commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2020-07-09 17:44:38 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new.3060 (New) Package is "perl-Module-Signature" Thu Jul 9 17:44:38 2020 rev:23 rq:819719 version:0.87 Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2020-06-30 21:59:09.555259154 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new.3060/perl-Module-Signature.changes 2020-07-09 17:44:41.184615064 +0200 @@ -1,0 +2,10 @@ +Sun Jul 5 03:08:25 UTC 2020 - Tina Müller + +- updated to 0.87 + see /usr/share/doc/packages/perl-Module-Signature/Changes + + [Changes for 0.87 - Sat Jul 4 15:04:41 CST 2020] + + * Skip 3-verify.t on Crypt::OpenPGP installations. (@pyramation) + +--- Old: Module-Signature-0.86.tar.gz New: Module-Signature-0.87.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.AqjnIG/_old 2020-07-09 17:44:42.192618257 +0200 +++ /var/tmp/diff_new_pack.AqjnIG/_new 2020-07-09 17:44:42.196618268 +0200 @@ -17,7 +17,7 @@ Name: perl-Module-Signature -Version:0.86 +Version:0.87 Release:0 #Upstream: SUSE-Public-Domain %define cpan_name Module-Signature ++ Module-Signature-0.86.tar.gz -> Module-Signature-0.87.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.86/Changes new/Module-Signature-0.87/Changes --- old/Module-Signature-0.86/Changes 2020-06-25 15:06:35.0 +0200 +++ new/Module-Signature-0.87/Changes 2020-07-04 09:06:31.0 +0200 @@ -1,3 +1,7 @@ +[Changes for 0.87 - Sat Jul 4 15:04:41 CST 2020] + +* Skip 3-verify.t on Crypt::OpenPGP installations. (@pyramation) + [Changes for 0.86 - Thu Jun 25 21:06:24 CST 2020] * Update PAUSE and ANDK keys to 2020. (@dweekly) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.86/META.yml new/Module-Signature-0.87/META.yml --- old/Module-Signature-0.86/META.yml 2020-06-25 15:06:50.0 +0200 +++ new/Module-Signature-0.87/META.yml 2020-07-04 09:04:31.0 +0200 @@ -26,4 +26,4 @@ perl: '5.005' resources: repository: http://github.com/audreyt/module-signature -version: '0.86' +version: '0.87' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.86/Makefile.PL new/Module-Signature-0.87/Makefile.PL --- old/Module-Signature-0.86/Makefile.PL 2020-06-25 14:32:50.0 +0200 +++ new/Module-Signature-0.87/Makefile.PL 2020-07-04 09:03:29.0 +0200 @@ -1,4 +1,6 @@ use strict; +use FindBin '$Bin'; +use lib $Bin; use inc::Module::Install 0.92; $|++; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.86/SIGNATURE new/Module-Signature-0.87/SIGNATURE --- old/Module-Signature-0.86/SIGNATURE 2020-06-25 14:51:44.0 +0200 +++ new/Module-Signature-0.87/SIGNATURE 2020-07-04 09:07:14.0 +0200 @@ -1,5 +1,5 @@ This file contains message digests of all files listed in MANIFEST, -signed via the Module::Signature module, version 0.85. +signed via the Module::Signature module, version 0.87. To verify the content in this distribution, first make sure you have Module::Signature installed, then type: @@ -17,11 +17,11 @@ SHA256 0f80cd4bfc5ad95a0cfcdc43629c819991431e82f0a4a2dd4edf7d54f3b63d2a ANDK2020.pub SHA256 1847f802a331b202eae02729e828d6b59ef4c6129020660ecd6865b67ec4dfb5 AUDREYT2018.pub SHA256 7de2bf0898f4a1e79d92f9e8ae68e7578eeaaff74211cddc0dfdc7996887cdc1 AUTHORS -SHA256 49689acf04d6d96e424a558ac22e3b491b01a65145ca5c067540e04ad52bf50c Changes +SHA256 e8e806af6c376c98b2cc344d4f34b4b6b10121b705a9c3cf4c161ce3a5c0ef12 Changes SHA256 6828a8f4070955a3fc3c83fc324e82bd9b4fc89cac00d1dd53698bd3e297a001 MANIFEST SHA256 093c47e35166ca8f4d6cb4a1d51b436809a4fca4bdb43221bd8fb67adac2e425 MANIFEST.SKIP -SHA256 0fac3c54cc361c8a0c543893f801bc4ce1314d86eaca1c0d4ffc9495f1adb24f META.yml -SHA256 f3e3534a6177a9ebd0875b5c64a3c923a375b34aaec0fbe1e4d16c5a12ac7cd0 Makefile.PL +SHA256 64c8b5795941160727562bde15f96eda1f86ae5dc309bd1fc648b4c6afa753e5 META.yml +SHA256 3942db8a425f69354096c49828889992485d91f6a6a3c7328ca9016893c9997c Makefile.PL SHA256 c9b4cc9f924857b93a081066bdc7f120e537469c1b605e19c1f07296ac07cfdd NIKLASHOLM2018.pub SHA256 bd9fe086be0b4eacb39dd5e9db2f84b1c30d4f98fcd32864fa2b9e2cb57bb646 PAUSE2020.pub
commit perl-Module-Signature for openSUSE:Factory
Hello community,
here is the log from the commit of package perl-Module-Signature for
openSUSE:Factory checked in at 2020-06-30 21:58:22
Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old)
and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new.3060 (New)
Package is "perl-Module-Signature"
Tue Jun 30 21:58:22 2020 rev:22 rq:817798 version:0.86
Changes:
---
/work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes
2018-08-31 10:47:37.155433867 +0200
+++
/work/SRC/openSUSE:Factory/.perl-Module-Signature.new.3060/perl-Module-Signature.changes
2020-06-30 21:59:09.555259154 +0200
@@ -1,0 +2,11 @@
+Fri Jun 26 03:12:00 UTC 2020 - Tina Müller
+
+- updated to 0.86
+ see /usr/share/doc/packages/perl-Module-Signature/Changes
+
+ [Changes for 0.86 - Thu Jun 25 21:06:24 CST 2020]
+ * Update PAUSE and ANDK keys to 2020. (@dweekly)
+ * Update documentation pertaining to SHA1. (@dweekly)
+ * Fix compatibility with Crypt::OpenPGP. (@niklasholm)
+
+---
Old:
Module-Signature-0.83.tar.gz
New:
Module-Signature-0.86.tar.gz
Other differences:
--
++ perl-Module-Signature.spec ++
--- /var/tmp/diff_new_pack.lN4gak/_old 2020-06-30 21:59:10.455261940 +0200
+++ /var/tmp/diff_new_pack.lN4gak/_new 2020-06-30 21:59:10.459261952 +0200
@@ -1,7 +1,7 @@
#
# spec file for package perl-Module-Signature
#
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -12,19 +12,19 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
Name: perl-Module-Signature
-Version:0.83
+Version:0.86
Release:0
#Upstream: SUSE-Public-Domain
%define cpan_name Module-Signature
Summary:Module signature file manipulation
License:CC0-1.0 AND (GPL-1.0-or-later OR Artistic-1.0)
Group: Development/Libraries/Perl
-Url:http://search.cpan.org/dist/Module-Signature/
+URL:https://metacpan.org/release/%{cpan_name}
Source0:
https://cpan.metacpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz
Source1:cpanspec.yml
BuildArch: noarch
@@ -57,6 +57,11 @@
Please also see NOTES about _MANIFEST.SKIP_ issues, especially if you are
using *Module::Build* or writing your own _MANIFEST.SKIP_.
