Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package perl-Cpanel-JSON-XS for
openSUSE:Factory checked in at 2026-09-08 16:58:14
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/perl-Cpanel-JSON-XS (Old)
and /work/SRC/openSUSE:Factory/.perl-Cpanel-JSON-XS.new.1265 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-Cpanel-JSON-XS"
Tue Sep 8 16:58:14 2026 rev:46 rq:1376324 version:4.440.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/perl-Cpanel-JSON-XS/perl-Cpanel-JSON-XS.changes
2026-07-21 23:11:58.161516153 +0200
+++
/work/SRC/openSUSE:Factory/.perl-Cpanel-JSON-XS.new.1265/perl-Cpanel-JSON-XS.changes
2026-09-08 17:01:52.681401018 +0200
@@ -1,0 +2,12 @@
+Wed Sep 2 09:38:57 UTC 2026 - Tina Müller <[email protected]>
+
+- updated to 4.440.0 (4.44)
+ see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes
+
+ 4.44 2026-09-02 (rurban)
+ - Fix canonical sort infinite loop (GH #252 amelchio): malformed UTF-8
keys
+ (e.g. Latin-1 byte strings mixed with Unicode) made utf16_cmp
+ treat the decoder's (STRLEN)-1 malformed sentinel as a length,
+ wrapping the buffer pointer. Now checked as 0 or > remaining length.
+
+-------------------------------------------------------------------
Old:
----
Cpanel-JSON-XS-4.43.tar.gz
New:
----
Cpanel-JSON-XS-4.44.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ perl-Cpanel-JSON-XS.spec ++++++
--- /var/tmp/diff_new_pack.Dz9ej2/_old 2026-09-08 17:01:53.616440102 +0200
+++ /var/tmp/diff_new_pack.Dz9ej2/_new 2026-09-08 17:01:53.619440227 +0200
@@ -18,10 +18,10 @@
%define cpan_name Cpanel-JSON-XS
Name: perl-Cpanel-JSON-XS
-Version: 4.430.0
+Version: 4.440.0
Release: 0
-# 4.43 -> normalize -> 4.430.0
-%define cpan_version 4.43
+# 4.44 -> normalize -> 4.440.0
+%define cpan_version 4.44
License: Artistic-1.0 OR GPL-1.0-or-later
Summary: CPanel fork of JSON::XS, fast and correct serializing
URL: https://metacpan.org/release/%{cpan_name}
++++++ Cpanel-JSON-XS-4.43.tar.gz -> Cpanel-JSON-XS-4.44.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.43/.github/workflows/testsuite.yml
new/Cpanel-JSON-XS-4.44/.github/workflows/testsuite.yml
--- old/Cpanel-JSON-XS-4.43/.github/workflows/testsuite.yml 2026-07-18
08:55:52.000000000 +0200
+++ new/Cpanel-JSON-XS-4.44/.github/workflows/testsuite.yml 2026-09-02
10:20:01.000000000 +0200
@@ -19,7 +19,7 @@
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- run: perl -V
- name: install cpan deps
uses:
perl-actions/install-with-cpanm@0f3cc9bc0b055cc20750d218061ebbdebd101bb3 #
stable
@@ -64,6 +64,7 @@
matrix:
perl-version:
[
+ "5.44",
"5.42",
"5.40",
"5.38",
@@ -85,8 +86,8 @@
]
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
- - uses:
shogo82148/actions-setup-perl@3d3cb73ca65d657a809d97eab324d4e4f140bf5e # v1.42.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
+ - uses:
shogo82148/actions-setup-perl@53e33bb27be492a926eee378e8a5f7ff6618b061 # v1.43.1
with:
perl-version: ${{ matrix.perl-version }}
- run: perl -V
@@ -117,7 +118,7 @@
perl-version: [latest]
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- run: perl -V
- run: perl Makefile.PL
- run: make test
@@ -139,7 +140,7 @@
perl-version: [latest]
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- run: perl -V
- run: perl Makefile.PL
#- run: prove -vb t/*.t
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.43/Changes
new/Cpanel-JSON-XS-4.44/Changes
--- old/Cpanel-JSON-XS-4.43/Changes 2026-07-18 08:55:52.000000000 +0200
+++ new/Cpanel-JSON-XS-4.44/Changes 2026-09-02 10:20:31.000000000 +0200
@@ -2,6 +2,12 @@
TODO: http://stevehanov.ca/blog/index.php?id=104 compression
+4.44 2026-09-02 (rurban)
+ - Fix canonical sort infinite loop (GH #252 amelchio): malformed UTF-8
keys
+ (e.g. Latin-1 byte strings mixed with Unicode) made utf16_cmp
+ treat the decoder's (STRLEN)-1 malformed sentinel as a length,
+ wrapping the buffer pointer. Now checked as 0 or > remaining length.
