commit perl-Net-CIDR-Lite for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package perl-Net-CIDR-Lite for
openSUSE:Factory checked in at 2026-05-14 21:42:16
Comparing /work/SRC/openSUSE:Factory/perl-Net-CIDR-Lite (Old)
and /work/SRC/openSUSE:Factory/.perl-Net-CIDR-Lite.new.1966 (New)
Package is "perl-Net-CIDR-Lite"
Thu May 14 21:42:16 2026 rev:16 rq:1353046 version:0.240.0
Changes:
--- /work/SRC/openSUSE:Factory/perl-Net-CIDR-Lite/perl-Net-CIDR-Lite.changes
2025-05-23 14:31:05.025923171 +0200
+++
/work/SRC/openSUSE:Factory/.perl-Net-CIDR-Lite.new.1966/perl-Net-CIDR-Lite.changes
2026-05-14 21:42:54.658486580 +0200
@@ -1,0 +2,15 @@
+Mon May 11 08:38:53 UTC 2026 - Tina Müller
+
+- updated to 0.240.0 (0.24)
+ see /usr/share/doc/packages/perl-Net-CIDR-Lite/Changes
+
+ 0.24 2026-05-10
+ - Security: (CVE-2026-45190) Reject Unicode digits and trailing
+newlines in parser inputs. bsc#1264710
+ - Security: (CVE-2026-45191) Reject zero-padded CIDR masks. bsc#1264709
+
+ 0.23 2026-04-10
+ - Security: (CVE-2026-40199) Fix IPv4 mapped IPv6 packed length.
bsc#1262088
+ - Security: (CVE-2026-40198) Reject invalid uncompressed IPv6.
bsc#1262088
+
+---
Old:
Net-CIDR-Lite-0.22.tar.gz
New:
Net-CIDR-Lite-0.24.tar.gz
README.md
_scmsync.obsinfo
build.specials.obscpio
Other differences:
--
++ perl-Net-CIDR-Lite.spec ++
--- /var/tmp/diff_new_pack.1kUPoC/_old 2026-05-14 21:42:55.158507091 +0200
+++ /var/tmp/diff_new_pack.1kUPoC/_new 2026-05-14 21:42:55.162507255 +0200
@@ -1,7 +1,7 @@
#
# spec file for package perl-Net-CIDR-Lite
#
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2026 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,15 +18,16 @@
%define cpan_name Net-CIDR-Lite
Name: perl-Net-CIDR-Lite
-Version:0.220.0
+Version:0.240.0
Release:0
-# 0.22 -> normalize -> 0.220.0
-%define cpan_version 0.22
+# 0.24 -> normalize -> 0.240.0
+%define cpan_version 0.24
License:Artistic-1.0 OR GPL-1.0-or-later
Summary:Perl extension for merging IPv4 or IPv6 CIDR addresses
URL:https://metacpan.org/release/%{cpan_name}
Source0:
https://cpan.metacpan.org/authors/id/S/ST/STIGTSP/%{cpan_name}-%{cpan_version}.tar.gz
Source1:cpanspec.yml
+Source100: README.md
BuildArch: noarch
BuildRequires: perl
BuildRequires: perl-macros
++ Net-CIDR-Lite-0.22.tar.gz -> Net-CIDR-Lite-0.24.tar.gz ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Net-CIDR-Lite-0.22/Changes
new/Net-CIDR-Lite-0.24/Changes
--- old/Net-CIDR-Lite-0.22/Changes 2021-04-04 22:20:32.0 +0200
+++ new/Net-CIDR-Lite-0.24/Changes 2026-05-10 20:19:54.0 +0200
@@ -1,5 +1,13 @@
Revision history for Perl extension Net::CIDR::Lite.
+0.24 2026-05-10
+- Security: (CVE-2026-45190) Reject Unicode digits and trailing
+ newlines in parser inputs.
+- Security: (CVE-2026-45191) Reject zero-padded CIDR masks.
+
+0.23 2026-04-10
+- Security: (CVE-2026-40199) Fix IPv4 mapped IPv6 packed length.
+- Security: (CVE-2026-40198) Reject invalid uncompressed IPv6.