+Signatures made with Module::Signature prior to version 0.82 used the SHA1
+algorithm by default. SHA1 is now considered broken, and therefore module
+authors are strongly encouraged to regenerate their _SIGNATURE_ files.
+Users verifying old SHA1 signature files will receive a warning.
+
%prep
%setup -q -n %{cpan_name}-%{version}
# MANUAL BEGIN
@@ -64,11 +69,11 @@
# MANUAL END
%build
-%{__perl} Makefile.PL INSTALLDIRS=vendor
-%{__make} %{?_smp_mflags}
+PERL_USE_UNSAFE_INC=1 perl Makefile.PL INSTALLDIRS=vendor
+make %{?_smp_mflags}
%check
-%{__make} test
+make test
%install
%perl_make_install
@@ -77,6 +82,6 @@
%files -f %{name}.files
%defattr(-,root,root,755)
-%doc ANDK2018.pub AUDREYT2018.pub AUTHORS Changes NIKLASHOLM2018.pub
PAUSE2019.pub README
+%doc ANDK2020.pub AUDREYT2018.pub AUTHORS Changes NIKLASHOLM2018.pub
PAUSE2020.pub README
%changelog
++ Module-Signature-0.83.tar.gz -> Module-Signature-0.86.tar.gz ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Module-Signature-0.83/ANDK2018.pub
new/Module-Signature-0.86/ANDK2018.pub
--- old/Module-Signature-0.83/ANDK2018.pub 2018-08-26 17:06:15.0
+0200
+++ new/Module-Signature-0.86/ANDK2018.pub 1970-01-01 01:00:00.0
+0100
@@ -1,122 +0,0 @@
--BEGIN PGP PUBLIC KEY BLOCK-
-
-mQGiBDx+A1YRBADEsflgt39/oYoLumUOxOI2KKEte7SKfNc0SaI8Awpx8uxw4UR7
-dxJN56mwvMk3GeJw0vn7gEbVzcm5W0AsBdUrHrYFEfngxrkEN0fBzaByQ9U4nOj7
-EsoII9q8LllWphLfFYmewzrat/e0YDQA2WneiICUeIjBohX3+4yJjho5xwCg/zRU
-c/J+hJwuYyrNheC9+4gYGrkEALVWaB1CYqpaK5eUb911k+DjeOZQvqd+Mh7IiHDP
-RYPd23ct8NFQeav8HdEA+zJRVqWISh4tl64aNbHHR3RpnFJwwjgnfa5HRXZRVjQL
-UlQ/N5XV96TGywb58ZqYGouln7NZh+couss+5oWfI/vZDtx8Fo0vP1BqVn3amGoS
-26J4A/wPXkV8DoiowGXv2bJztrzRjNDKNJ5E/9aOw0x9jad7s/VelwDUs11m5tRN
-o4ExojPqn7OVBdvys6X23+tn2W23C2wDDkWwHivX0mtiFe4vUiwNpCc+v7/Y4tVi
-Gi+DSuFMuVo0kcQCR5pd9MeeVi+fE5IED+U9geYLHWEHAq21QrQ8QW5kcmVhcyBK
-LiBLb2VuaWcgPGFuZHJlYXMua29lbmlnLmdtd29qcHJ3QGZyYW56LmFrLm1pbmQu
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2018-08-31 10:47:34 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature" Fri Aug 31 10:47:34 2018 rev:21 rq:632247 version:0.83 Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2018-08-28 09:24:33.372848941 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2018-08-31 10:47:37.155433867 +0200 @@ -1,0 +2,10 @@ +Thu Aug 30 05:38:05 UTC 2018 - co...@suse.com + +- updated to 0.83 + see /usr/share/doc/packages/perl-Module-Signature/Changes + + [Changes for 0.83 - Wed Aug 29 17:33:12 JST 2018] + + * Update META.yml. + +--- Old: Module-Signature-0.82.tar.gz New: Module-Signature-0.83.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.fBIfeb/_old 2018-08-31 10:47:37.595434409 +0200 +++ /var/tmp/diff_new_pack.fBIfeb/_new 2018-08-31 10:47:37.599434414 +0200 @@ -17,7 +17,7 @@ Name: perl-Module-Signature -Version:0.82 +Version:0.83 Release:0 #Upstream: SUSE-Public-Domain %define cpan_name Module-Signature ++ Module-Signature-0.82.tar.gz -> Module-Signature-0.83.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.82/AUTHORS new/Module-Signature-0.83/AUTHORS --- old/Module-Signature-0.82/AUTHORS 2018-08-26 16:59:43.0 +0200 +++ new/Module-Signature-0.83/AUTHORS 2018-08-29 10:32:24.0 +0200 @@ -19,6 +19,7 @@ Mark Shelor Matt Southall Michael G Schwern (MSCHWERN) +Niklas Holm Paul Howarth Scott R. Godin Soren A diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.82/Changes new/Module-Signature-0.83/Changes --- old/Module-Signature-0.82/Changes 2018-08-26 17:02:01.0 +0200 +++ new/Module-Signature-0.83/Changes 2018-08-29 10:33:19.0 +0200 @@ -1,3 +1,7 @@ +[Changes for 0.83 - Wed Aug 29 17:33:12 JST 2018] + +* Update META.yml. + [Changes for 0.82 - Sun Aug 26 23:00:04 CST 2018] * Fix CRLF handling on Win32. (@niklasholm) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.82/META.yml new/Module-Signature-0.83/META.yml --- old/Module-Signature-0.82/META.yml 2018-08-26 16:59:43.0 +0200 +++ new/Module-Signature-0.83/META.yml 2018-08-29 10:32:52.0 +0200 @@ -26,4 +26,4 @@ perl: '5.005' resources: repository: http://github.com/audreyt/module-signature -version: '0.81' +version: '0.83' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.82/SIGNATURE new/Module-Signature-0.83/SIGNATURE --- old/Module-Signature-0.82/SIGNATURE 2018-08-26 17:15:22.0 +0200 +++ new/Module-Signature-0.83/SIGNATURE 2018-08-29 10:33:51.0 +0200 @@ -1,5 +1,5 @@ This file contains message digests of all files listed in MANIFEST, -signed via the Module::Signature module, version 0.82. +signed via the Module::Signature module, version 0.83. To verify the content in this distribution, first make sure you have Module::Signature installed, then type: @@ -16,11 +16,11 @@ SHA256 9cec751fbdaa4ec3257dd2cabf19dfd23f989ffd682de3eafa9f6020b0099a79 ANDK2018.pub SHA256 1847f802a331b202eae02729e828d6b59ef4c6129020660ecd6865b67ec4dfb5 AUDREYT2018.pub -SHA256 6ae77c7a40c542ac892e0bd712e585b43d891f1adc594aabe11cd482db199cfb AUTHORS -SHA256 e6fca75133682b8192f6def06000950791028de9315f5a4df143204ac6e9a931 