP-Protocol-https-6.09_fix/lib/LWP/Protocol/https.pm
---- LWP-Protocol-https-6.09/lib/LWP/Protocol/https.pm 2020-07-16
15:33:07.000000000 +0200
-+++ LWP-Protocol-https-6.09_fix/lib/LWP/Protocol/https.pm 2020-10-15
15:56:49.380284037 +0200
-@@ -22,7 +22,8 @@
- else {
- $ssl_opts{SSL_verify_mode} = 0;
+diff --git a/lib/LWP/Protocol/https.pm b/lib/LWP/Protocol/https.pm
+index 16fce19..b1a18df 100644
+--- a/lib/LWP/Protocol/https.pm
++++ b/lib/LWP/Protocol/https.pm
+@@ -28,7 +28,8 @@ sub _extra_sock_opts
+ $ssl_opts{SSL_verifycn_scheme} = 'none';
+ }
}
- if ($ssl_opts{SSL_verify_mode}) {
+ my $suse_allows_mozilla_ca = 0;
+ if ($suse_allows_mozilla_ca && $ssl_opts{SSL_verify_mode}) {
- unless (exists $ssl_opts{SSL_ca_file} || exists $ssl_opts{SSL_ca_path})
{
- eval {
- require Mozilla::CA;
-diff -ur LWP-Protocol-https-6.09/Makefile.PL
LWP-Protocol-https-6.09_fix/Makefile.PL
---- LWP-Protocol-https-6.09/Makefile.PL 2020-07-16 15:33:07.000000000
+0200
-+++ LWP-Protocol-https-6.09_fix/Makefile.PL 2020-10-15 15:56:08.235630479
+0200
-@@ -22,7 +22,6 @@
- "IO::Socket::SSL" => "1.54",
- "LWP::Protocol::http" => 0,
- "LWP::UserAgent" => "6.06",
-- "Mozilla::CA" => 20180117,
- "Net::HTTPS" => 6,
- "base" => 0,
- "strict" => 0
+ unless (exists $ssl_opts{SSL_ca_file} || exists
$ssl_opts{SSL_ca_path}) {
+ if ($Net::HTTPS::SSL_SOCKET_CLASS eq 'IO::Socket::SSL'
+ && defined &IO::Socket::SSL::default_ca
++++++ LWP-Protocol-https-6.10.tar.gz -> LWP-Protocol-https-6.11.tar.gz ++++++
++++ 1888 lines of diff (skipped)
++++++ cpanspec.yml ++++++
--- /var/tmp/diff_new_pack.zgH2iN/_old 2023-08-16 14:16:26.846718193 +0200
+++ /var/tmp/diff_new_pack.zgH2iN/_new 2023-08-16 14:16:26.850718219 +0200
@@ -8,7 +8,6 @@
# patch for using system certificates
"%{cpan_name}-6.09-systemca.diff": -p1
# see https://github.com/libwww-perl/lwp-protocol-https/pull/14
- CVE-2014-3230.patch: -p1
#preamble: |-
# BuildRequires: gcc-c++
#post_prep: |-
