commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2020-07-09 17:44:38 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new.3060 (New) Package is "perl-Module-Signature" Thu Jul 9 17:44:38 2020 rev:23 rq:819719 version:0.87 Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2020-06-30 21:59:09.555259154 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new.3060/perl-Module-Signature.changes 2020-07-09 17:44:41.184615064 +0200 @@ -1,0 +2,10 @@ +Sun Jul 5 03:08:25 UTC 2020 - Tina Müller + +- updated to 0.87 + see /usr/share/doc/packages/perl-Module-Signature/Changes + + [Changes for 0.87 - Sat Jul 4 15:04:41 CST 2020] + + * Skip 3-verify.t on Crypt::OpenPGP installations. (@pyramation) + +--- Old: Module-Signature-0.86.tar.gz New: Module-Signature-0.87.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.AqjnIG/_old 2020-07-09 17:44:42.192618257 +0200 +++ /var/tmp/diff_new_pack.AqjnIG/_new 2020-07-09 17:44:42.196618268 +0200 @@ -17,7 +17,7 @@ Name: perl-Module-Signature -Version:0.86 +Version:0.87 Release:0 #Upstream: SUSE-Public-Domain %define cpan_name Module-Signature ++ Module-Signature-0.86.tar.gz -> Module-Signature-0.87.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.86/Changes new/Module-Signature-0.87/Changes --- old/Module-Signature-0.86/Changes 2020-06-25 15:06:35.0 +0200 +++ new/Module-Signature-0.87/Changes 2020-07-04 09:06:31.0 +0200 @@ -1,3 +1,7 @@ +[Changes for 0.87 - Sat Jul 4 15:04:41 CST 2020] + +* Skip 3-verify.t on Crypt::OpenPGP installations. (@pyramation) + [Changes for 0.86 - Thu Jun 25 21:06:24 CST 2020] * Update PAUSE and ANDK keys to 2020. (@dweekly) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.86/META.yml new/Module-Signature-0.87/META.yml --- old/Module-Signature-0.86/META.yml 2020-06-25 15:06:50.0 +0200 +++ new/Module-Signature-0.87/META.yml 2020-07-04 09:04:31.0 +0200 @@ -26,4 +26,4 @@ perl: '5.005' resources: repository: http://github.com/audreyt/module-signature -version: '0.86' +version: '0.87' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.86/Makefile.PL new/Module-Signature-0.87/Makefile.PL --- old/Module-Signature-0.86/Makefile.PL 2020-06-25 14:32:50.0 +0200 +++ new/Module-Signature-0.87/Makefile.PL 2020-07-04 09:03:29.0 +0200 @@ -1,4 +1,6 @@ use strict; +use FindBin '$Bin'; +use lib $Bin; use inc::Module::Install 0.92; $|++; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.86/SIGNATURE new/Module-Signature-0.87/SIGNATURE --- old/Module-Signature-0.86/SIGNATURE 2020-06-25 14:51:44.0 +0200 +++ new/Module-Signature-0.87/SIGNATURE 2020-07-04 09:07:14.0 +0200 @@ -1,5 +1,5 @@ This file contains message digests of all files listed in MANIFEST, -signed via the Module::Signature module, version 0.85. +signed via the Module::Signature module, version 0.87. To verify the content in this distribution, first make sure you have Module::Signature installed, then type: @@ -17,11 +17,11 @@ SHA256 0f80cd4bfc5ad95a0cfcdc43629c819991431e82f0a4a2dd4edf7d54f3b63d2a ANDK2020.pub SHA256 1847f802a331b202eae02729e828d6b59ef4c6129020660ecd6865b67ec4dfb5 AUDREYT2018.pub SHA256 7de2bf0898f4a1e79d92f9e8ae68e7578eeaaff74211cddc0dfdc7996887cdc1 AUTHORS -SHA256 49689acf04d6d96e424a558ac22e3b491b01a65145ca5c067540e04ad52bf50c Changes +SHA256 e8e806af6c376c98b2cc344d4f34b4b6b10121b705a9c3cf4c161ce3a5c0ef12 Changes SHA256 6828a8f4070955a3fc3c83fc324e82bd9b4fc89cac00d1dd53698bd3e297a001 MANIFEST SHA256 093c47e35166ca8f4d6cb4a1d51b436809a4fca4bdb43221bd8fb67adac2e425 MANIFEST.SKIP -SHA256 0fac3c54cc361c8a0c543893f801bc4ce1314d86eaca1c0d4ffc9495f1adb24f META.yml -SHA256 f3e3534a6177a9ebd0875b5c64a3c923a375b34aaec0fbe1e4d16c5a12ac7cd0 Makefile.PL +SHA256 64c8b5795941160727562bde15f96eda1f86ae5dc309bd1fc648b4c6afa753e5 META.yml +SHA256 3942db8a425f69354096c49828889992485d91f6a6a3c7328ca9016893c9997c Makefile.PL SHA256 c9b4cc9f924857b93a081066bdc7f120e537469c1b605e19c1f07296ac07cfdd NIKLASHOLM2018.pub SHA256 bd9fe086be0b4eacb39dd5e9db2f84b1c30d4f98fcd32864fa2b9e2cb57bb646 PAUSE2020.pub SHA
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2020-06-30 21:58:22 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new.3060 (New) Package is "perl-Module-Signature" Tue Jun 30 21:58:22 2020 rev:22 rq:817798 version:0.86 Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2018-08-31 10:47:37.155433867 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new.3060/perl-Module-Signature.changes 2020-06-30 21:59:09.555259154 +0200 @@ -1,0 +2,11 @@ +Fri Jun 26 03:12:00 UTC 2020 - Tina Müller + +- updated to 0.86 + see /usr/share/doc/packages/perl-Module-Signature/Changes + + [Changes for 0.86 - Thu Jun 25 21:06:24 CST 2020] + * Update PAUSE and ANDK keys to 2020. (@dweekly) + * Update documentation pertaining to SHA1. (@dweekly) + * Fix compatibility with Crypt::OpenPGP. (@niklasholm) + +--- Old: Module-Signature-0.83.tar.gz New: Module-Signature-0.86.