Changes +SHA256 7de2bf0898f4a1e79d92f9e8ae68e7578eeaaff74211cddc0dfdc7996887cdc1 AUTHORS +SHA256 df74c562710f1d449c320a68869eadf74387156c23bbdf95bb19330f27e053fd Changes SHA256 c0767212c05209c84a1cbd804dc3fb9a05b8ee4ed9770d11bd029348dab032c9 MANIFEST SHA256 093c47e35166ca8f4d6cb4a1d51b436809a4fca4bdb43221bd8fb67adac2e425 MANIFEST.SKIP -SHA256 c9d0d2f32b4959a0c658bf61e3009b6cca4f8b019fce3d468350dc1acf8ff6c7 META.yml +SHA256 876a6dba8591f06f2ee63b40900d8ce694d09066ecab03d16f3178b5a41f2d3b META.yml SHA256 506100751f91446bce973090403c88aa81762a4880cc57797a10ecbcfb0e22ff Makefile.PL SHA256 c9b4cc9f924857b93a081066bdc7f120e537469c1b605e19c1f07296ac07cfdd NIKLASHOLM2018.pub SHA256 7c368bf650e83fc80cf9a851565d77a5cd71f243ef8c277a60adfa12253aaef3 PAUSE2019.pub @@ -35,7 +35,7 @@ SHA256 a10f0f4ebb579bae28ec5a372c5b7bcdc07df89aa24c04b502e0d0442230f200
commit perl-Module-Signature for openSUSE:Factory
Hello community,
here is the log from the commit of package perl-Module-Signature for
openSUSE:Factory checked in at 2018-08-28 09:24:32
Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old)
and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New)
Package is "perl-Module-Signature"
Tue Aug 28 09:24:32 2018 rev:20 rq:631788 version:0.82
Changes:
---
/work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes
2017-10-03 23:18:45.869925858 +0200
+++
/work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes
2018-08-28 09:24:33.372848941 +0200
@@ -1,0 +2,12 @@
+Mon Aug 27 05:39:24 UTC 2018 - co...@suse.com
+
+- updated to 0.82
+ see /usr/share/doc/packages/perl-Module-Signature/Changes
+
+ [Changes for 0.82 - Sun Aug 26 23:00:04 CST 2018]
+
+ * Fix CRLF handling on Win32. (@niklasholm)
+
+ * Default to SHA256 on new hashes as SHA1 is deprecated. (@niklasholm)
+
+---
Old:
Module-Signature-0.81.tar.gz
New:
Module-Signature-0.82.tar.gz
Other differences:
--
++ perl-Module-Signature.spec ++
--- /var/tmp/diff_new_pack.HsinhC/_old 2018-08-28 09:24:33.792850252 +0200
+++ /var/tmp/diff_new_pack.HsinhC/_new 2018-08-28 09:24:33.792850252 +0200
@@ -1,7 +1,7 @@
#
# spec file for package perl-Module-Signature
#
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,12 +17,12 @@
Name: perl-Module-Signature
-Version:0.81
+Version:0.82
Release:0
#Upstream: SUSE-Public-Domain
%define cpan_name Module-Signature
Summary:Module signature file manipulation
-License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0)
+License:CC0-1.0 AND (GPL-1.0-or-later OR Artistic-1.0)
Group: Development/Libraries/Perl
Url:http://search.cpan.org/dist/Module-Signature/
Source0:
https://cpan.metacpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz
@@ -77,6 +77,6 @@
%files -f %{name}.files
%defattr(-,root,root,755)
-%doc ANDK2015.pub AUDREYT2015.pub AUTHORS Changes PAUSE2017.pub README
+%doc ANDK2018.pub AUDREYT2018.pub AUTHORS Changes NIKLASHOLM2018.pub
PAUSE2019.pub README
%changelog
++ Module-Signature-0.81.tar.gz -> Module-Signature-0.82.tar.gz ++
2415 lines of diff (skipped)
commit perl-Module-Signature for openSUSE:Factory
Hello community,
here is the log from the commit of package perl-Module-Signature for
openSUSE:Factory checked in at 2017-10-03 23:18:42
Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old)
and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New)
Package is "perl-Module-Signature"
Tue Oct 3 23:18:42 2017 rev:19 rq:530693 version:0.81
Changes:
---
/work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes
2016-09-13 22:25:45.0 +0200
+++
/work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes
2017-10-03 23:18:45.869925858 +0200
@@ -1,0 +2,5 @@
+Tue Oct 3 07:30:32 UTC 2017 - co...@suse.com
+
+- patch the Makefile to build with perl 5.26
+
+---
Other differences:
--
++ perl-Module-Signature.spec ++
--- /var/tmp/diff_new_pack.sPYgZG/_old 2017-10-03 23:18:46.829790773 +0200
+++ /var/tmp/diff_new_pack.sPYgZG/_new 2017-10-03 23:18:46.833790209 +0200
@@ -1,7 +1,7 @@
#
# spec file for package perl-Module-Signature
#
-# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -25,7 +25,7 @@
License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0)
Group: Development/Libraries/Perl
Url:http://search.cpan.org/dist/Module-Signature/
-Source0:
http://www.cpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz
+Source0:
https://cpan.metacpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz
Source1:cpanspec.yml
BuildArch: noarch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
@@ -59,6 +59,9 @@
%prep
%setup -q -n %{cpan_name}-%{version}
+# MANUAL BEGIN
+sed -i -e 's/use inc::Module::Install/use lib q[.];\nuse
inc::Module::Install/' Makefile.PL
+# MANUAL END
%build
%{__perl} Makefile.PL INSTALLDIRS=vendor
++ cpanspec.yml ++
--- /var/tmp/diff_new_pack.sPYgZG/_old 2017-10-03 23:18:46.873784581 +0200
+++ /var/tmp/diff_new_pack.sPYgZG/_new 2017-10-03 23:18:46.873784581 +0200
@@ -1,21 +1,8 @@
---
-#description_paragraphs: 3
-#no_testing: broken upstream
-#sources:
-# - source1