+
4.43 2026-07-18 (rurban)
- Fix canonical sort: compare by UTF-16 code units per RFC 8785 (GH
#248, leont)
- Fix canonical sort on Perl 5.8-5.18: utf16_cmp now always attempts
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.43/META.json
new/Cpanel-JSON-XS-4.44/META.json
--- old/Cpanel-JSON-XS-4.43/META.json 2026-07-18 08:56:30.000000000 +0200
+++ new/Cpanel-JSON-XS-4.44/META.json 2026-09-02 10:23:04.000000000 +0200
@@ -4,7 +4,7 @@
"Reini Urban <[email protected]>"
],
"dynamic_config" : 0,
- "generated_by" : "ExtUtils::MakeMaker version 7.76, CPAN::Meta::Converter
version 2.150010",
+ "generated_by" : "ExtUtils::MakeMaker version 7.76, CPAN::Meta::Converter
version 2.150013",
"license" : [
"perl_5"
],
@@ -100,7 +100,7 @@
"url" : "https://github.com/rurban/Cpanel-JSON-XS";
}
},
- "version" : "4.43",
+ "version" : "4.44",
"x_contributors" : [
"Ashley Willis <[email protected]>",
"Chip Salzenberg <[email protected]>",
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.43/META.yml
new/Cpanel-JSON-XS-4.44/META.yml
--- old/Cpanel-JSON-XS-4.43/META.yml 2026-07-18 08:56:29.000000000 +0200
+++ new/Cpanel-JSON-XS-4.44/META.yml 2026-09-02 10:23:03.000000000 +0200
@@ -22,7 +22,7 @@
Config: '0'
ExtUtils::MakeMaker: '0'
dynamic_config: 0
-generated_by: 'ExtUtils::MakeMaker version 7.76, CPAN::Meta::Converter version
2.150010'
+generated_by: 'ExtUtils::MakeMaker version 7.76, CPAN::Meta::Converter version
2.150013'
license: perl
meta-spec:
url: http://module-build.sourceforge.net/META-spec-v1.4.html
@@ -48,7 +48,7 @@
bugtracker: https://github.com/rurban/Cpanel-JSON-XS/issues
license: http://dev.perl.org/licenses/
repository: https://github.com/rurban/Cpanel-JSON-XS
-version: '4.43'
+version: '4.44'
x_contributors:
- 'Ashley Willis <[email protected]>'
- 'Chip Salzenberg <[email protected]>'
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.43/SIGNATURE
new/Cpanel-JSON-XS-4.44/SIGNATURE
--- old/Cpanel-JSON-XS-4.43/SIGNATURE 2026-07-18 08:56:30.000000000 +0200
+++ new/Cpanel-JSON-XS-4.44/SIGNATURE 2026-09-02 10:23:04.000000000 +0200
@@ -16,18 +16,18 @@
SHA256 aac2b4bbaa7b93eaf72300f60e167a17e05adcd721087f735ba55d2900f31490
.appveyor.yml
SHA256 082201a3cbd62a55f2e58ffbb991c4b2bb806de0009bc9497ffcc07202f60855
.github/FUNDING.yml
-SHA256 b70e3c760ab28a829281d0b03cde42b9d803e333f852315ffb8831db1681147b
.github/workflows/testsuite.yml
+SHA256 3b83a617a51ef69794df86df31128da18bc1f17a31d4303d95af4bce54cb7ac9
.github/workflows/testsuite.yml
SHA256 a3c34aba52e269e6cec558ecf9cff393138574189fdff26b183bee9cc2e0434f
.travis.yml
SHA256 c3f2a1a4f66382f796f71a571946722edba53cf3238152b26fd325f4c2f1a20f
.whitesource
SHA256 8de3540a3cd7ecc9a9dcb48975fe852c082fe17d4462f87bb72aa7cc47f083ad COPYING
-SHA256 71093316a345f2761852717ea4f09e1599327e6f7a58316465ccf9f4cb679270 Changes
+SHA256 110fed3278f5519e9e23be15ff54625d660527f28a7a46d0fea0a4116264c127 Changes