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.lN4gak/_old 2020-06-30 21:59:10.455261940 +0200 +++ /var/tmp/diff_new_pack.lN4gak/_new 2020-06-30 21:59:10.459261952 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-Module-Signature # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,19 +12,19 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # Name: perl-Module-Signature -Version:0.83 +Version:0.86 Release:0 #Upstream: SUSE-Public-Domain %define cpan_name Module-Signature Summary:Module signature file manipulation License:CC0-1.0 AND (GPL-1.0-or-later OR Artistic-1.0) Group: Development/Libraries/Perl -Url:http://search.cpan.org/dist/Module-Signature/ +URL:https://metacpan.org/release/%{cpan_name} Source0: https://cpan.metacpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz Source1:cpanspec.yml BuildArch: noarch @@ -57,6 +57,11 @@ Please also see NOTES about _MANIFEST.SKIP_ issues, especially if you are using *Module::Build* or writing your own _MANIFEST.SKIP_. +Signatures made with Module::Signature prior to version 0.82 used the SHA1 +algorithm by default. SHA1 is now considered broken, and therefore module +authors are strongly encouraged to regenerate their _SIGNATURE_ files. +Users verifying old SHA1 signature files will receive a warning. + %prep %setup -q -n %{cpan_name}-%{version} # MANUAL BEGIN @@ -64,11 +69,11 @@ # MANUAL END %build -%{__perl} Makefile.PL INSTALLDIRS=vendor -%{__make} %{?_smp_mflags} +PERL_USE_UNSAFE_INC=1 perl Makefile.PL INSTALLDIRS=vendor +make %{?_smp_mflags} %check -%{__make} test +make test %install %perl_make_install @@ -77,6 +82,6 @@ %files -f %{name}.files %defattr(-,root,root,755) -%doc ANDK2018.pub AUDREYT2018.pub AUTHORS Changes NIKLASHOLM2018.pub PAUSE2019.pub README +%doc ANDK2020.pub AUDREYT2018.pub AUTHORS Changes NIKLASHOLM2018.pub PAUSE2020.pub README %changelog ++ Module-Signature-0.83.tar.gz -> Module-Signature-0.86.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.83/ANDK2018.pub new/Module-Signature-0.86/ANDK2018.pub --- old/Module-Signature-0.83/ANDK2018.pub 2018-08-26 17:06:15.0 +0200 +++ new/Module-Signature-0.86/ANDK2018.pub 1970-01-01 01:00:00.0 +0100 @@ -1,122 +0,0 @@ --BEGIN PGP PUBLIC KEY BLOCK- - -mQGiBDx+A1YRBADEsflgt39/oYoLumUOxOI2KKEte7SKfNc0SaI8Awpx8uxw4UR7 -dxJN56mwvMk3GeJw0vn7gEbVzcm5W0AsBdUrHrYFEfngxrkEN0fBzaByQ9U4nOj7 -EsoII9q8LllWphLfFYmewzrat/e0YDQA2WneiICUeIjBohX3+4yJjho5xwCg/zRU -c/J+hJwuYyrNheC9+4gYGrkEALVWaB1CYqpaK5eUb911k+DjeOZQvqd+Mh7IiHDP -RYPd23ct8NFQeav8HdEA+zJRVqWISh4tl64aNbHHR3RpnFJwwjgnfa5HRXZRVjQL -UlQ/N5XV96TGywb58ZqYGouln7NZh+couss+5oWfI/vZDtx8Fo0vP1BqVn3amGoS -26J4A/wPXkV8DoiowGXv2bJztrzRjNDKNJ5E/9aOw0x9jad7s/VelwDUs11m5tRN -o4ExojPqn7OVBdvys6X23+tn2W23C2wDDkWwHivX0mtiFe4vUiwNpCc+v7/Y4tVi -Gi+DSuFMuVo0kcQCR5pd9MeeVi+fE5IED+U9geYLHWEHAq21QrQ8QW5kcmVhcyBK -LiBLb2VuaWcgPGFuZHJlYXMua29lbmlnLmdtd29qcHJ3QGZyYW56LmFrLm1pbmQu -ZGU+i
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2018-08-31 10:47:34 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature" Fri Aug 31 10:47:34 2018 rev:21 rq:632247 version:0.83 Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2018-08-28 09:24:33.372848941 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2018-08-31 10:47:37.155433867 +0200 @@ -1,0 +2,10 @@ +Thu Aug 30 05:38:05 UTC 2018 - co...@suse.com + +- updated to 0.83 + see /usr/share/doc/packages/perl-Module-Signature/Changes + + [Changes for 0.83 - Wed Aug 29 17:33:12 JST 2018] + + * Update META.yml. + +--- Old: Module-Signature-0.82.tar.gz New: Module-Signature-0.83.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.fBIfeb/_old 2018-08-31 10:47:37.595434409 +0200 +++ /var/tmp/diff_new_pack.fBIfeb/_new 2018-08-31 10:47:37.599434414 +0200 @@ -17,7 +17,7 @@ Name: perl-Module-Signature -Version:0.82 +Version:0.83 Release:0 #Upstream: SUSE-Public-Domain %define cpan_name Module-Signature ++ Module-Signature-0.82.tar.gz -> Module-Signature-0.83.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.82/AUTHORS new/Module-Signature-0.83/AUTHORS --- old/Module-Signature-0.82/AUTHORS 2018-08-26 16:59:43.0 +0200 +++ new/Module-Signature-0.83/AUTHORS 2018-08-29 10:32:24.0 +0200 @@ -19,6 +19,7 @@ Mark Shelor Matt Southall Michael G Schwern (MSCHWERN) +Niklas Holm Paul Howarth Scott R. Godin Soren A diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.82/Changes new/Module-Signature-0.83/Changes --- old/Module-Signature-0.82/Changes 2018-08-26 17:02:01.0 +0200 +++ new/Module-Signature-0.83/Changes 2018-08-29 10:33:19.0 +0200 @@ -1,3 +1,7 @@ +[Changes for 0.83 - Wed Aug 29 17:33:12 JST 2018] + +* Update META.yml. + [Changes for 0.82 - Sun Aug 26 23:00:04 CST 2018] * Fix CRLF handling on Win32. (@niklasholm) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.82/META.yml new/Module-Signature-0.83/META.yml --- old/Module-Signature-0.82/META.yml 2018-08-26 16:59:43.0 +0200 +++ new/Module-Signature-0.83/META.yml 2018-08-29 10:32:52.0 +0200 @@ -26,4 +26,4 @@ perl: '5.005' resources: repository: http://github.com/audreyt/module-signature -version: '0.81' +version: '0.83' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.82/SIGNATURE new/Module-Signature-0.83/SIGNATURE --- old/Module-Signature-0.82/SIGNATURE 2018-08-26 17:15:22.0 +0200 +++ new/Module-Signature-0.83/SIGNATURE 2018-08-29 10:33:51.0 +0200 @@ -1,5 +1,5 @@ This file contains message digests of all files listed in MANIFEST, -signed via the Module::Signature module, version 0.82. +signed via the Module::Signature module, version 0.83. To verify the content in this distribution, first make sure you have Module::Signature installed, then type: @@ -16,11 +16,11 @@ SHA256 9cec751fbdaa4ec3257dd2cabf19dfd23f989ffd682de3eafa9f6020b0099a79 ANDK2018.pub SHA256 1847f802a331b202eae02729e828d6b59ef4c6129020660ecd6865b67ec4dfb5 AUDREYT2018.pub -SHA256 6ae77c7a40c542ac892e0bd712e585b43d891f1adc594aabe11cd482db199cfb AUTHORS -SHA256 e6fca75133682b8192f6def06000950791028de9315f5a4df143204ac6e9a931 Changes +SHA256 7de2bf0898f4a1e79d92f9e8ae68e7578eeaaff74211cddc0dfdc7996887cdc1 AUTHORS +SHA256 df74c562710f1d449c320a68869eadf74387156c23bbdf95bb19330f27e053fd Changes SHA256 c0767212c05209c84a1cbd804dc3fb9a05b8ee4ed9770d11bd029348dab032c9 MANIFEST SHA256 093c47e35166ca8f4d6cb4a1d51b436809a4fca4bdb43221bd8fb67adac2e425 MANIFEST.SKIP -SHA256 c9d0d2f32b4959a0c658bf61e3009b6cca4f8b019fce3d468350dc1acf8ff6c7 META.yml +SHA256 876a6dba8591f06f2ee63b40900d8ce694d09066ecab03d16f3178b5a41f2d3b META.yml SHA256 506100751f91446bce973090403c88aa81762a4880cc57797a10ecbcfb0e22ff Makefile.PL SHA256 c9b4cc9f924857b93a081066bdc7f120e537469c1b605e19c1f07296ac07cfdd NIKLASHOLM2018.pub SHA256 7c368bf650e83fc80cf9a851565d77a5cd71f243ef8c277a60adfa12253aaef3 PAUSE2019.pub @@ -35,7 +35,7 @@ SHA256 a10f0f4ebb579bae28ec5a372c5b7bcdc07df89aa24c04b502e0d0442230f200 inc/Module/Install/Scri
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2018-08-28 09:24:32 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature" Tue Aug 28 09:24:32 2018 rev:20 rq:631788 version:0.82 Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2017-10-03 23:18:45.869925858 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2018-08-28 09:24:33.372848941 +0200 @@ -1,0 +2,12 @@ +Mon Aug 27 05:39:24 UTC 2018 - co...@suse.com + +- updated to 0.82 + see /usr/share/doc/packages/perl-Module-Signature/Changes + + [Changes for 0.82 - Sun Aug 26 23:00:04 CST 2018] + + * Fix CRLF handling on Win32. (@niklasholm) + + * Default to SHA256 on new hashes as SHA1 is deprecated. (@niklasholm) + +--- Old: Module-Signature-0.81.tar.gz New: Module-Signature-0.82.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.HsinhC/_old 2018-08-28 09:24:33.792850252 +0200 +++ /var/tmp/diff_new_pack.HsinhC/_new 2018-08-28 09:24:33.792850252 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-Module-Signature # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,12 +17,12 @@ Name: perl-Module-Signature -Version:0.81 +Version:0.82 Release:0 #Upstream: SUSE-Public-Domain %define cpan_name Module-Signature Summary:Module signature file manipulation -License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0) +License:CC0-1.0 AND (GPL-1.0-or-later OR Artistic-1.0) Group: Development/Libraries/Perl Url:http://search.cpan.org/dist/Module-Signature/ Source0: https://cpan.metacpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz @@ -77,6 +77,6 @@ %files -f %{name}.files %defattr(-,root,root,755) -%doc ANDK2015.pub AUDREYT2015.pub AUTHORS Changes PAUSE2017.pub README +%doc ANDK2018.pub AUDREYT2018.pub AUTHORS Changes NIKLASHOLM2018.pub PAUSE2019.pub README %changelog ++ Module-Signature-0.81.tar.gz -> Module-Signature-0.82.tar.gz ++ 2415 lines of diff (skipped)
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2017-10-03 23:18:42 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature" Tue Oct 3 23:18:42 2017 rev:19 rq:530693 version:0.81 Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2016-09-13 22:25:45.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2017-10-03 23:18:45.869925858 +0200 @@ -1,0 +2,5 @@ +Tue Oct 3 07:30:32 UTC 2017 - co...@suse.com + +- patch the Makefile to build with perl 5.26 + +--- Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.sPYgZG/_old 2017-10-03 23:18:46.829790773 +0200 +++ /var/tmp/diff_new_pack.sPYgZG/_new 2017-10-03 23:18:46.833790209 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-Module-Signature # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -25,7 +25,7 @@ License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0) Group: Development/Libraries/Perl Url:http://search.cpan.org/dist/Module-Signature/ -Source0: http://www.cpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz +Source0: https://cpan.metacpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz Source1:cpanspec.yml BuildArch: noarch BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -59,6 +59,9 @@ %prep %setup -q -n %{cpan_name}-%{version} +# MANUAL BEGIN +sed -i -e 's/use inc::Module::Install/use lib q[.];\nuse inc::Module::Install/' Makefile.PL +# MANUAL END %build %{__perl} Makefile.PL INSTALLDIRS=vendor ++ cpanspec.yml ++ --- /var/tmp/diff_new_pack.sPYgZG/_old 2017-10-03 23:18:46.873784581 +0200 +++ /var/tmp/diff_new_pack.sPYgZG/_new 2017-10-03 23:18:46.873784581 +0200 @@ -1,21 +1,8 @@ --- -#description_paragraphs: 3 -#no_testing: broken upstream -#sources: -# - source1 -# - source2 -#patches: -# foo.patch: -p1 -# bar.patch: preamble: |- BuildRequires: gpg Requires: gpg -#post_prep: |- -# hunspell=`pkg-config --libs hunspell | sed -e 's,-l,,; s, *,,g'` -# sed -i -e "s,hunspell-X,$hunspell," t/00-prereq.t Makefile.PL -#post_install: |- -# sed on %{name}.files license: CC0-1.0 and (GPL-1.0+ or Artistic-1.0) -#skip_noarch: 1 -#custom_build: - -#./Build build flags=%{?_smp_mflags} --myflag +post_prep: + sed -i -e 's/use inc::Module::Install/use lib q[.];\nuse inc::Module::Install/' Makefile.PL +