-# - source2
-#patches:
-# foo.patch: -p1
-# bar.patch:
preamble: |-
BuildRequires: gpg
Requires: gpg
-#post_prep: |-
-# hunspell=`pkg-config --libs hunspell | sed -e 's,-l,,; s, *,,g'`
-# sed -i -e "s,hunspell-X,$hunspell," t/00-prereq.t Makefile.PL
-#post_install: |-
-# sed on %{name}.files
license: CC0-1.0 and (GPL-1.0+ or Artistic-1.0)
-#skip_noarch: 1
-#custom_build: -
-#./Build build flags=%{?_smp_mflags} --myflag
+post_prep:
+ sed -i -e 's/use inc::Module::Install/use lib q[.];\nuse
inc::Module::Install/' Makefile.PL
+
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2016-09-13 22:24:57 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature" Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2016-06-19 10:48:19.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2016-09-13 22:25:45.0 +0200 @@ -1,0 +2,6 @@ +Tue Sep 6 05:37:48 UTC 2016 - co...@suse.com + +- updated to 0.81 + see /usr/share/doc/packages/perl-Module-Signature/Changes + +--- Old: Module-Signature-0.80.tar.gz New: Module-Signature-0.81.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.3m8ITS/_old 2016-09-13 22:25:46.0 +0200 +++ /var/tmp/diff_new_pack.3m8ITS/_new 2016-09-13 22:25:46.0 +0200 @@ -17,9 +17,9 @@ Name: perl-Module-Signature -Version:0.80 +Version:0.81 Release:0 -#Upstream: This work is under a *CC0 1.0 Universal* License, although a portion of the documentation (as detailed above) is under the Perl license. or neighboring rights to Module-Signature. This work is published from Taiwan. the http://creativecommons.org/publicdomain/zero/1.0 manpage +#Upstream: SUSE-Public-Domain %define cpan_name Module-Signature Summary:Module signature file manipulation License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0) ++ Module-Signature-0.80.tar.gz -> Module-Signature-0.81.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.80/META.yml new/Module-Signature-0.81/META.yml --- old/Module-Signature-0.80/META.yml 2016-06-07 08:31:36.0 +0200 +++ new/Module-Signature-0.81/META.yml 2016-09-05 08:38:29.0 +0200 @@ -11,7 +11,7 @@ distribution_type: module dynamic_config: 1 generated_by: 'Module::Install version 1.16' -license: cc0 +license: unrestricted meta-spec: url: http://module-build.sourceforge.net/META-spec-v1.4.html version: 1.4 @@ -26,4 +26,4 @@ perl: '5.005' resources: repository: http://github.com/audreyt/module-signature -version: '0.80' +version: '0.81' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.80/Makefile.PL new/Module-Signature-0.81/Makefile.PL --- old/Module-Signature-0.80/Makefile.PL 2016-06-07 08:30:41.0 +0200 +++ new/Module-Signature-0.81/Makefile.PL 2016-09-05 08:31:16.0 +0200 @@ -4,7 +4,7 @@ $|++; name'Module-Signature'; -license 'CC0'; +license 'unrestricted'; all_from'lib/Module/Signature.pm'; repository 'http://github.com/audreyt/module-signature'; install_script 'script/cpansign'; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.80/SIGNATURE new/Module-Signature-0.81/SIGNATURE --- old/Module-Signature-0.80/SIGNATURE 2016-06-07 08:31:39.0 +0200 +++ new/Module-Signature-0.81/SIGNATURE 2016-09-05 08:38:33.0 +0200 @@ -20,8 +20,8 @@ SHA1 f1220288267a64ea706a3bda21c10d4806509c9c Changes SHA1 6b0e3686874e9845396973b16bf5aad6aa291496 MANIFEST SHA1 af1667da11736451592aeba46d34e38c47a7201c MANIFEST.SKIP -SHA1 e3546442d84e808ec30cfb0a0ddc33b61944be37 META.yml -SHA1 409e3efd1fdf57caeaa8693d8a77a17812c294ea Makefile.PL +SHA1 7a8cace7253b42802f5b698c3804eafa8ad5ef67 META.yml +SHA1 d7974085e99fdbde7d13a265693860105fd923eb Makefile.PL SHA1 dad70cafbd8df2bd8489b0c06daf2096fbb5bdae PAUSE2017.pub SHA1 a8423736492ba8e44db6e87e96ac1f52fed4c995 README SHA1 bce3c51bb369419603298064b78e14077b93af66 inc/Module/Install.pm @@ -34,7 +34,7 @@ SHA1 01978a56e76a58399af3bd4d022aa990b9669bee inc/Module/Install/Scripts.pm SHA1 c830b819e61bda5eca077c6291293bba61b3b9f2 inc/Module/Install/Win32.pm SHA1 cb52b9d6f88d512d448a6f35ed0af0d1201a134b inc/Module/Install/WriteAll.pm -SHA1 36db3c914714e22ce4e05b56decd0f98359580ef lib/Module/Signature.pm +SHA1 a8184988c7820dde3546fa0cc158e35489a7d379 lib/Module/Signature.pm SHA1 fbd7d7bc258c0ebf8ae5627ec4489131d7ec90ff script/cpansign SHA1 3ec6171779122b0bdc69937c283be11b2a15dd89 t/0-signature.t SHA1 307a744384e704d94031df73233f24174b843bc8 t/1-basic.t @@ -45,7 +45,7 @@ -BEGIN PGP SIGNATURE- Version: GnuPG v1 -iEYEARECAAYFAldWakoACgkQtLPdNzw1AaCDEACdEilPOcFms0KOgPQTOb7OZfOD -noMAn357PeUyf/RwjW/oWU74B4P4Jbtc -=3wNA
commit perl-Module-Signature for openSUSE:Factory
Hello community,
here is the log from the commit of package perl-Module-Signature for
openSUSE:Factory checked in at 2016-06-19 10:48:18
Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old)
and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New)
Package is "perl-Module-Signature"
Changes:
---
/work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes
2016-01-15 10:42:29.0 +0100
+++
/work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes
2016-06-19 10:48:19.0 +0200
