Hello community, here is the log from the commit of package perl-Config-IniFiles for openSUSE:Factory checked in at 2012-05-31 17:08:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/perl-Config-IniFiles (Old) and /work/SRC/openSUSE:Factory/.perl-Config-IniFiles.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "perl-Config-IniFiles", Maintainer is "DLovasko@suse.com" Changes: -------- --- /work/SRC/openSUSE:Factory/perl-Config-IniFiles/perl-Config-IniFiles.changes 2011-12-08 14:46:14.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.perl-Config-IniFiles.new/perl-Config-IniFiles.changes 2012-05-31 17:08:04.000000000 +0200 @@ -1,0 +2,26 @@ +Wed May 30 13:11:50 UTC 2012 - vcizek@suse.com + +- update to 2.75 +- fixes CVE-2012-2451 (bnc#760459) + * SECURITY BUG FIX: Config::IniFiles used to write to a temporary filename + with a predictable name ("${filename}-new") which opens the door for potential + exploits. + * Now requiring Fcntl (which is a core module) for SEEK_SET() and SEEK_CUR(). + * Now requiring List::MoreUtils (for any() and other functions), File::Temp + and File::Basename . + * Fix the test dependency (in the new t/31comments_with_spaces.t test) + on IO::stringy (now writing it to a file). + - This caused some CPAN Testers failures such as: + - http://www.cpantesters.org/cpan/report/c16b9978-7f40-11e1-9d6f-f6dbfa7543f5 + * Modernized some of the open() calls in the test files. + - three args open, lexcial file handles, etc. + * Fix https://sourceforge.net/tracker/?func=detail&aid=3388382&group_id=6926&atid=106926 + - "Trailing comments with whitespace are not recognised" + - Thanks to briconaut for the report and to rbowen for the patch and test. + * Add the method ->OutputConfigToFileHandle which is a more explicit and + safer version of ->OutputConfig. + - ->OutputConfig now uses it. + - all existing tests pass, and a new test was added to + t/15store-and-retrieve-here-doc-terminator.t . + +------------------------------------------------------------------- Old: ---- Config-IniFiles-2.68.tar.gz New: ---- Config-IniFiles-2.75.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ perl-Config-IniFiles.spec ++++++ --- /var/tmp/diff_new_pack.FGBxSg/_old 2012-05-31 17:08:05.000000000 +0200 +++ /var/tmp/diff_new_pack.FGBxSg/_new 2012-05-31 17:08:05.000000000 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-Config-IniFiles # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -21,7 +21,7 @@ Summary: Module for reading .ini-style configuration files License: GPL-1.0+ or Artistic-1.0 Group: Development/Libraries/Perl -Version: 2.68 +Version: 2.75 Release: 0 Url: http://search.cpan.org/dist/Config-IniFiles/ #Source: http://www.cpan.org/modules/by-module/Config/Config-IniFiles-2.58.tar.gz @@ -29,12 +29,18 @@ BuildArch: noarch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: perl +BuildRequires: perl-macros +BuildRequires: perl(File::Basename) +BuildRequires: perl(File::Temp) BuildRequires: perl(IO::Scalar) +BuildRequires: perl(List::MoreUtils) BuildRequires: perl(Module::Build) BuildRequires: perl(Test::Pod) >= 1.14 BuildRequires: perl(Test::Pod::Coverage) >= 1.04 -BuildRequires: perl-macros +Requires: perl(File::Basename) +Requires: perl(File::Temp) Requires: perl(IO::Scalar) +Requires: perl(List::MoreUtils) %{perl_requires} %description ++++++ Config-IniFiles-2.68.tar.gz -> Config-IniFiles-2.75.tar.gz ++++++ ++++ 4126 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org