Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package perl-XML-Feed for openSUSE:Factory checked in at 2026-09-10 16:05:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/perl-XML-Feed (Old) and /work/SRC/openSUSE:Factory/.perl-XML-Feed.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-XML-Feed" Thu Sep 10 16:05:12 2026 rev:7 rq:1376890 version:1.0.1 Changes: -------- --- /work/SRC/openSUSE:Factory/perl-XML-Feed/perl-XML-Feed.changes 2026-01-08 15:29:12.297491560 +0100 +++ /work/SRC/openSUSE:Factory/.perl-XML-Feed.new.1265/perl-XML-Feed.changes 2026-09-10 16:05:16.650020199 +0200 @@ -1,0 +2,14 @@ +Tue Sep 8 09:43:31 UTC 2026 - Tina Müller <[email protected]> + +- updated to 1.0.1 + see /usr/share/doc/packages/perl-XML-Feed/ChangeLog.md + + ## [Unreleased] + ## [v1.0.1] - 2026-09-08 + ### Fixed + * Typo in Pod (thanks @stefanhaerter) + * Validate the `format` argument against a list of known formatters before + using it to build and load a class name, preventing code injection via a + malicious format string + +------------------------------------------------------------------- Old: ---- XML-Feed-v1.0.0.tar.gz New: ---- XML-Feed-1.0.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ perl-XML-Feed.spec ++++++ --- /var/tmp/diff_new_pack.woNHyi/_old 2026-09-10 16:05:17.440053362 +0200 +++ /var/tmp/diff_new_pack.woNHyi/_new 2026-09-10 16:05:17.442053446 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-XML-Feed # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,14 +18,12 @@ %define cpan_name XML-Feed Name: perl-XML-Feed -Version: 1.0.0 +Version: 1.0.1 Release: 0 -# v1.0.0 -> normalize -> 1.0.0 -%define cpan_version v1.0.0 License: Artistic-1.0 OR GPL-1.0-or-later -Summary: XML Syndication Feed Support +Summary: Syndication feed parser and auto-discovery URL: https://metacpan.org/release/%{cpan_name} -Source0: https://cpan.metacpan.org/authors/id/D/DA/DAVECROSS/%{cpan_name}-%{cpan_version}.tar.gz +Source0: https://cpan.metacpan.org/authors/id/D/DA/DAVECROSS/%{cpan_name}-%{version}.tar.gz Source1: cpanspec.yml Source100: README.md BuildArch: noarch @@ -42,7 +40,7 @@ BuildRequires: perl(HTML::Entities) BuildRequires: perl(HTML::TokeParser) BuildRequires: perl(LWP::UserAgent) -BuildRequires: perl(Module::Build) >= 0.420 +BuildRequires: perl(Module::Build) BuildRequires: perl(Module::Pluggable) BuildRequires: perl(URI) BuildRequires: perl(URI::Fetch) @@ -62,20 +60,12 @@ Requires: perl(HTML::TokeParser) Requires: perl(LWP::UserAgent) Requires: perl(Module::Pluggable) +Requires: perl(URI) Requires: perl(URI::Fetch) Requires: perl(XML::Atom) >= 0.380 Requires: perl(XML::LibXML) >= 1.660 Requires: perl(XML::RSS) >= 1.470 -Provides: perl(XML::Feed) = %{version} -Provides: perl(XML::Feed::Content) = 0.650.0 -Provides: perl(XML::Feed::Enclosure) = 0.650.0 -Provides: perl(XML::Feed::Entry) = 0.650.0 -Provides: perl(XML::Feed::Entry::Format::Atom) = 0.650.0 -Provides: perl(XML::Feed::Entry::Format::RSS) = 0.650.0 -Provides: perl(XML::Feed::Format::Atom) = 0.650.0 -Provides: perl(XML::Feed::Format::RSS) = 0.650.0 -Provides: perl(XML::Feed::Util) = 0.650.0 -%undefine __perllib_provides +Requires: perl(XML::XPath) %{perl_requires} %description @@ -103,7 +93,7 @@ DateTime objects, which it then returns to the caller. %prep -%autosetup -n %{cpan_name}-%{cpan_version} -p1 +%autosetup -n %{cpan_name}-%{version} -p1 %build perl Build.PL --installdirs=vendor ++++++ XML-Feed-v1.0.0.tar.gz -> XML-Feed-1.0.1.