Update to 0.73

- New upstream release 0.73
  - Constrain the user-specified digest name to /^\w+\d+$/
  - Only allow loading Digest::* from absolute paths in @INC (CVE-2013-2145)

perl-Module-Signature.spec

@@ -1,6 +1,6 @@
 Name:           perl-Module-Signature
-Version:        0.70
+Version:        0.73
-Release:        2%{?dist}
+Release:        1%{?dist}
 Summary:        CPAN signature management utilities and modules
 Group:          Development/Libraries
 License:        CC0
@@ -20,12 +20,12 @@ BuildRequires:  perl(Digest::SHA)
 BuildRequires:  perl(Digest::SHA1)
 BuildRequires:  perl(Exporter)
 BuildRequires:  perl(ExtUtils::Manifest)
+BuildRequires:  perl(File::Spec)
 BuildRequires:  perl(IO::Socket::INET)
 BuildRequires:  perl(Text::Diff)
 # Test suite
 BuildRequires:  perl(Data::Dumper)
 BuildRequires:  perl(File::Path)
-BuildRequires:  perl(File::Spec)
 BuildRequires:  perl(Getopt::Long)
 BuildRequires:  perl(IPC::Run)
 BuildRequires:  perl(lib)
@@ -85,6 +85,11 @@ rm -rf %{buildroot}
 %{_mandir}/man3/Module::Signature.3pm*
 
 %changelog
+* Fri Jun  7 2013 Paul Howarth <paul@city-fan.org> - 0.73-1
+- Update to 0.73
+  - Constrain the user-specified digest name to /^\w+\d+$/
+  - Only allow loading Digest::* from absolute paths in @INC (CVE-2013-2145)
+
 * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.70-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
 

sources

@@ -1 +1 @@
-c13eabb8c2e6b12fd098710a81185ac6  Module-Signature-0.70.tar.gz
+de27bbca948ba8a13a7f614414cb623d  Module-Signature-0.73.tar.gz