Hello community, here is the log from the commit of package perl-Digest-SHA1 for openSUSE:Factory checked in at Thu May 28 03:02:59 CEST 2009. -------- --- perl-Digest-SHA1/perl-Digest-SHA1.changes 2006-07-11 16:41:01.000000000 +0200 +++ perl-Digest-SHA1/perl-Digest-SHA1.changes 2009-05-25 16:47:14.000000000 +0200 @@ -1,0 +2,12 @@ +Mon May 25 16:44:44 CEST 2009 - anicka@suse.cz + +- update to 2.12 + * Get rid of the old CVS ids + * Avoid "redefined" error for ULONG on Win64 + * Less optimizations on IRIX [RT#8999] + * Clean up the 'git status' output + * Mention that SHA-1 might be weak [RT#11880] + * Ensure more stuff in the META.yml file [RT#40757] + * Quiet warnings when compiled with -Wwrite-strings [RT#31915] + +------------------------------------------------------------------- calling whatdependson for head-i586 Old: ---- Digest-SHA1-2.11.tar.bz2 New: ---- Digest-SHA1-2.12.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ perl-Digest-SHA1.spec ++++++ --- /var/tmp/diff_new_pack.b17602/_old 2009-05-28 03:02:41.000000000 +0200 +++ /var/tmp/diff_new_pack.b17602/_new 2009-05-28 03:02:41.000000000 +0200 @@ -1,23 +1,31 @@ # -# spec file for package perl-Digest-SHA1 (Version 2.11) +# spec file for package perl-Digest-SHA1 (Version 2.12) # -# Copyright (c) 2006 SUSE LINUX Products GmbH, Nuernberg, Germany. -# This file and all modifications and additions to the pristine -# package are under the same license as the package itself. +# Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany. # +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + # Please submit bugfixes or comments via http://bugs.opensuse.org/ # # norootforbuild + Name: perl-Digest-SHA1 -Version: 2.11 +Version: 2.12 Release: 1 Requires: perl = %{perl_version} -Autoreqprov: on +AutoReqProv: on Group: Development/Libraries/Perl License: Artistic License -URL: http://cpan.org/modules/by-module/Digest/ +Url: http://cpan.org/modules/by-module/Digest/ Summary: A Perl Interface to the SHA-1 Algorithm Source: Digest-SHA1-%{version}.tar.bz2 BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -60,37 +68,46 @@ %{perl_vendorarch}/auto/Digest /var/adm/perl-modules/%{name} -%changelog -n perl-Digest-SHA1 -* Tue Jul 11 2006 - anicka@suse.cz +%changelog +* Mon May 25 2009 anicka@suse.cz +- update to 2.12 + * Get rid of the old CVS ids + * Avoid "redefined" error for ULONG on Win64 + * Less optimizations on IRIX [RT#8999] + * Clean up the 'git status' output + * Mention that SHA-1 might be weak [RT#11880] + * Ensure more stuff in the META.yml file [RT#40757] + * Quiet warnings when compiled with -Wwrite-strings [RT#31915] +* Tue Jul 11 2006 anicka@suse.cz - update to 2.11 - minor release -* Wed Jan 25 2006 - mls@suse.de +* Wed Jan 25 2006 mls@suse.de - converted neededforbuild to BuildRequires -* Fri Aug 06 2004 - mjancar@suse.cz +* Fri Aug 06 2004 mjancar@suse.cz - update to 2.10 -* Thu Feb 26 2004 - mjancar@suse.cz +* Thu Feb 26 2004 mjancar@suse.cz - update to 2.07 -* Tue Oct 21 2003 - mjancar@suse.cz +* Tue Oct 21 2003 mjancar@suse.cz - update to 2.06 -* Fri Aug 22 2003 - mjancar@suse.cz +* Fri Aug 22 2003 mjancar@suse.cz - require the perl version we build with -* Thu Jul 24 2003 - mjancar@suse.cz +* Thu Jul 24 2003 mjancar@suse.cz - update to 2.04 -* Tue Jul 15 2003 - mjancar@suse.cz +* Tue Jul 15 2003 mjancar@suse.cz - adapt to perl-5.8.1 - use %%perl_process_packlist -* Mon Jun 16 2003 - mjancar@suse.cz +* Mon Jun 16 2003 mjancar@suse.cz - fix filelist -* Thu Jun 05 2003 - mjancar@suse.cz +* Thu Jun 05 2003 mjancar@suse.cz - don't package MANIFEST -* Tue May 20 2003 - mjancar@suse.cz +* Tue May 20 2003 mjancar@suse.cz - remove unpackaged files -* Tue Apr 29 2003 - mjancar@suse.cz +* Tue Apr 29 2003 mjancar@suse.cz - update to version 2.02 - used $RPM_OPT_FLAGS -* Tue Jul 02 2002 - mls@suse.de +* Tue Jul 02 2002 mls@suse.de - remove race in .packlist generation -* Tue Jan 15 2002 - rvasice@suse.cz +* Tue Jan 15 2002 rvasice@suse.cz - update to version 2.01 -* Tue Aug 14 2001 - rvasice@suse.cz +* Tue Aug 14 2001 rvasice@suse.cz - initial package release (version 2.00) ++++++ Digest-SHA1-2.11.tar.bz2 -> Digest-SHA1-2.12.