@@ -1,0 +2,6 @@
+Sun Jun 12 13:21:10 UTC 2016 - co...@suse.com
+
+- updated to 0.80
+ see /usr/share/doc/packages/perl-Module-Signature/Changes
+
+---
Old:
Module-Signature-0.79.tar.gz
New:
Module-Signature-0.80.tar.gz
Other differences:
--
++ perl-Module-Signature.spec ++
--- /var/tmp/diff_new_pack.5MV2HO/_old 2016-06-19 10:48:20.0 +0200
+++ /var/tmp/diff_new_pack.5MV2HO/_new 2016-06-19 10:48:20.0 +0200
@@ -17,9 +17,9 @@
Name: perl-Module-Signature
-Version:0.79
+Version:0.80
Release:0
-#Upstream: CHECK(GPL-1.0+ or Artistic-1.0)
+#Upstream: This work is under a *CC0 1.0 Universal* License, although a
portion of the documentation (as detailed above) is under the Perl license. or
neighboring rights to Module-Signature. This work is published from Taiwan. the
http://creativecommons.org/publicdomain/zero/1.0 manpage
%define cpan_name Module-Signature
Summary:Module signature file manipulation
License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0)
@@ -48,15 +48,14 @@
with.
Module authors can easily add the _SIGNATURE_ file to the distribution
-tarball; see the /NOTES manpage below for how to do it as part of 'make
-dist'.
+tarball; see NOTES below for how to do it as part of 'make dist'.
If you _really_ want to sign a distribution manually, simply add
'SIGNATURE' to _MANIFEST_, then type 'cpansign -s' immediately before 'make
dist'. Be sure to delete the _SIGNATURE_ file afterwards.
-Please also see the /NOTES manpage about _MANIFEST.SKIP_ issues, especially
-if you are using *Module::Build* or writing your own _MANIFEST.SKIP_.
+Please also see NOTES about _MANIFEST.SKIP_ issues, especially if you are
+using *Module::Build* or writing your own _MANIFEST.SKIP_.
%prep
%setup -q -n %{cpan_name}-%{version}
++ Module-Signature-0.79.tar.gz -> Module-Signature-0.80.tar.gz ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Module-Signature-0.79/MANIFEST
new/Module-Signature-0.80/MANIFEST
--- old/Module-Signature-0.79/MANIFEST 2015-04-08 13:36:37.0 +0200
+++ new/Module-Signature-0.80/MANIFEST 2016-06-07 08:31:33.0 +0200
@@ -9,7 +9,6 @@
inc/Module/Install/Fetch.pm
inc/Module/Install/Makefile.pm
inc/Module/Install/Metadata.pm
-inc/Module/Install/ReadmeFromPod.pm
inc/Module/Install/Scripts.pm
inc/Module/Install/Win32.pm
inc/Module/Install/WriteAll.pm
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Module-Signature-0.79/META.yml
new/Module-Signature-0.80/META.yml
--- old/Module-Signature-0.79/META.yml 2015-05-18 17:04:19.0 +0200
+++ new/Module-Signature-0.80/META.yml 2016-06-07 08:31:36.0 +0200
@@ -10,7 +10,7 @@
ExtUtils::MakeMaker: 6.36
distribution_type: module
dynamic_config: 1
-generated_by: 'Module::Install version 1.14'
+generated_by: 'Module::Install version 1.16'
license: cc0
meta-spec:
url: http://module-build.sourceforge.net/META-spec-v1.4.html
@@ -26,4 +26,4 @@
perl: '5.005'
resources:
repository: http://github.com/audreyt/module-signature
-version: '0.79'
+version: '0.80'
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Module-Signature-0.79/Makefile.PL
new/Module-Signature-0.80/Makefile.PL
--- old/Module-Signature-0.79/Makefile.PL 2015-04-08 13:34:27.0
+0200
+++ new/Module-Signature-0.80/Makefile.PL 2016-06-07 08:30:41.0
+0200
@@ -6,12 +6,14 @@
name'Module-Signature';
license 'CC0';
all_from'lib/Module/Signature.pm';
-readme_from 'lib/Module/Signature.pm';
repository 'http://github.com/audreyt/module-signature';
install_script 'script/cpansign';
build_requires 'Test::More', 0, 'IPC::Run', 0;
requires'File::Temp';
+# clean generated test files
+clean_files(q{"t/test-dat*"});
+
# On Win32 (excluding cygwin) we know that IO::Socket::INET,
# which is needed for keyserver stuff, doesn't work. In fact
# it potentially hangs forever. So bail out
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2016-01-15 10:42:27 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature" Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2015-05-19 23:49:40.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2016-01-15 10:42:29.0 +0100 @@ -1,0 +2,6 @@ +Fri Jan 8 21:29:31 UTC 2016 - ch...@computersalat.de + +- update changelog + * add missing CVE tags for 0.78 changes (boo#928382) + +--- @@ -46 +52 @@ - * More protection of @INC from relative paths. + * More protection of @INC from relative paths. (CVE-2015-3409) @@ -54 +60 @@ - * Fix GPG signature parsing logic. + * Fix GPG signature parsing logic. (CVE-2015-3406) @@ -56 +62 @@ - * MANIFEST.SKIP is no longer consulted unless --skip is given. + * MANIFEST.SKIP is no longer consulted unless --skip is given. (CVE-2015-3407) @@ -58 +64 @@ - * Properly use open() modes to avoid injection attacks. + * Properly use open() modes to avoid injection attacks. (CVE-2015-3408) Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.Sfg6EW/_old 2016-01-15 10:42:30.0 +0100 +++ /var/tmp/diff_new_pack.Sfg6EW/_new 2016-01-15 10:42:30.