rpms/perl-Module-Signature
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Update to 0.73

Browse Source 
- New upstream release 0.73
  - Constrain the user-specified digest name to /^\w+\d+$/
  - Only allow loading Digest::* from absolute paths in @INC (CVE-2013-2145)
This commit is contained in:
Paul Howarth 2013-06-07 19:08:44 +01:00
parent 8272c4efcc
commit 6e82801dba
2 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
perl-Module-Signature.spec
View File

@ -1,6 +1,6 @@
Name: perl-Module-Signature
Version: 0.70
Release: 2%{?dist}
Version: 0.73
Release: 1%{?dist}
Summary: CPAN signature management utilities and modules
Group: Development/Libraries
License: CC0
@ -20,12 +20,12 @@ BuildRequires: perl(Digest::SHA)
BuildRequires: perl(Digest::SHA1)
BuildRequires: perl(Exporter)
BuildRequires: perl(ExtUtils::Manifest)
BuildRequires: perl(File::Spec)
BuildRequires: perl(IO::Socket::INET)
BuildRequires: perl(Text::Diff)
# Test suite
BuildRequires: perl(Data::Dumper)
BuildRequires: perl(File::Path)
BuildRequires: perl(File::Spec)
BuildRequires: perl(Getopt::Long)
BuildRequires: perl(IPC::Run)
BuildRequires: perl(lib)
@ -85,6 +85,11 @@ rm -rf %{buildroot}
%{_mandir}/man3/Module::Signature.3pm*
%changelog
* Fri Jun 7 2013 Paul Howarth <paul@city-fan.org> - 0.73-1
- Update to 0.73
- Constrain the user-specified digest name to /^\w+\d+$/
- Only allow loading Digest::* from absolute paths in @INC (CVE-2013-2145)
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.70-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

2
sources
View File

@ -1 +1 @@
c13eabb8c2e6b12fd098710a81185ac6 Module-Signature-0.70.tar.gz
de27bbca948ba8a13a7f614414cb623d Module-Signature-0.73.tar.gz