SHA256 b3cb3d4cd7c060581c927563a6663c0a516b215d3b5ee073f1201f851e6d2733
MANIFEST
-SHA256 bff81e69b7de54963a61be84d72a34048f94dc498231e19ee8496ef7b154bfbc
META.json
-SHA256 543d9b8b70831f57f48b49f35d45063564a15c7c42ee5d09ee3b95ed49cd1106
META.yml
+SHA256 4390b2c5188a9636fbbdb7bcb65c4b3fbc6c9bbf09801f1c578a1c71a412c17f
META.json
+SHA256 0bea21e3f1eda64501dde261717cc98db1f1d37c4d4873c2205892514877cc22
META.yml
SHA256 0fc7078919ff510137a654acc66bd68c971786cafd8ee621afae6d99321df4bb
Makefile.PL
SHA256 1d2228bc44b3a5ce3b156511447b8b7086db6f5e926c6903bd550716a40a301e README
-SHA256 33ca7e73cfd2958ce46a6dacbf9f26be4e08ec973eec5754a391e2d455c42cf8 XS.pm
-SHA256 c83a33a62122729aa7ee5be5ad77b3dd73adccc0ffe4066979f754e8e324edf2 XS.xs
+SHA256 69f10737d32764feaa23883201e5c2160a8a396ff2d4282502f9ca303f7e735b XS.pm
+SHA256 a190111a5da4444f474d11eca7541829111ee0e117cbed9047baab3884ec1866 XS.xs
SHA256 c95e4b970183cbd6d1ec9c88c37a80f12bd2b66ed6be3c008ffd578d2f622c01
XS/Boolean.pm
SHA256 20596259e7e399ed1984a469a9a907be878499406d5285a11f1ab98f93aff44f
XS/Type.pm
SHA256 adca185de1f64d9861a3863ce44a3c3ac33fa478b0cb56a0aa309b8e40bcb577
bin/cpanel_json_xs
@@ -50,7 +50,7 @@
SHA256 16f34295a33f59b8fe7a4f70b701df03fc866d77eac300ca0503a98875675569
t/107_allow_singlequote.t
SHA256 f2047975a3b8392feb6a87d782ecc7746ae2117bde57f716cc90877c8850f2e0
t/108_decode.t
SHA256 04e9e642b5cd82bc0504c1d91493ff09bbe04b9aa23c3019a6397caf1fc0a035
t/109_encode.t
-SHA256 23357aedbe5fb4c6c61c235dc14d15d990083afd8f8a5839d842e09aaa24d716
t/10_pc_keysort.t
+SHA256 42b1ff0e16522adde9123a7358c352de28c4531010a90856fda268fb9ccd8e4f
t/10_pc_keysort.t
SHA256 cff5fcdf23f8f9426609dac5eaa14b295489e2b3fe86bccc9355a39b2e390ec9
t/110_bignum.t
SHA256 1a70755f6fd2b222ed65828d73d4bdfffed82f0d19c81b64ad3888f06ff399f6
t/112_upgrade.t
SHA256 b207546715e27fe738f448fb0e1087b73bfd2a002c0254f656e6b4d47e154f58
t/113_overloaded_eq.t
@@ -447,15 +447,15 @@
SHA256 aca6f846869ab2e4881e807739086e1535b1438bd0e23d7a021360742736a6a9
xt/pod.t
-----BEGIN PGP SIGNATURE-----
-iQGzBAEBAwAdFiEEOKQWew22nknF9yFsuMKIZqsnp6IFAmpbI54ACgkQuMKIZqsn
-p6JcCAv8Cwcvoio0NFMTpvdnO1uKZZaShzl+r7fqxZDOGhhnXnRLldPUGVrAvR83
-GWJ8B6LfagjSw4cA4vl2maVR7gR2577AoUW/n65geuj1MYdbigOvlC2vwPilSIRY
-tdToTI0iNkdsB4RU0KynvzYMC9xNKLyOYf5nXHzsexIu+Ni1hdLeWxAOQXXeArRj
-8wsjEcfxgIGru+4eQi5Kglwxv1as86Hsm3gh8iSdgdgdRZo8ZzKBRqp0fSp0CvQb
-CXLkXw04CD1v0xCZc/4rscE083sdYtHghuTIISI505xAnRQ1lojnmddZwCgS2DqI
-6CTYgtZEk/MeGGLmsnRSTq9JYXSBbocEUOYEarbiI7kkIqaphesIM6dZQuzwGHeK
-J/aPNgHyrp0bWHyqdHZX0wZpl2Qsl6FCk4n80V1bv80dRB/w4mS3EgGaNyDNM2Zy
-OdsYhfyfuL4akZUCQN24ZGhg8nYkSz0qylOt97cKNMkY/lbMEgKpm/NlRE0pC6CX
-XZwmFdD3
-=m4vK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+=Q7Bg
-----END PGP SIGNATURE-----
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.43/XS.pm
new/Cpanel-JSON-XS-4.44/XS.pm
--- old/Cpanel-JSON-XS-4.43/XS.pm 2026-07-18 08:55:52.000000000 +0200