0.22 2021-04-04
- Security: IPv4 octets with leading zeroes are no longer allowed.
https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Net-CIDR-Lite-0.22/Lite.pm
new/Net-CIDR-Lite-0.24/Lite.pm
--- old/Net-CIDR-Lite-0.22/Lite.pm 2021-04-04 22:20:32.0 +0200
+++ new/Net-CIDR-Lite-0.24/Lite.pm 2026-05-10 20:19:54.0 +0200
@@ -4,7 +4,7 @@
use vars qw($VERSION);
use Carp qw(confess);
-$VERSION = '0.22';
+$VERSION = '0.24';
my %masks;
my @fields = qw(PACK UNPACK NBITS MASKS);
@@ -37,7 +37,9 @@
my ($ip, $mask) = split "/", shift;
$self->_init($ip) || confess "Can't determine ip format" unless %$self;
confess "Bad mask $mask"
-unless $mask =~ /^\d+$/ and $mask <= $self->{NBITS}-8;
+unless defined $mask
+and $mask =~ /\A(?:0|[1-9][0-9]*)\z/
+and $mask <= $self->{NBITS}-8;
$mask += 8;
my $start = $self->{PACK}->($ip) & $self->{MASKS}[$mask]
or confess "Bad ip address: $ip";
@@ -181,7 +183,7 @@
my @nums = split /\./, shift(), -1;
return unless @nums == 4;
for (@nums) {
-return unless /^\d{1,3}$/ and !/^0\d{1,2}$/ and $_ <= 255;
+return unless /\A[0-9]{1,3}\z/ and !
commit perl-Net-CIDR-Lite for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package perl-Net-CIDR-Lite for
openSUSE:Factory checked in at 2025-05-23 14:29:43
Comparing /work/SRC/openSUSE:Factory/perl-Net-CIDR-Lite (Old)
and /work/SRC/openSUSE:Factory/.perl-Net-CIDR-Lite.new.2732 (New)
Package is "perl-Net-CIDR-Lite"
Fri May 23 14:29:43 2025 rev:15 rq:1278678 version:0.220.0
Changes:
--- /work/SRC/openSUSE:Factory/perl-Net-CIDR-Lite/perl-Net-CIDR-Lite.changes
2021-04-10 15:27:07.282360391 +0200
+++
/work/SRC/openSUSE:Factory/.perl-Net-CIDR-Lite.new.2732/perl-Net-CIDR-Lite.changes
2025-05-23 14:31:05.025923171 +0200
@@ -1,0 +2,6 @@
+Tue May 20 11:38:58 UTC 2025 - Tina Müller
+
+- Normalize CPAN version
+ See https://github.com/openSUSE/cpanspec/issues/47 for details
+
+---
Other differences:
--
++ perl-Net-CIDR-Lite.spec ++
--- /var/tmp/diff_new_pack.LoPV4m/_old 2025-05-23 14:31:05.537944791 +0200
+++ /var/tmp/diff_new_pack.LoPV4m/_new 2025-05-23 14:31:05.537944791 +0200
@@ -1,7 +1,7 @@
#
# spec file for package perl-Net-CIDR-Lite
#
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,16 +18,21 @@
%define cpan_name Net-CIDR-Lite
Name: perl-Net-CIDR-Lite
-Version:0.22
+Version:0.220.0
Release:0
-Summary:Perl extension for merging IPv4 or IPv6 CIDR addresses
+# 0.22 -> normalize -> 0.220.0
+%define cpan_version 0.22
License:Artistic-1.0 OR GPL-1.0-or-later
+Summary:Perl extension for merging IPv4 or IPv6 CIDR addresses
URL:https://metacpan.org/release/%{cpan_name}
-Source0:
https://cpan.metacpan.org/authors/id/S/ST/STIGTSP/%{cpan_name}-%{version}.tar.gz
+Source0:
https://cpan.metacpan.org/authors/id/S/ST/STIGTSP/%{cpan_name}-%{cpan_version}.tar.gz
Source1:cpanspec.yml
BuildArch: noarch
BuildRequires: perl
BuildRequires: perl-macros
+Provides: perl(Net::CIDR::Lite) = %{version}
+Provides: perl(Net::CIDR::Lite::Span)
+%undefine __perllib_provides
%{perl_requires}
%description
@@ -35,7 +40,7 @@
ranges. Works for IPv4 and IPv6 addresses.
%prep
-%autosetup -n %{cpan_name}-%{version}
+%autosetup -n %{cpan_name}-%{cpan_version} -p1
%build
perl Makefile.PL INSTALLDIRS=vendor
commit perl-Net-CIDR-Lite for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package perl-Net-CIDR-Lite for
openSUSE:Factory checked in at 2021-04-10 15:26:27
Comparing /work/SRC/openSUSE:Factory/perl-Net-CIDR-Lite (Old)
and /work/SRC/openSUSE:Factory/.perl-Net-CIDR-Lite.new.2401 (New)
Package is "perl-Net-CIDR-Lite"
Sat Apr 10 15:26:27 2021 rev:14 rq:883371 version:0.22
Changes:
--- /work/SRC/openSUSE:Factory/perl-Net-CIDR-Lite/perl-Net-CIDR-Lite.changes
2013-04-02 12:36:37.0 +0200
+++
/work/SRC/openSUSE:Factory/.perl-Net-CIDR-Lite.new.2401/perl-Net-CIDR-Lite.changes
2021-04-10 15:27:07.282360391 +0200
@@ -1,0 +2,10 @@
+Mon Apr 5 03:06:37 UTC 2021 - Tina M??ller
+
+- updated to 0.22
+ see /usr/share/doc/packages/perl-Net-CIDR-Lite/Changes
+
+ 0.22 2021-04-04
+ - Security: IPv4 octets with leading zeroes are no longer allowed.