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package perl-Module-Signature # -# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2015-05-19 23:49:40 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is perl-Module-Signature Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2015-04-18 10:40:55.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2015-05-19 23:49:40.0 +0200 @@ -1,0 +2,12 @@ +Tue May 19 08:27:48 UTC 2015 - co...@suse.com + +- updated to 0.79 + see /usr/share/doc/packages/perl-Module-Signature/Changes + + [Changes for 0.79 - Mon May 18 23:02:11 CST 2015] + + * Restore cpansign --skip functionality. + +Contributed by: CLOOS + +--- Old: Module-Signature-0.78.tar.gz New: Module-Signature-0.79.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.iGHIAs/_old 2015-05-19 23:49:41.0 +0200 +++ /var/tmp/diff_new_pack.iGHIAs/_new 2015-05-19 23:49:41.0 +0200 @@ -17,7 +17,7 @@ Name: perl-Module-Signature -Version:0.78 +Version:0.79 Release:0 #Upstream: CHECK(GPL-1.0+ or Artistic-1.0) %define cpan_name Module-Signature ++ Module-Signature-0.78.tar.gz - Module-Signature-0.79.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.78/AUTHORS new/Module-Signature-0.79/AUTHORS --- old/Module-Signature-0.78/AUTHORS 2012-11-02 16:03:51.0 +0100 +++ new/Module-Signature-0.79/AUTHORS 2015-05-18 17:03:53.0 +0200 @@ -10,13 +10,16 @@ Andreas Koenig (ANDK) Benjamin Goldberg (GOLDBB) Blair Zajac (BZAJAC) +Christian Loos (CLOOS) Dave Rolsky (DROLSKY) Iain Truskett (SPOON) Jarkko Hietaniemi (JHI) Jos Boumans (KANE) +John Lightsey (LIGHTSEY) Mark Shelor Matt Southall Michael G Schwern (MSCHWERN) +Paul Howarth Scott R. Godin Soren A Steve Hay (SHAY) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.78/Changes new/Module-Signature-0.79/Changes --- old/Module-Signature-0.78/Changes 2015-04-09 10:58:55.0 +0200 +++ new/Module-Signature-0.79/Changes 2015-05-18 17:02:15.0 +0200 @@ -1,3 +1,9 @@ +[Changes for 0.79 - Mon May 18 23:02:11 CST 2015] + +* Restore cpansign --skip functionality. + + Contributed by: CLOOS + [Changes for 0.78 - Thu Apr 9 16:58:27 CST 2015] * Fix verify() use from cpanm and CPAN.pm. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.78/META.yml new/Module-Signature-0.79/META.yml --- old/Module-Signature-0.78/META.yml 2015-04-09 10:59:04.0 +0200 +++ new/Module-Signature-0.79/META.yml 2015-05-18 17:04:19.0 +0200 @@ -26,4 +26,4 @@ perl: '5.005' resources: repository: http://github.com/audreyt/module-signature -version: '0.78' +version: '0.79' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.78/SIGNATURE new/Module-Signature-0.79/SIGNATURE --- old/Module-Signature-0.78/SIGNATURE 2015-04-09 10:59:10.0 +0200 +++ new/Module-Signature-0.79/SIGNATURE 2015-05-18 17:04:21.0 +0200 @@ -16,11 +16,11 @@ SHA1 9eeaacdc87c8d436142e5b6a3f50d333afc5d508 ANDK2015.pub SHA1 da1a023f132d3be27f2a8c56d487ae9320d69b85 AUDREYT2015.pub -SHA1 1e2b550757ebdf3ef2c0e8d1d06bcbb9c6b62a6f AUTHORS -SHA1 80d4d4f1db7b6250e203c6fe61dee6116f2f53fc Changes +SHA1 b6d1dc79056f7912070c84e3b8d5cec519a568dd AUTHORS +SHA1 f1220288267a64ea706a3bda21c10d4806509c9c Changes SHA1 55aeb63395889ea376e48b9ba3760a8741dde271 MANIFEST SHA1 af1667da11736451592aeba46d34e38c47a7201c MANIFEST.SKIP -SHA1 0deead3ad59b0bf49f4e87ec36a93c7e09abd37d META.yml +SHA1 83e7c40c78e208cc46b14aaf80b4a9f6e1a9a29a META.yml SHA1 ebb0ea9af824e934327192429009694c58821f7c Makefile.PL SHA1 dad70cafbd8df2bd8489b0c06daf2096fbb5bdae PAUSE2017.pub SHA1 a8423736492ba8e44db6e87e96ac1f52fed4c995 README @@ -35,8 +35,8 @@ SHA1 8092a930643fcabc5ae90d74814a35178e9ea233 inc/Module/Install/Scripts.pm SHA1 65a1f09af1f4f9e47a98b6b45667c328b1b2f9c0 inc/Module/Install/Win32.pm SHA1 f191c49475b3f51775180cd4f7e41e3bdab7f85a inc/Module/Install/WriteAll.pm -SHA1 264f7fa636320a8bd80e4a90fabd6f405a215c8a lib/Module/Signature.pm -SHA1 89a3bffc7c0a54d7a135e1b1240632c05bd0d6b0 script/cpansign +SHA1 1df7165b16226ca83d339631c52711d3652e1f67
commit perl-Module-Signature for openSUSE:Factory
Hello community,
here is the log from the commit of package perl-Module-Signature for
openSUSE:Factory checked in at 2015-04-18 10:40:54
Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old)
and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New)
Package is perl-Module-Signature
Changes:
---
/work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes
2013-08-04 23:52:31.0 +0200
+++
/work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes
2015-04-18 10:40:55.0 +0200
@@ -1,0 +2,47 @@
+Fri Apr 17 09:13:22 UTC 2015 - co...@suse.com
+
+- updated to 0.78
+ see /usr/share/doc/packages/perl-Module-Signature/Changes
+
+ [Changes for 0.78 - Thu Apr 9 16:58:27 CST 2015]
+
+ * Fix verify() use from cpanm and CPAN.pm.
+
+Contributed by: ANDK
+
+ [Changes for 0.77 - Wed Apr 8 19:36:50 CST 2015]
+
+ * Include the latest public keys of PAUSE, ANDK and AUDREYT.
+
+ * Clarify scripts/cpansign copyright to CC0.
+
+Reported by: @pghmcfc
+
+ [Changes for 0.76 - Wed Apr 8 18:05:48 CST 2015]
+
+ * Fix signature tests by defaulting to verify(skip=1)
+when $ENV{TEST_SIGNATURE} is true.