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2016-09-13 22:24:57 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature" Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2016-06-19 10:48:19.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2016-09-13 22:25:45.0 +0200 @@ -1,0 +2,6 @@ +Tue Sep 6 05:37:48 UTC 2016 - co...@suse.com + +- updated to 0.81 + see /usr/share/doc/packages/perl-Module-Signature/Changes + +--- Old: Module-Signature-0.80.tar.gz New: Module-Signature-0.81.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.3m8ITS/_old 2016-09-13 22:25:46.0 +0200 +++ /var/tmp/diff_new_pack.3m8ITS/_new 2016-09-13 22:25:46.0 +0200 @@ -17,9 +17,9 @@ Name: perl-Module-Signature -Version:0.80 +Version:0.81 Release:0 -#Upstream: This work is under a *CC0 1.0 Universal* License, although a portion of the documentation (as detailed above) is under the Perl license. or neighboring rights to Module-Signature. This work is published from Taiwan. the http://creativecommons.org/publicdomain/zero/1.0 manpage +#Upstream: SUSE-Public-Domain %define cpan_name Module-Signature Summary:Module signature file manipulation License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0) ++ Module-Signature-0.80.tar.gz -> Module-Signature-0.81.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.80/META.yml new/Module-Signature-0.81/META.yml --- old/Module-Signature-0.80/META.yml 2016-06-07 08:31:36.0 +0200 +++ new/Module-Signature-0.81/META.yml 2016-09-05 08:38:29.0 +0200 @@ -11,7 +11,7 @@ distribution_type: module dynamic_config: 1 generated_by: 'Module::Install version 1.16' -license: cc0 +license: unrestricted meta-spec: url: http://module-build.sourceforge.net/META-spec-v1.4.html version: 1.4 @@ -26,4 +26,4 @@ perl: '5.005' resources: repository: http://github.com/audreyt/module-signature -version: '0.80' +version: '0.81' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.80/Makefile.PL new/Module-Signature-0.81/Makefile.PL --- old/Module-Signature-0.80/Makefile.PL 2016-06-07 08:30:41.0 +0200 +++ new/Module-Signature-0.81/Makefile.PL 2016-09-05 08:31:16.0 +0200 @@ -4,7 +4,7 @@ $|++; name'Module-Signature'; -license 'CC0'; +license 'unrestricted'; all_from'lib/Module/Signature.pm'; repository 'http://github.com/audreyt/module-signature'; install_script 'script/cpansign'; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.80/SIGNATURE new/Module-Signature-0.81/SIGNATURE --- old/Module-Signature-0.80/SIGNATURE 2016-06-07 08:31:39.0 +0200 +++ new/Module-Signature-0.81/SIGNATURE 2016-09-05 08:38:33.0 +0200 @@ -20,8 +20,8 @@ SHA1 f1220288267a64ea706a3bda21c10d4806509c9c Changes SHA1 6b0e3686874e9845396973b16bf5aad6aa291496 MANIFEST SHA1 af1667da11736451592aeba46d34e38c47a7201c MANIFEST.SKIP -SHA1 e3546442d84e808ec30cfb0a0ddc33b61944be37 META.yml -SHA1 409e3efd1fdf57caeaa8693d8a77a17812c294ea Makefile.PL +SHA1 7a8cace7253b42802f5b698c3804eafa8ad5ef67 META.yml +SHA1 d7974085e99fdbde7d13a265693860105fd923eb Makefile.PL SHA1 dad70cafbd8df2bd8489b0c06daf2096fbb5bdae PAUSE2017.pub SHA1 a8423736492ba8e44db6e87e96ac1f52fed4c995 README SHA1 bce3c51bb369419603298064b78e14077b93af66 inc/Module/Install.pm @@ -34,7 +34,7 @@ SHA1 01978a56e76a58399af3bd4d022aa990b9669bee inc/Module/Install/Scripts.pm SHA1 c830b819e61bda5eca077c6291293bba61b3b9f2 inc/Module/Install/Win32.pm SHA1 cb52b9d6f88d512d448a6f35ed0af0d1201a134b inc/Module/Install/WriteAll.pm -SHA1 36db3c914714e22ce4e05b56decd0f98359580ef lib/Module/Signature.pm +SHA1 a8184988c7820dde3546fa0cc158e35489a7d379 lib/Module/Signature.pm SHA1 fbd7d7bc258c0ebf8ae5627ec4489131d7ec90ff script/cpansign SHA1 3ec6171779122b0bdc69937c283be11b2a15dd89 t/0-signature.t SHA1 307a744384e704d94031df73233f24174b843bc8 t/1-basic.t @@ -45,7 +45,7 @@ -BEGIN PGP SIGNATURE- Version: GnuPG v1 -iEYEARECAAYFAldWakoACgkQtLPdNzw1AaCDEACdEilPOcFms0KOgPQTOb7OZfOD -noMAn357PeUyf/RwjW/oWU74B4P4Jbtc -=3wNA +iEYEARECAAYFAlfNEucACgkQtLPdNzw1AaC