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/XML-Feed-v1.0.0/ChangeLog.md new/XML-Feed-1.0.1/ChangeLog.md --- old/XML-Feed-v1.0.0/ChangeLog.md 2025-11-17 11:38:25.000000000 +0100 +++ new/XML-Feed-1.0.1/ChangeLog.md 2026-09-08 09:19:20.000000000 +0200 @@ -4,6 +4,17 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). +## [Unreleased] + +## [v1.0.1] - 2026-09-08 + +### Fixed + +* Typo in Pod (thanks @stefanhaerter) +* Validate the `format` argument against a list of known formatters before + using it to build and load a class name, preventing code injection via a + malicious format string + ## [v1.0.0] - 2025-11-17 ### Added diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/XML-Feed-v1.0.0/META.json new/XML-Feed-1.0.1/META.json --- old/XML-Feed-v1.0.0/META.json 2025-11-17 11:38:25.000000000 +0100 +++ new/XML-Feed-1.0.1/META.json 2026-09-08 09:21:38.000000000 +0200 @@ -1,28 +1,33 @@ { - "abstract" : "XML Syndication Feed Support", + "abstract" : "unknown", "author" : [ - "Six Apart" + "unknown" ], "dynamic_config" : 1, - "generated_by" : "Module::Build version 0.4234", + "generated_by" : "ExtUtils::MakeMaker version 7.76, CPAN::Meta::Converter version 2.150013", "license" : [ - "perl_5" + "unknown" ], "meta-spec" : { "url" : "http://search.cpan.org/perldoc?CPAN::Meta::Spec";, "version" : 2 }, "name" : "XML-Feed", + "no_index" : { + "directory" : [ + "t", + "inc" + ] + }, "prereqs" : { "build" : { "requires" : { - "URI" : "0", - "XML::XPath" : "0" + "ExtUtils::MakeMaker" : "0" } }, "configure" : { "requires" : { - "Module::Build" : "0.42" + "ExtUtils::MakeMaker" : "0" } }, "runtime" : { @@ -42,77 +47,16 @@ "Module::Pluggable" : "0", "Scalar::Util" : "0", "Test::More" : "0", + "URI" : "0", "URI::Fetch" : "0", "XML::Atom" : "0.38", "XML::LibXML" : "1.66", "XML::RSS" : "1.47", - "perl" : "v5.10.0" + "XML::XPath" : "0" } } }, - "provides" : { - "XML::Feed" : { - "file" : "lib/XML/Feed.pm", - "version" : "v1.0.0" - }, - "XML::Feed::Content" : { - "file" : "lib/XML/Feed/Content.pm", - "version" : "0.65" - }, - "XML::Feed::Enclosure" : { - "file" : "lib/XML/Feed/Enclosure.pm", - "version" : "0.65" - }, - "XML::Feed::Entry" : { - "file" : "lib/XML/Feed/Entry.pm", - "version" : "0.65" - }, - "XML::Feed::Entry::Format::Atom" : { - "file" : "lib/XML/Feed/Entry/Format/Atom.pm", - "version" : "0.65" - }, - "XML::Feed::Entry::Format::RSS" : { - "file" : "lib/XML/Feed/Entry/Format/RSS.pm", - "version" : "0.65" - }, - "XML::Feed::Format::Atom" : { - "file" : "lib/XML/Feed/Format/Atom.pm", - "version" : "0.65" - }, - "XML::Feed::Format::RSS" : { - "file" : "lib/XML/Feed/Format/RSS.pm", - "version" : "0.65" - }, - "XML::Feed::Util" : { - "file" : "lib/XML/Feed/Util.pm", - "version" : "0.65" - } - }, "release_status" : "stable", - "resources" : { - "bugtracker" : { - "web" : "https://github.com/davorg-cpan/xml-feed/issues"; - }, - "license" : [ - "http://dev.perl.org/licenses/"; - ], - "repository" : { - "type" : "git", - "url" : "https://github.com/davorg-cpan/xml-feed.git";, - "web" : "https://github.com/davorg-cpan/xml-feed"; - } - }, - "version" : "v1.0.0", - "x_contributors" : [ - "Dave Cross <[email protected]>", - "Jakob Voss <[email protected]>", - "Tatsuhiko Miyagawa <[email protected]>", - "Simon Wistow <[email protected]>", - "Gabor Szabo <[email protected]>", - "Minty Walker <[email protected]>", - "Karen Etheridge <[email protected]>", - "Gerard Ribugent Navarro <[email protected]>", - "Matthew D. Miller <[email protected]>" - ], + "version" : "v1.0.1", "x_serialization_backend" : "JSON::PP version 4.16" } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/XML-Feed-v1.0.0/META.yml new/XML-Feed-1.0.1/META.yml --- old/XML-Feed-v1.0.0/META.yml 2025-11-17 11:38:25.000000000 +0100 +++ new/XML-Feed-1.0.1/META.yml 2026-09-08 09:21:37.000000000 +0200 @@ -1,47 +1,22 @@ --- -abstract: 'XML Syndication Feed Support' +abstract: unknown author: - - 'Six Apart' + - unknown build_requires: - URI: '0' - XML::XPath: '0' + ExtUtils::MakeMaker: '0' configure_requires: - Module::Build: '0.42' + ExtUtils::MakeMaker: '0' dynamic_config: 1 -generated_by: 'Module::Build version 0.4234, CPAN::Meta::Converter version 2.150010' -license: perl +generated_by: 'ExtUtils::MakeMaker version 7.76, CPAN::Meta::Converter version 2.150013' +license: unknown meta-spec: url: http://module-build.sourceforge.net/META-spec-v1.4.html version: '1.4' name: XML-Feed -provides: - XML::Feed: - file: lib/XML/Feed.pm - version: v1.0.0 - XML::Feed::Content: - file: lib/XML/Feed/Content.pm - version: '0.65' - XML::Feed::Enclosure: - file: lib/XML/Feed/Enclosure.pm - version: '0.65' - XML::Feed::Entry: - file: lib/XML/Feed/Entry.pm - version: '0.65' - XML::Feed::Entry::Format::Atom: - file: lib/XML/Feed/Entry/Format/Atom.pm - version: '0.65' - XML::Feed::Entry::Format::RSS: - file: lib/XML/Feed/Entry/Format/RSS.pm - version: '0.65' - XML::Feed::Format::Atom: - file: lib/XML/Feed/Format/Atom.pm - version: '0.65' - XML::Feed::Format::RSS: - file: lib/XML/Feed/Format/RSS.pm - version: '0.65' - XML::Feed::Util: - file: lib/XML/Feed/Util.pm - version: '0.65' +no_index: + directory: + - t + - inc requires: Class::ErrorHandler: '0' DateTime: '0' @@ -58,24 +33,11 @@ Module::Pluggable: '0' Scalar::Util: '0' Test::More: '0' + URI: '0' URI::Fetch: '0' XML::Atom: '0.38' XML::LibXML: '1.66' XML::RSS: '1.47' - perl: v5.10.0 -resources: - bugtracker: https://github.com/davorg-cpan/xml-feed/issues - license: http://dev.perl.org/licenses/ - repository: https://github.com/davorg-cpan/xml-feed.git -version: v1.0.0 -x_contributors: - - 'Dave Cross <[email protected]>' - - 'Jakob Voss <[email protected]>' - - 'Tatsuhiko Miyagawa <[email protected]>' - - 'Simon Wistow <[email protected]>' - - 'Gabor Szabo <[email protected]>' - - 'Minty Walker <[email protected]>' - - 'Karen Etheridge <[email protected]>' - - 'Gerard Ribugent Navarro <[email protected]>' - - 'Matthew D. Miller <[email protected]>' -x_serialization_backend: 'CPAN::Meta::YAML