+
https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/
+
+---
Old:
Net-CIDR-Lite-0.21.tar.gz
New:
Net-CIDR-Lite-0.22.tar.gz
cpanspec.yml
Other differences:
--
++ perl-Net-CIDR-Lite.spec ++
--- /var/tmp/diff_new_pack.XLI1LH/_old 2021-04-10 15:27:09.170362612 +0200
+++ /var/tmp/diff_new_pack.XLI1LH/_new 2021-04-10 15:27:09.174362617 +0200
@@ -1,7 +1,7 @@
#
-# spec file for package perl-Net-CIDR-Lite (Version 0.21)
+# spec file for package perl-Net-CIDR-Lite
#
-# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2021 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -12,64 +12,44 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
-# norootforbuild
-
-Name: perl-Net-CIDR-Lite
%define cpan_name Net-CIDR-Lite
+Name: perl-Net-CIDR-Lite
+Version:0.22
+Release:0
Summary:Perl extension for merging IPv4 or IPv6 CIDR addresses
-Version:0.21
-Release:4
-License:Artistic-1.0
-Group: Development/Libraries/Perl
-Url:http://search.cpan.org/dist/Net-CIDR-Lite
-Source:
http://search.cpan.org/CPAN/authors/id/D/DO/DOUGW/Net-CIDR-Lite-0.21.tar.gz
+License:Artistic-1.0 OR GPL-1.0-or-later
+URL:https://metacpan.org/release/%{cpan_name}
+Source0:
https://cpan.metacpan.org/authors/id/S/ST/STIGTSP/%{cpan_name}-%{version}.tar.gz
+Source1:cpanspec.yml
BuildArch: noarch
-BuildRoot: %{_tmppath}/%{name}-%{version}-build
-%{perl_requires}
BuildRequires: perl
-%if 0%{?suse_version} && 0%{?suse_version} <= 1210
BuildRequires: perl-macros
-%endif
-BuildRequires: perl(Test::Pod) >= 1.00
-BuildRequires: perl(Test::Pod::Coverage)
+%{perl_requires}
%description
-Faster alternative to Net::CIDR when merging a large number of CIDR
-address ranges. Works for IPv4 and IPv6 addresses.
-
-
-Authors:
-
-Douglas Wilson
+Faster alternative to Net::CIDR when merging a large number of CIDR address
+ranges. Works for IPv4 and IPv6 addresses.
%prep
-%setup -n %{cpan_name}-%{version}
+%autosetup -n %{cpan_name}-%{version}
%build
-%{__perl} Makefile.PL OPTIMIZE="$RPM_OPT_FLAGS -Wall"
-%{__make} %{?_smp_mflags}
+perl Makefile.PL INSTALLDIRS=vendor
+%make_build
%check
-%{__make} test
+make test
%install
%perl_make_install
-# do not perl_process_packlist (noarch)
-# remove .packlist file
-%{__rm} -rf $RPM_BUILD_ROOT%perl_vendorarch
-# remove perllocal.pod file
-%{__rm} -rf $RPM_BUILD_ROOT%perl_archlib
+%perl_process_packlist
%perl_gen_filelist
-%clean
-%{__rm} -rf $RPM_BUILD_ROOT
-
%files -f %{name}.files
-%defattr(-,root,root)
%doc Changes README
%changelog
++ Net-CIDR-Lite-0.21.tar.gz -> Net-CIDR-Lite-0.22.tar.gz ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Net-CIDR-Lite-0.21/.github/workflows/linux.yml
new/Net-CIDR-Lite-0.22/.github/workflows/linux.yml
--- old/Net-CIDR-Lite-0.21/.github/workflows/linux.yml 1970-01-01
01:00:00.0 +0100
+++ new/Net-CIDR-Lite-0.22/.github/workflows/linux.yml 2021-04-04
22:20:32.0 +0200
@@ -0,0 +1,33 @@
+name: linux
+
+on:
+ push:
+branches:
+ - '*'
+tags-ignore:
+ - '*'
+ pull_request:
+
+jobs:
+ perl:
+runs-on: ubuntu-latest
+strategy:
+ matrix:
+perl-version:
+ - '5.8'
+ - '5.12'
+ - '5.16'
+ - '5