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2016-06-19 10:48:18 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature" Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2016-01-15 10:42:29.0 +0100 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2016-06-19 10:48:19.0 +0200 @@ -1,0 +2,6 @@ +Sun Jun 12 13:21:10 UTC 2016 - co...@suse.com + +- updated to 0.80 + see /usr/share/doc/packages/perl-Module-Signature/Changes + +--- Old: Module-Signature-0.79.tar.gz New: Module-Signature-0.80.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.5MV2HO/_old 2016-06-19 10:48:20.0 +0200 +++ /var/tmp/diff_new_pack.5MV2HO/_new 2016-06-19 10:48:20.0 +0200 @@ -17,9 +17,9 @@ Name: perl-Module-Signature -Version:0.79 +Version:0.80 Release:0 -#Upstream: CHECK(GPL-1.0+ or Artistic-1.0) +#Upstream: This work is under a *CC0 1.0 Universal* License, although a portion of the documentation (as detailed above) is under the Perl license. or neighboring rights to Module-Signature. This work is published from Taiwan. the http://creativecommons.org/publicdomain/zero/1.0 manpage %define cpan_name Module-Signature Summary:Module signature file manipulation License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0) @@ -48,15 +48,14 @@ with. Module authors can easily add the _SIGNATURE_ file to the distribution -tarball; see the /NOTES manpage below for how to do it as part of 'make -dist'. +tarball; see NOTES below for how to do it as part of 'make dist'. If you _really_ want to sign a distribution manually, simply add 'SIGNATURE' to _MANIFEST_, then type 'cpansign -s' immediately before 'make dist'. Be sure to delete the _SIGNATURE_ file afterwards. -Please also see the /NOTES manpage about _MANIFEST.SKIP_ issues, especially -if you are using *Module::Build* or writing your own _MANIFEST.SKIP_. +Please also see NOTES about _MANIFEST.SKIP_ issues, especially if you are +using *Module::Build* or writing your own _MANIFEST.SKIP_. %prep %setup -q -n %{cpan_name}-%{version} ++ Module-Signature-0.79.tar.gz -> Module-Signature-0.80.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.79/MANIFEST new/Module-Signature-0.80/MANIFEST --- old/Module-Signature-0.79/MANIFEST 2015-04-08 13:36:37.0 +0200 +++ new/Module-Signature-0.80/MANIFEST 2016-06-07 08:31:33.0 +0200 @@ -9,7 +9,6 @@ inc/Module/Install/Fetch.pm inc/Module/Install/Makefile.pm inc/Module/Install/Metadata.pm -inc/Module/Install/ReadmeFromPod.pm inc/Module/Install/Scripts.pm inc/Module/Install/Win32.pm inc/Module/Install/WriteAll.pm diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.79/META.yml new/Module-Signature-0.80/META.yml --- old/Module-Signature-0.79/META.yml 2015-05-18 17:04:19.0 +0200 +++ new/Module-Signature-0.80/META.yml 2016-06-07 08:31:36.0 +0200 @@ -10,7 +10,7 @@ ExtUtils::MakeMaker: 6.36 distribution_type: module dynamic_config: 1 -generated_by: 'Module::Install version 1.14' +generated_by: 'Module::Install version 1.16' license: cc0 meta-spec: url: http://module-build.sourceforge.net/META-spec-v1.4.html @@ -26,4 +26,4 @@ perl: '5.005' resources: repository: http://github.com/audreyt/module-signature -version: '0.79' +version: '0.80' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.79/Makefile.PL new/Module-Signature-0.80/Makefile.PL --- old/Module-Signature-0.79/Makefile.PL 2015-04-08 13:34:27.0 +0200 +++ new/Module-Signature-0.80/Makefile.PL 2016-06-07 08:30:41.0 +0200 @@ -6,12 +6,14 @@ name'Module-Signature'; license 'CC0'; all_from'lib/Module/Signature.pm'; -readme_from 'lib/Module/Signature.pm'; repository 'http://github.com/audreyt/module-signature'; install_script 'script/cpansign'; build_requires 'Test::More', 0, 'IPC::Run', 0; requires'File::Temp'; +# clean generated test files +clean_files(q{"t/test-dat*"}); + # On Win32 (excluding cygwin) we know that IO::Socket::INET, # which is needed for keyserver stuff, doesn't work. In fact # it potentially hangs forever. So bail out wit
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2016-01-15 10:42:27 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature" Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2015-05-19 23:49:40.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2016-01-15 10:42:29.0 +0100 @@ -1,0 +2,6 @@ +Fri Jan 8 21:29:31 UTC 2016 - ch...@computersalat.de + +- update changelog + * add missing CVE tags for 0.78 changes (boo#928382) + +--- @@ -46 +52 @@ - * More protection of @INC from relative paths. + * More protection of @INC from relative paths. (CVE-2015-3409) @@ -54 +60 @@ - * Fix GPG signature parsing logic. + * Fix GPG signature parsing logic. (CVE-2015-3406) @@ -56 +62 @@ - * MANIFEST.SKIP is no longer consulted unless --skip is given. + * MANIFEST.SKIP is no longer consulted unless --skip is given. (CVE-2015-3407) @@ -58 +64 @@ - * Properly use open() modes to avoid injection attacks. + * Properly use open() modes to avoid injection attacks. (CVE-2015-3408) Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.Sfg6EW/_old 2016-01-15 10:42:30.0 +0100 +++ /var/tmp/diff_new_pack.Sfg6EW/_new 2016-01-15 10:42:30.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package perl-Module-Signature # -# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2015-05-19 23:49:40 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature" Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2015-04-18 10:40:55.