version 0.018' + XML::XPath: '0' +version: v1.0.1 +x_serialization_backend: 'CPAN::Meta::YAML version 0.020' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/XML-Feed-v1.0.0/lib/XML/Feed/Content.pm new/XML-Feed-1.0.1/lib/XML/Feed/Content.pm --- old/XML-Feed-v1.0.0/lib/XML/Feed/Content.pm 2025-11-17 11:38:25.000000000 +0100 +++ new/XML-Feed-1.0.1/lib/XML/Feed/Content.pm 2026-09-08 09:19:20.000000000 +0200 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.65'; +our $VERSION = '1.0.1'; use base qw( Class::ErrorHandler ); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/XML-Feed-v1.0.0/lib/XML/Feed/Enclosure.pm new/XML-Feed-1.0.1/lib/XML/Feed/Enclosure.pm --- old/XML-Feed-v1.0.0/lib/XML/Feed/Enclosure.pm 2025-11-17 11:38:25.000000000 +0100 +++ new/XML-Feed-1.0.1/lib/XML/Feed/Enclosure.pm 2026-09-08 09:19:20.000000000 +0200 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.65'; +our $VERSION = '1.0.1'; use base qw( Class::ErrorHandler ); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/XML-Feed-v1.0.0/lib/XML/Feed/Entry/Format/Atom.pm new/XML-Feed-1.0.1/lib/XML/Feed/Entry/Format/Atom.pm --- old/XML-Feed-v1.0.0/lib/XML/Feed/Entry/Format/Atom.pm 2025-11-17 11:38:25.000000000 +0100 +++ new/XML-Feed-1.0.1/lib/XML/Feed/Entry/Format/Atom.pm 2026-09-08 09:19:20.000000000 +0200 @@ -3,7 +3,7 @@ use warnings; use v5.10; -our $VERSION = '0.65'; +our $VERSION = '1.0.1'; use base qw( XML::Feed::Entry ); use XML::Feed::Content; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/XML-Feed-v1.0.0/lib/XML/Feed/Entry/Format/RSS.pm new/XML-Feed-1.0.1/lib/XML/Feed/Entry/Format/RSS.pm --- old/XML-Feed-v1.0.0/lib/XML/Feed/Entry/Format/RSS.pm 2025-11-17 11:38:25.000000000 +0100 +++ new/XML-Feed-1.0.1/lib/XML/Feed/Entry/Format/RSS.pm 2026-09-08 09:19:20.000000000 +0200 @@ -3,7 +3,7 @@ use warnings; use v5.10; -our $VERSION = '0.65'; +our $VERSION = '1.0.1'; sub format { 'RSS ' . $_[0]->{'_version'} } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/XML-Feed-v1.0.0/lib/XML/Feed/Entry.pm new/XML-Feed-1.0.1/lib/XML/Feed/Entry.pm --- old/XML-Feed-v1.0.0/lib/XML/Feed/Entry.pm 2025-11-17 11:38:25.000000000 +0100 +++ new/XML-Feed-1.0.1/lib/XML/Feed/Entry.pm 2026-09-08 09:19:20.000000000 +0200 @@ -3,7 +3,7 @@ use warnings; use v5.10; -our $VERSION = '0.65'; +our $VERSION = '1.0.1'; use base qw( Class::ErrorHandler ); @@ -11,6 +11,8 @@ use Carp; +use XML::Feed (); + sub wrap { my $class = shift; my($item) = @_; @@ -23,6 +25,8 @@ my $class = shift; my($format) = @_; $format //= 'Atom'; + Carp::croak("Unsupported format $format: not a recognised feed format") + unless $XML::Feed::formatters{$format}; my $format_class = 'XML::Feed::Format::' . $format; eval "use $format_class"; Carp::croak("Unsupported format $format: $@") if $@; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/XML-Feed-v1.0.0/lib/XML/Feed/Format/Atom.pm new/XML-Feed-1.0.1/lib/XML/Feed/Format/Atom.pm --- old/XML-Feed-v1.0.0/lib/XML/Feed/Format/Atom.pm 2025-11-17 11:38:25.000000000 +0100 +++ new/XML-Feed-1.0.1/lib/XML/Feed/Format/Atom.pm 2026-09-08 09:19:20.000000000 +0200 @@ -3,7 +3,7 @@ use warnings; use v5.10; -our $VERSION = '0.65'; +our $VERSION = '1.0.1'; use base qw( XML::Feed ); use XML::Atom::Feed; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/XML-Feed-v1.0.0/lib/XML/Feed/Format/RSS.pm new/XML-Feed-1.0.1/lib/XML/Feed/Format/RSS.pm --- old/XML-Feed-v1.0.0/lib/XML/Feed/Format/RSS.pm 2025-11-17 11:38:25.000000000 +0100 +++ new/XML-Feed-1.0.1/lib/XML/Feed/Format/RSS.pm 2026-09-08 09:19:20.000000000 +0200 @@ -3,7 +3,7 @@ use warnings; use v5.10; -our $VERSION = '0.65'; +our $VERSION = '1.0.1'; use base qw( XML::Feed ); use DateTime::Format::Mail; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/XML-Feed-v1.0.0/lib/XML/Feed/Util.pm new/XML-Feed-1.0.1/lib/XML/Feed/Util.pm --- old/XML-Feed-v1.0.0/lib/XML/Feed/Util.pm 2025-11-17 11:38:25.000000000 +0100 +++ new/XML-Feed-1.0.1/lib/XML/Feed/Util.pm 2026-09-08 09:19:20.000000000 +0200 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.65'; +our $VERSION = '1.0.1'; use base qw( Exporter ); use DateTime::Format::Flexible; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/XML-Feed-v1.0.0/lib/XML/Feed.pm new/XML-Feed-1.0.1/lib/XML/Feed.pm --- old/XML-Feed-v1.0.0/lib/XML/Feed.pm 2025-11-17 11:38:25.000000000 +0100 +++ new/XML-Feed-1.0.1/lib/XML/Feed.pm 2026-09-08 09:19:20.000000000 +0200 @@ -13,11 +13,16 @@ require => 1, sub_name => 'formatters'; -our $VERSION = 'v1.0.0'; +our $VERSION = '1.0.1'; our $MULTIPLE_ENCLOSURES = 0; our @formatters; +our %formatters; BEGIN { @formatters = __PACKAGE__->formatters; + for my $formatter (@formatters) { + (my $name = $formatter) =~ s/^XML::Feed::Format:://; + $formatters{$name} = 1; + } } sub _parse_args { @@ -57,6 +62,8 @@ $args = $class->_parse_args(pop @_); } + Carp::croak("Unsupported format $format: not a recognised feed format") + unless $formatters{$format}; my $format_class = 'XML::Feed::Format::' . $format; eval "use $format_class"; Carp::croak("Unsupported format $format: $@") if $@; @@ -114,6 +121,8 @@ } my $format_class = join '::', __PACKAGE__, "Format", $format; + return $class->error("Unsupported format $format: not a recognised feed format") + unless $formatters{$format}; eval "use $format_class"; return $class->error("Unsupported format $format: $@") if $@; bless $feed, $format_class; @@ -422,7 +431,7 @@ Gets a feed from a file. -=head3 CML::Feed->get_fh($fh) +=head3 XML::Feed->get_fh($fh) Gets a feed from pre-opened filehandle. ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.woNHyi/_old 2026-09-10 16:05:17.662062700 +0200 +++ /var/tmp/diff_new_pack.woNHyi/_new 2026-09-10 16:05:17.669062995 +0200 @@ -1,6 +1,6 @@ -mtime: 1763444011 -commit: 53b2bd5455e22b8250ce14d6be7c80c431685a46fac04762422c0124fe6bcede -url: https://src.opensuse.org/perl/perl-XML-Feed.git -revision: 53b2bd5455e22b8250ce14d6be7c80c431685a46fac04762422c0124fe6bcede +mtime: 1788860611 +commit: 4f25afc6dfefdf8f779b7af080301a0f98fac3eda8d6d64eea4c5965a32fbeae +url: https://src.opensuse.org/perl/perl-XML-Feed +revision: 4f25afc6dfefdf8f779b7af080301a0f98fac3eda8d6d64eea4c5965a32fbeae projectscmsync: https://src.opensuse.org/perl/_ObsPrj ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-09-08 11:43:31.000000000 +0200 @@ -0,0 +1 @@ +.osc