+
+Reported by: @pghmcfc
+
+ [Changes for 0.75 - Tue Apr 7 04:56:09 CST 2015]
+
+ Two more issues reported by John Lightsey:
+
+ * Update ChangeLog.
+
+ * More protection of @INC from relative paths.
+
+ Fix various issues reported by John Lightsey:
+
+ [Changes for 0.74 - Tue Apr 7 02:39:14 CST 2015]
+
+ Fix various issues reported by John Lightsey:
+
+ * Fix GPG signature parsing logic.
+
+ * MANIFEST.SKIP is no longer consulted unless --skip is given.
+
+ * Properly use open() modes to avoid injection attacks.
+
+---
Old:
Module-Signature-0.73.tar.gz
New:
Module-Signature-0.78.tar.gz
cpanspec.yml
Other differences:
--
++ perl-Module-Signature.spec ++
--- /var/tmp/diff_new_pack.lnBDpz/_old 2015-04-18 10:40:55.0 +0200
+++ /var/tmp/diff_new_pack.lnBDpz/_new 2015-04-18 10:40:55.0 +0200
@@ -1,7 +1,7 @@
#
# spec file for package perl-Module-Signature
#
-# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,26 +17,26 @@
Name: perl-Module-Signature
-Version:0.73
+Version:0.78
Release:0
+#Upstream: CHECK(GPL-1.0+ or Artistic-1.0)
%define cpan_name Module-Signature
Summary:Module signature file manipulation
License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0)
Group: Development/Libraries/Perl
Url:http://search.cpan.org/dist/Module-Signature/
-Source:
http://www.cpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz
+Source0:
http://www.cpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz
+Source1:cpanspec.yml
BuildArch: noarch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: perl
BuildRequires: perl-macros
-BuildRequires: perl(Digest::SHA)
BuildRequires: perl(IPC::Run)
-Requires: perl(Digest::SHA)
+%{perl_requires}
# MANUAL BEGIN
BuildRequires: gpg
Requires: gpg
# MANUAL END
-%{perl_requires}
%description
*Module::Signature* adds cryptographic authentications to CPAN
@@ -60,7 +60,6 @@
%prep
%setup -q -n %{cpan_name}-%{version}
-#find . -type f -print0 | xargs -0 chmod 644
%build
%{__perl} Makefile.PL INSTALLDIRS=vendor
@@ -76,6 +75,6 @@
%files -f %{name}.files
%defattr(-,root,root,755)
-%doc AUDREY2006.pub AUTHORS Changes PAUSE2003.pub README
+%doc ANDK2015.pub AUDREYT2015.pub AUTHORS Changes PAUSE2017.pub README
%changelog
++ Module-Signature-0.73.tar.gz - Module-Signature-0.78.tar.gz ++
2726 lines of diff (skipped)
++ cpanspec.yml ++
---
#description_paragraphs: 3
#no_testing: broken upstream
#sources:
# - source1
# - source2
#patches:
# foo.patch: -p1
# bar.patch:
preamble: |-
BuildRequires: gpg
Requires: gpg
#post_prep: |-
# hunspell=`pkg-config --libs hunspell | sed -e 's,-l,,; s, *,,g'`
# sed -i -e s,hunspell-X,$hunspell, t/00-prereq.t Makefile.PL
#post_install: |-
# sed on %{name}.files
license: CC0-1.0 and (GPL-1.0+ or Artistic-1.0)
#skip_noarch: 1
#custom_build: -
#./Build build flags=%{?_smp_mflags} --myflag
commit perl-Module-Signature for openSUSE:Factory
Hello community,
here is the log from the commit of package perl-Module-Signature for
openSUSE:Factory checked in at 2013-08-04 20:41:00
Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old)
and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New)
Package is perl-Module-Signature
Changes:
---
/work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes
2011-12-25 17:39:01.0 +0100
+++
/work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes
2013-08-04 23:52:31.0 +0200
@@ -1,0 +2,31 @@
+Sun Aug 4 15:26:25 UTC 2013 - co...@suse.com
+
+- fix souce url
+
+---
+Wed Jul 3 19:14:29 UTC 2013 - ch...@computersalat.de
+
+- update to 0.73
+ * fix for bnc#828010 (CVE-2013-2145)
+https://bugzilla.novell.com/process_bug.cgi
+https://bugzilla.redhat.com/show_bug.cgi?id=971096
+ * Properly redo the previous fix using File::Spec-file_name_is_absolute.
+- [Changes for 0.72 - Wed Jun 5 23:19:02 CST 2013]
+ * Only allow loading Digest::* from absolute paths in @INC,
+by ensuring they begin with \ or / characters.
+Contributed by: Florian Weimer (CVE-2013-2145)
+- [Changes for 0.71 - Tue Jun 4 18:24:10 CST 2013]
+ * Constrain the user-specified digest name to /^\w+\d+$/.
+ * Avoid loading Digest::* from relative paths in @INC.
+Contributed by: Florian Weimer (CVE-2013-2145)
+- [Changes for 0.70 - Thu Nov 29 01:45:54 CST 2012]
+ * Don't check gpg version if gpg does not exist.
+This avoids unnecessary warnings during installation
+when gpg executable is not installed.
+Contributed by: Kenichi Ishigaki
+- [Changes for 0.69 - Fri Nov 2 23:04:19 CST 2012]
+ * Support for gpg under these alternate names:
+gpg gpg2 gnupg gnupg2
+Contributed by: Michael Schwern
+
+---
Old:
Module-Signature-0.68.tar.gz
New:
Module-Signature-0.73.tar.gz
Other differences:
--
++ perl-Module-Signature.spec ++
--- /var/tmp/diff_new_pack.4RpgrN/_old 2013-08-04 23:52:32.0 +0200
+++ /var/tmp/diff_new_pack.4RpgrN/_new 2013-08-04 23:52:32.0 +0200
@@ -1,7 +1,7 @@
#
# spec file for package perl-Module-Signature
#
-# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,19 +17,21 @@
Name: perl-Module-Signature
-Version:0.68
+Version:0.73
Release:0
%define cpan_name Module-Signature
Summary:Module signature file manipulation
License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0)
Group: Development/Libraries/Perl
Url:http://search.cpan.org/dist/Module-Signature/
-Source:
http://www.cpan.org/authors/id/F/FL/FLORA/%{cpan_name}-%{version}.tar.gz
+Source:
http://www.cpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz
BuildArch: noarch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: perl
BuildRequires: perl-macros
+BuildRequires: perl(Digest::SHA)
BuildRequires: perl(IPC::Run)
+Requires: perl(Digest::SHA)
# MANUAL BEGIN
BuildRequires: gpg
Requires: gpg
@@ -58,7 +60,7 @@
%prep
%setup -q -n %{cpan_name}-%{version}
-find . -type f -print0 | xargs -0 chmod 644
+#find . -type f -print0 | xargs -0 chmod 644
%build
%{__perl} Makefile.PL INSTALLDIRS=vendor
++ Module-Signature-0.68.tar.gz - Module-Signature-0.73.tar.gz ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Module-Signature-0.68/Changes
new/Module-Signature-0.73/Changes
--- old/Module-Signature-0.68/Changes 2011-05-13 11:52:10.0 +0200
+++ new/Module-Signature-0.73/Changes 2013-06-05 22:55:00.0 +0200
@@ -1,3 +1,39 @@
+[Changes for 0.73 - Wed Jun 5 23:44:57 CST 2013]
+
+* Properly redo the previous fix using File::Spec-file_name_is_absolute.