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2015-05-19 23:49:40.0 +0200 @@ -1,0 +2,12 @@ +Tue May 19 08:27:48 UTC 2015 - co...@suse.com + +- updated to 0.79 + see /usr/share/doc/packages/perl-Module-Signature/Changes + + [Changes for 0.79 - Mon May 18 23:02:11 CST 2015] + + * Restore "cpansign --skip" functionality. + +Contributed by: CLOOS + +--- Old: Module-Signature-0.78.tar.gz New: Module-Signature-0.79.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.iGHIAs/_old 2015-05-19 23:49:41.0 +0200 +++ /var/tmp/diff_new_pack.iGHIAs/_new 2015-05-19 23:49:41.0 +0200 @@ -17,7 +17,7 @@ Name: perl-Module-Signature -Version:0.78 +Version:0.79 Release:0 #Upstream: CHECK(GPL-1.0+ or Artistic-1.0) %define cpan_name Module-Signature ++ Module-Signature-0.78.tar.gz -> Module-Signature-0.79.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.78/AUTHORS new/Module-Signature-0.79/AUTHORS --- old/Module-Signature-0.78/AUTHORS 2012-11-02 16:03:51.0 +0100 +++ new/Module-Signature-0.79/AUTHORS 2015-05-18 17:03:53.0 +0200 @@ -10,13 +10,16 @@ Andreas Koenig (ANDK) Benjamin Goldberg (GOLDBB) Blair Zajac (BZAJAC) +Christian Loos (CLOOS) Dave Rolsky (DROLSKY) Iain Truskett (SPOON) Jarkko Hietaniemi (JHI) Jos Boumans (KANE) +John Lightsey (LIGHTSEY) Mark Shelor Matt Southall Michael G Schwern (MSCHWERN) +Paul Howarth Scott R. Godin Soren A Steve Hay (SHAY) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.78/Changes new/Module-Signature-0.79/Changes --- old/Module-Signature-0.78/Changes 2015-04-09 10:58:55.0 +0200 +++ new/Module-Signature-0.79/Changes 2015-05-18 17:02:15.0 +0200 @@ -1,3 +1,9 @@ +[Changes for 0.79 - Mon May 18 23:02:11 CST 2015] + +* Restore "cpansign --skip" functionality. + + Contributed by: CLOOS + [Changes for 0.78 - Thu Apr 9 16:58:27 CST 2015] * Fix verify() use from cpanm and CPAN.pm. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.78/META.yml new/Module-Signature-0.79/META.yml --- old/Module-Signature-0.78/META.yml 2015-04-09 10:59:04.0 +0200 +++ new/Module-Signature-0.79/META.yml 2015-05-18 17:04:19.0 +0200 @@ -26,4 +26,4 @@ perl: '5.005' resources: repository: http://github.com/audreyt/module-signature -version: '0.78' +version: '0.79' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.78/SIGNATURE new/Module-Signature-0.79/SIGNATURE --- old/Module-Signature-0.78/SIGNATURE 2015-04-09 10:59:10.0 +0200 +++ new/Module-Signature-0.79/SIGNATURE 2015-05-18 17:04:21.0 +0200 @@ -16,11 +16,11 @@ SHA1 9eeaacdc87c8d436142e5b6a3f50d333afc5d508 ANDK2015.pub SHA1 da1a023f132d3be27f2a8c56d487ae9320d69b85 AUDREYT2015.pub -SHA1 1e2b550757ebdf3ef2c0e8d1d06bcbb9c6b62a6f AUTHORS -SHA1 80d4d4f1db7b6250e203c6fe61dee6116f2f53fc Changes +SHA1 b6d1dc79056f7912070c84e3b8d5cec519a568dd AUTHORS +SHA1 f1220288267a64ea706a3bda21c10d4806509c9c Changes SHA1 55aeb63395889ea376e48b9ba3760a8741dde271 MANIFEST SHA1 af1667da11736451592aeba46d34e38c47a7201c MANIFEST.SKIP -SHA1 0deead3ad59b0bf49f4e87ec36a93c7e09abd37d META.yml +SHA1 83e7c40c78e208cc46b14aaf80b4a9f6e1a9a29a META.yml SHA1 ebb0ea9af824e934327192429009694c58821f7c Makefile.PL SHA1 dad70cafbd8df2bd8489b0c06daf2096fbb5bdae PAUSE2017.pub SHA1 a8423736492ba8e44db6e87e96ac1f52fed4c995 README @@ -35,8 +35,8 @@ SHA1 8092a930643fcabc5ae90d74814a35178e9ea233 inc/Module/Install/Scripts.pm SHA1 65a1f09af1f4f9e47a98b6b45667c328b1b2f9c0 inc/Module/Install/Win32.pm SHA1 f191c49475b3f51775180cd4f7e41e3bdab7f85a inc/Module/Install/WriteAll.pm -SHA1 264f7fa636320a8bd80e4a90fabd6f405a215c8a lib/Module/Signature.pm -SHA1 89a3bffc7c0a54d7a135e1b1240632c05bd0d6b0 script/cpansign +SHA1 1df7165b16226ca83d339631c52711d3652e1f67 lib/Module/S
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2015-04-18 10:40:54 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature" Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2013-08-04 23:52:31.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2015-04-18 10:40:55.0 +0200 @@ -1,0 +2,47 @@ +Fri Apr 17 09:13:22 UTC 2015 - co...@suse.com + +- updated to 0.78 + see /usr/share/doc/packages/perl-Module-Signature/Changes + + [Changes for 0.78 - Thu Apr 9 16:58:27 CST 2015] + + * Fix verify() use from cpanm and CPAN.pm. + +Contributed by: ANDK + + [Changes for 0.77 - Wed Apr 8 19:36:50 CST 2015] + + * Include the latest public keys of PAUSE, ANDK and AUDREYT. + + * Clarify scripts/cpansign copyright to CC0. + +Reported by: @pghmcfc + + [Changes for 0.76 - Wed Apr 8 18:05:48 CST 2015] + + * Fix signature tests by defaulting to verify(skip=>1) +when $ENV{TEST_SIGNATURE} is true. + +Reported by: @pghmcfc + + [Changes for 0.75 - Tue Apr 7 04:56:09 CST 2015] + + Two more issues reported by John Lightsey: + + * Update ChangeLog. + + * More protection of @INC from relative paths. + + Fix various issues reported by John Lightsey: + + [Changes for 0.74 - Tue Apr 7 02:39:14 CST 2015] + + Fix various issues reported by John Lightsey: + + * Fix GPG signature parsing logic. + + * MANIFEST.SKIP is no longer consulted unless --skip is given. + + * Properly use open() modes to