+++ new/Cpanel-JSON-XS-4.44/XS.pm 2026-09-02 10:20:51.000000000 +0200
@@ -1,5 +1,5 @@
package Cpanel::JSON::XS;
-our $VERSION = '4.43';
+our $VERSION = '4.44';
our $XS_VERSION = $VERSION;
# $VERSION = eval $VERSION;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.43/XS.xs
new/Cpanel-JSON-XS-4.44/XS.xs
--- old/Cpanel-JSON-XS-4.43/XS.xs 2026-07-18 08:46:42.000000000 +0200
+++ new/Cpanel-JSON-XS-4.44/XS.xs 2026-09-02 10:20:01.000000000 +0200
@@ -1313,7 +1313,7 @@
#else
uv = utf8_to_uv (ap, alen, &clen, UTF8_CHECK_ONLY);
#endif
- if (UNLIKELY (clen <= 0))
+ if (UNLIKELY (clen == 0 || clen > alen))
{
/* invalid UTF-8, treat as raw byte */
a_unit = *ap++;
@@ -1354,7 +1354,7 @@
#else
uv = utf8_to_uv (bp, blen, &clen, UTF8_CHECK_ONLY);
#endif
- if (UNLIKELY (clen <= 0))
+ if (UNLIKELY (clen == 0 || clen > blen))
{
/* invalid UTF-8, treat as raw byte */
b_unit = *bp++;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.43/t/10_pc_keysort.t
new/Cpanel-JSON-XS-4.44/t/10_pc_keysort.t
--- old/Cpanel-JSON-XS-4.43/t/10_pc_keysort.t 2026-07-18 08:45:47.000000000
+0200
+++ new/Cpanel-JSON-XS-4.44/t/10_pc_keysort.t 2026-09-02 10:20:01.000000000
+0200
@@ -2,8 +2,8 @@
# extended with RFC 8785 surrogate ordering tests (GH #248)
use Test::More;
+BEGIN { plan tests => 8 };
use strict;
-BEGIN { plan tests => 6 };
use Cpanel::JSON::XS;
use utf8;
#########################
@@ -49,3 +49,15 @@
q|{"a":3,"z":2,"\ud83d\ude00":1}|,
'RFC 8785: ASCII sorts before non-BMP');
+# GH #252: Latin-1 byte-string keys (no utf8 flag) mixed with Unicode keys
+# must not hang (malformed UTF-8 decode in utf16_cmp returned (STRLEN)-1,
+# wrapping the buffer pointer) and sort by UTF-16 code unit order
+is($pc->encode({ "\x{c0}" => 0, "\x{c1}" => 0, "\x{2603}" => 0 }),
+ q|{"\u00c0":0,"\u00c1":0,"\u2603":0}|,
+ 'GH #252: Latin-1 byte keys mixed with Unicode do not hang');
+
+# byte-string keys decode as raw bytes (Latin-1) and sort before U+0100
+is($pc->encode({ "\x{c0}" => 0, "\x{ff}" => 0, "\x{100}" => 0 }),
+ q|{"\u00c0":0,"\u00ff":0,"\u0100":0}|,
+ 'GH #252: Latin-1 byte keys sort before Unicode BMP');
+
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.Dz9ej2/_old 2026-09-08 17:01:53.987455610 +0200
+++ /var/tmp/diff_new_pack.Dz9ej2/_new 2026-09-08 17:01:53.998456070 +0200
@@ -1,6 +1,6 @@
-mtime: 1784446580
-commit: b2da9d5f2430a11729158002ab76cc0b487b9d0b1acaf986fd18d8c7c0a25bb1
+mtime: 1788341938
+commit: bd38d7bc63b080a3d048e9c0a0a1809bda1e16fd76487cba32090cb2f8339b0c
url: https://src.opensuse.org/perl/perl-Cpanel-JSON-XS
-revision: b2da9d5f2430a11729158002ab76cc0b487b9d0b1acaf986fd18d8c7c0a25bb1
+revision: bd38d7bc63b080a3d048e9c0a0a1809bda1e16fd76487cba32090cb2f8339b0c
projectscmsync: https://src.opensuse.org/perl/_ObsPrj
++++++ build.specials.obscpio ++++++
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-09-02 11:38:58.000000000 +0200
@@ -0,0 +1 @@
+.osc