+
+[Changes for 0.72 - Wed Jun 5 23:19:02 CST 2013]
+
+* Only allow loading Digest::* from absolute paths in @INC,
+ by ensuring they begin with \ or / characters.
+
+ Contributed by: Florian Weimer (CVE-2013-2145)
+
+[Changes for 0.71 - Tue Jun 4 18:24:10 CST 2013]
+
+* Constrain the user-specified digest name to /^\w+\d+$/.
+
+* Avoid loading Digest::* from relative paths in @INC.
+
+ Contributed by: Florian Weimer (CVE-2013-2145)
+
+[Changes for 0.70 - Thu Nov 29 01:45:54 CST 2012]
+
+* Don't check gpg version if gpg does not exist.
+
+ This
commit perl-Module-Signature for openSUSE:Factory
Hello community,
here is the log from the commit of package perl-Module-Signature for
openSUSE:Factory checked in at 2011-12-25 17:38:59
Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old)
and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New)
Package is perl-Module-Signature, Maintainer is
Changes:
---
/work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes
2011-09-23 12:38:08.0 +0200
+++
/work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes
2011-12-25 17:39:01.0 +0100
@@ -1,0 +2,24 @@
+Mon Dec 19 08:35:22 UTC 2011 - cfarr...@suse.com
+
+- license update: CC0-1.0 and (GPL-1.0+ or Artistic-1.0)
+ License purports to be CC zero, not CC-BY. Also, see the script/cpansign
+ and Module/Signature (line 88+) files for Perl licenses
+
+---
+Thu Dec 15 09:56:56 UTC 2011 - co...@suse.com
+
+- regenerate with cpanspec to fix requires/buildrequires
+
+---
+Wed Dec 14 12:14:47 UTC 2011 - co...@suse.com
+
+- update to 0.68
+ * Fix breakage introduced by 0.67 (Andreas König).
+ * Better handling of \r (Andreas König, Zefram)
+
+---
+Wed Dec 14 12:12:55 UTC 2011 - co...@suse.com
+
+- fix license to be in spdx.org format
+
+---
Old:
Module-Signature-0.66.tar.gz
New:
Module-Signature-0.68.tar.gz
Other differences:
--
++ perl-Module-Signature.spec ++
--- /var/tmp/diff_new_pack.cCIaPY/_old 2011-12-25 17:39:02.0 +0100
+++ /var/tmp/diff_new_pack.cCIaPY/_new 2011-12-25 17:39:02.0 +0100
@@ -1,7 +1,7 @@
#
-# spec file for package perl-Module-Signature (Version 0.66)
+# spec file for package perl-Module-Signature
#
-# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -15,64 +15,65 @@
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
-# norootforbuild
-
Name: perl-Module-Signature
+Version:0.68
+Release:0
%define cpan_name Module-Signature
Summary:Module signature file manipulation
-Version:0.66
-Release:2
-License:CC0 1.0 (creative commons 1.0)
+License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0)
Group: Development/Libraries/Perl
Url:http://search.cpan.org/dist/Module-Signature/
-Source:
http://www.cpan.org/modules/by-module/Module/Module-Signature-%{version}.tar.gz
+Source:
http://www.cpan.org/authors/id/F/FL/FLORA/%{cpan_name}-%{version}.tar.gz
BuildArch: noarch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
-%{perl_requires}
-BuildRequires: gpg
BuildRequires: perl
BuildRequires: perl-macros
-BuildRequires: perl(Digest::SHA)
-BuildRequires: perl(IO::Socket::INET)
-#
+BuildRequires: perl(IPC::Run)
+# MANUAL BEGIN
+BuildRequires: gpg
Requires: gpg
-Requires: perl(Digest::SHA)
-Requires: perl(IO::Socket::INET)
+# MANUAL END
+%{perl_requires}
%description
-Module::Signature adds cryptographic authentications to CPAN distributions,
-via the special SIGNATURE file.
+*Module::Signature* adds cryptographic authentications to CPAN
+distributions, via the special _SIGNATURE_ file.
-Authors:
-
-Audrey Tang c...@audreyt.org
+If you are a module user, all you have to do is to remember to run
+'cpansign -v' (or just 'cpansign') before issuing 'perl Makefile.PL' or
+'perl Build.PL'; that will ensure the distribution has not been tampered
+with.
+
+Module authors can easily add the _SIGNATURE_ file to the distribution
+tarball; see the /NOTES manpage below for how to do it as part of 'make
+dist'.
+
+If you _really_ want to sign a distribution manually, simply add
+'SIGNATURE' to _MANIFEST_, then type 'cpansign -s' immediately before 'make
+dist'. Be sure to delete the _SIGNATURE_ file afterwards.
+
+Please also see the /NOTES manpage about _MANIFEST.SKIP_ issues, especially
+if you are using *Module::Build* or writing your own _MANIFEST.SKIP_.
%prep
%setup -q -n %{cpan_name}-%{version}
+find . -type f -print0 | xargs -0 chmod 644
%build
%{__perl} Makefile.PL INSTALLDIRS=vendor
%{__make} %{?_smp_mflags}
%check
-#TEST_SIGNATURE=1 %{__make} test
%{__make} test
%install
%perl_make_install
-# do not perl_process_packlist (noarch)
-# remove .packlist file
-%{__rm} -rf