avoid injection attacks. + +--- Old: Module-Signature-0.73.tar.gz New: Module-Signature-0.78.tar.gz cpanspec.yml Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.lnBDpz/_old 2015-04-18 10:40:55.0 +0200 +++ /var/tmp/diff_new_pack.lnBDpz/_new 2015-04-18 10:40:55.0 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-Module-Signature # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,26 +17,26 @@ Name: perl-Module-Signature -Version:0.73 +Version:0.78 Release:0 +#Upstream: CHECK(GPL-1.0+ or Artistic-1.0) %define cpan_name Module-Signature Summary:Module signature file manipulation License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0) Group: Development/Libraries/Perl Url:http://search.cpan.org/dist/Module-Signature/ -Source: http://www.cpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz +Source0: http://www.cpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz +Source1:cpanspec.yml BuildArch: noarch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: perl BuildRequires: perl-macros -BuildRequires: perl(Digest::SHA) BuildRequires: perl(IPC::Run) -Requires: perl(Digest::SHA) +%{perl_requires} # MANUAL BEGIN BuildRequires: gpg Requires: gpg # MANUAL END -%{perl_requires} %description *Module::Signature* adds cryptographic authentications to CPAN @@ -60,7 +60,6 @@ %prep %setup -q -n %{cpan_name}-%{version} -#find . -type f -print0 | xargs -0 chmod 644 %build %{__perl} Makefile.PL INSTALLDIRS=vendor @@ -76,6 +75,6 @@ %files -f %{name}.files %defattr(-,root,root,755) -%doc AUDREY2006.pub AUTHORS Changes PAUSE2003.pub README +%doc ANDK2015.pub AUDREYT2015.pub AUTHORS Changes PAUSE2017.pub README %changelog ++ Module-Signature-0.73.tar.gz -> Module-Signature-0.78.tar.gz ++ 2726 lines of diff (skipped) ++ cpanspec.yml ++ --- #description_paragraphs: 3 #no_testing: broken upstream #sources: # - source1 # - source2 #patches: # foo.patch: -p1 # bar.patch: preamble: |- BuildRequires: gpg Requires: gpg #post_prep: |- # hunspell=`pkg-config --libs hunspell | sed -e 's,-l,,; s, *,,g'` # sed -i -e "s,hunspell-X,$hunspell," t/00-prereq.t Makefile.PL #post_install: |- # sed on %{name}.files license: CC0-1.0 and (GPL-1.0+ or Artistic-1.0) #skip_noarch: 1 #custom_build: - #./Build build flags=%{?_smp_mflags} --myflag
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2013-08-04 20:41:00 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature" Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2011-12-25 17:39:01.0 +0100 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2013-08-04 23:52:31.0 +0200 @@ -1,0 +2,31 @@ +Sun Aug 4 15:26:25 UTC 2013 - co...@suse.com + +- fix souce url + +--- +Wed Jul 3 19:14:29 UTC 2013 - ch...@computersalat.de + +- update to 0.73 + * fix for bnc#828010 (CVE-2013-2145) +https://bugzilla.novell.com/process_bug.cgi +https://bugzilla.redhat.com/show_bug.cgi?id=971096 + * Properly redo the previous fix using File::Spec->file_name_is_absolute. +- [Changes for 0.72 - Wed Jun 5 23:19:02 CST 2013] + * Only allow loading Digest::* from absolute paths in @INC, +by ensuring they begin with \ or / characters. +Contributed by: Florian Weimer (CVE-2013-2145) +- [Changes for 0.71 - Tue Jun 4 18:24:10 CST 2013] + * Constrain the user-specified digest name to /^\w+\d+$/. + * Avoid loading Digest::* from relative paths in @INC. +Contributed by: Florian Weimer (CVE-2013-2145) +- [Changes for 0.70 - Thu Nov 29 01:45:54 CST 2012] + * Don't check gpg version if gpg does not exist. +This avoids unnecessary warnings during installation +when gpg executable is not installed. +Contributed by: Kenichi Ishigaki +- [Changes for 0.69 - Fri Nov 2 23:04:19 CST 2012] + * Support for gpg under these alternate names: +gpg gpg2 gnupg gnupg2 +Contributed by: Michael Schwern + +--- Old: Module-Signature-0.68.tar.gz New: Module-Signature-0.73.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.4RpgrN/_old 2013-08-04 23:52:32.0 +0200 +++ /var/tmp/diff_new_pack.4RpgrN/_new 2013-08-04 23:52:32.0 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-Module-Signature # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,19 +17,21 @@ Name: perl-Module-Signature -Version:0.68 +Version:0.73 Release:0 %define cpan_name Module-Signature Summary:Module signature file manipulation License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0) Group: Development/Libraries/Perl Url:http://search.cpan.org/dist/Module-Signature/ -Source: http://www.cpan.org/authors/id/F/FL/FLORA/%{cpan_name}-%{version}.tar.gz +Source: http://www.cpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz BuildArch: noarch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: perl BuildRequires: perl-macros +BuildRequires: perl(Digest::SHA) BuildRequires: perl(IPC::Run) +Requires: perl(Digest::SHA) # MANUAL BEGIN BuildRequires: gpg Requires: gpg @@ -58,7 +60,7 @@ %prep %setup -q -n %{cpan_name}-%{version} -find . -type f -print0 | xargs -0 chmod 644 +#find . -type f -print0 | xargs -0 chmod 644 %build %{__perl} Makefile.PL INSTALLDIRS=vendor ++ Module-Signature-0.68.tar.gz -> Module-Signature-0.73.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Module-Signature-0.68/Changes new/Module-Signature-0.73/Changes --- old/Module-Signature-0.68/Changes 2011-05-13 11:52:10.0 +0200 +++ new/Module-Signature-0.73/Changes 2013-06-05 22:55:00.0 +0200 @@ -1,3 +1,39 @@ +[Changes for 0.73 - Wed Jun 5 23:44:57 CST 2013] + +* Properly redo the previous fix using File::Spec->file_name_is_absolute. + +[Changes for 0.72 - Wed Jun 5 23:19:02 CST 2013] + +* Only allow loading Digest::* from absolute paths in @INC, + by ensuring they begin with \ or / characters. + + Contributed by: Florian Weimer (CVE-2013-2145) + +[Changes for 0.71 - Tue Jun 4 18:24:10 CST 2013] + +* Constrain the user-specified digest name to /^\w+\d+$/. + +* Avoid loading Digest::* from relative paths in @INC. + + Contributed by: Florian Weimer (CVE-2013-2145) + +[Changes for 0.70 - Thu Nov 29 01:45:54 CST 2012] + +* Don't check gpg version if gpg does not exist. + + This
commit perl-Module-Signature for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Module-Signature for openSUSE:Factory checked in at 2011-12-25 17:38:59 Comparing /work/SRC/openSUSE:Factory/perl-Module-Signature (Old) and /work/SRC/openSUSE:Factory/.perl-Module-Signature.new (New) Package is "perl-Module-Signature", Maintainer is "" Changes: --- /work/SRC/openSUSE:Factory/perl-Module-Signature/perl-Module-Signature.changes 2011-09-23 12:38:08.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Module-Signature.new/perl-Module-Signature.changes 2011-12-25 17:39:01.0 +0100 @@ -1,0 +2,24 @@ +Mon Dec 19 08:35:22 UTC 2011 - cfarr...@suse.com + +- license update: CC0-1.0 and (GPL-1.0+ or Artistic-1.0) + License purports to be CC zero, not CC-BY. Also, see the script/cpansign + and Module/Signature (line 88+) files for Perl licenses + +--- +Thu Dec 15 09:56:56 UTC 2011 - co...@suse.com + +- regenerate with cpanspec to fix requires/buildrequires + +--- +Wed Dec 14 12:14:47 UTC 2011 - co...@suse.com + +- update to 0.68 + * Fix breakage introduced by 0.67 (Andreas König). + * Better handling of \r (Andreas König, Zefram) + +--- +Wed Dec 14 12:12:55 UTC 2011 - co...@suse.com + +- fix license to be in spdx.org format + +--- Old: Module-Signature-0.66.tar.gz New: Module-Signature-0.68.tar.gz Other differences: -- ++ perl-Module-Signature.spec ++ --- /var/tmp/diff_new_pack.cCIaPY/_old 2011-12-25 17:39:02.0 +0100 +++ /var/tmp/diff_new_pack.cCIaPY/_new 2011-12-25 17:39:02.0 +0100 @@ -1,7 +1,7 @@ # -# spec file for package perl-Module-Signature (Version 0.66) +# spec file for package perl-Module-Signature # -# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -15,64 +15,65 @@ # Please submit bugfixes or comments via http://bugs.opensuse.org/ # -# norootforbuild - Name: perl-Module-Signature +Version:0.68 +Release:0 %define cpan_name Module-Signature Summary:Module signature file manipulation -Version:0.66 -Release:2 -License:CC0 1.0 (creative commons 1.0) +License:CC0-1.0 and (GPL-1.0+ or Artistic-1.0) Group: Development/Libraries/Perl Url:http://search.cpan.org/dist/Module-Signature/ -Source: http://www.cpan.org/modules/by-module/Module/Module-Signature-%{version}.tar.gz +Source: http://www.cpan.org/authors/id/F/FL/FLORA/%{cpan_name}-%{version}.tar.gz BuildArch: noarch BuildRoot: %{_tmppath}/%{name}-%{version}-build -%{perl_requires} -BuildRequires: gpg BuildRequires: perl BuildRequires: perl-macros -BuildRequires: perl(Digest::SHA) -BuildRequires: perl(IO::Socket::INET) -# +BuildRequires: perl(IPC::Run) +# MANUAL BEGIN +BuildRequires: gpg Requires: gpg -Requires: perl(Digest::SHA) -Requires: perl(IO::Socket::INET) +# MANUAL END +%{perl_requires} %description -Module::Signature adds cryptographic authentications to CPAN distributions, -via the special SIGNATURE file. +*Module::Signature* adds cryptographic authentications to CPAN +distributions, via the special _SIGNATURE_ file. -Authors: - -Audrey Tang +If you are a module user, all you have to do is to remember to run +'cpansign -v' (or just 'cpansign') before issuing 'perl Makefile.PL' or +'perl Build.PL'; that will ensure the distribution has not been tampered +with. + +Module authors can easily add the _SIGNATURE_ file to the distribution +tarball; see the /NOTES manpage below for how to do it as part of 'make +dist'. + +If you _really_ want to sign a distribution manually, simply add +'SIGNATURE' to _MANIFEST_, then type 'cpansign -s' immediately before 'make +dist'. Be sure to delete the _SIGNATURE_ file afterwards. + +Please also see the /NOTES manpage about _MANIFEST.SKIP_ issues, especially +if you are using *Module::Build* or writing your own _MANIFEST.SKIP_. %prep %setup -q -n %{cpan_name}-%{version} +find . -type f -print0 | xargs -0 chmod 644 %build %{__perl} Makefile.PL INSTALLDIRS=vendor %{__make} %{?_smp_mflags} %check -#TEST_SIGNATURE=1 %{__make} test %{__make} test %install %perl_make_install -# do not perl_process_packlist (noarch) -# remove .packlist file -%{__rm} -rf $RPM_BUILD_R