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Digest-SHA1-2.11/Changes new/Digest-SHA1-2.12/Changes --- old/Digest-SHA1-2.11/Changes 2006-01-18 12:28:52.000000000 +0100 +++ new/Digest-SHA1-2.12/Changes 2009-05-23 13:18:54.000000000 +0200 @@ -1,3 +1,18 @@ +2009-05-23 Release 2.12 + + Gisle Aas (6): + Get rid of the old CVS ids + Avoid "redefined" error for ULONG on Win64 + Less optimizations on IRIX [RT#8999] + Clean up the 'git status' output + Mention that SHA-1 might be weak [RT#11880] + Ensure more stuff in the META.yml file [RT#40757] + + Steve Peters (1): + Quiet warnings when compiled with -Wwrite-strings [RT#31915] + + + 2006-01-18 Gisle Aas <gisle@ActiveState.com> Release 2.11 diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Digest-SHA1-2.11/hints/irix_6.pl new/Digest-SHA1-2.12/hints/irix_6.pl --- old/Digest-SHA1-2.11/hints/irix_6.pl 1970-01-01 01:00:00.000000000 +0100 +++ new/Digest-SHA1-2.12/hints/irix_6.pl 2009-05-23 12:41:06.000000000 +0200 @@ -0,0 +1,6 @@ +# The Mongoose v7.1 compiler freezes up somewhere in the optimization of +# MD5Transform() in MD5.c with optimization -O3. This is a workaround: + +if ($Config{cc} =~ /64|n32/ && `$Config{cc} -version 2>&1` =~ /\s7\.1/) { + $self->{OPTIMIZE} = "-O1"; +} diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Digest-SHA1-2.11/Makefile.PL new/Digest-SHA1-2.12/Makefile.PL --- old/Digest-SHA1-2.11/Makefile.PL 2003-12-05 14:17:59.000000000 +0100 +++ new/Digest-SHA1-2.12/Makefile.PL 2009-05-23 13:14:11.000000000 +0200 @@ -4,8 +4,38 @@ WriteMakefile( 'NAME' => 'Digest::SHA1', 'VERSION_FROM' => 'SHA1.pm', + 'ABSTRACT' => 'Perl interface to the SHA-1 algorithm', + 'AUTHOR' => 'Gisle Aas <gisle@activestate.com>', + 'LICENSE' => "perl", + 'MIN_PERL_VERSION' => 5.004, 'PREREQ_PM' => { 'Digest::base' => '1.00', }, + 'META_MERGE' => { + repository => 'http://github.com/gisle/digest-sha1', + }, 'dist' => { COMPRESS => 'gzip -9f', SUFFIX => 'gz', }, ); + + +BEGIN { + # compatibility with older versions of MakeMaker + my $developer = -f "NOTES.txt"; + my %mm_req = ( + LICENCE => 6.31, + META_MERGE => 6.45, + META_ADD => 6.45, + MIN_PERL_VERSION => 6.48, + ); + undef(*WriteMakefile); + *WriteMakefile = sub { + my %arg = @_; + for (keys %mm_req) { + unless (eval { ExtUtils::MakeMaker->VERSION($mm_req{$_}) }) { + warn "$_ $@" if $developer; + delete $arg{$_}; + } + } + ExtUtils::MakeMaker::WriteMakefile(%arg); + }; +} diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Digest-SHA1-2.11/MANIFEST new/Digest-SHA1-2.12/MANIFEST --- old/Digest-SHA1-2.11/MANIFEST 2003-12-05 14:17:59.000000000 +0100 +++ new/Digest-SHA1-2.12/MANIFEST 2009-05-23 13:20:09.000000000 +0200 @@ -6,7 +6,9 @@ SHA1.xs fip180-1.gif fip180-1.html +hints/irix_6.pl t/badfile.t t/bits.t t/sha1.t typemap +META.yml Module meta-data (added by MakeMaker) diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Digest-SHA1-2.11/META.yml new/Digest-SHA1-2.12/META.yml --- old/Digest-SHA1-2.11/META.yml 1970-01-01 01:00:00.000000000 +0100 +++ new/Digest-SHA1-2.12/META.yml 2009-05-23 13:20:09.000000000 +0200 @@ -0,0 +1,22 @@ +--- #YAML:1.0 +name: Digest-SHA1 +version: 2.12 +abstract: Perl interface to the SHA-1 algorithm +author: + - Gisle Aas <gisle@activestate.com> +license: perl +distribution_type: module +configure_requires: + ExtUtils::MakeMaker: 0 +requires: + Digest::base: 1.00 + perl: 5.004 +no_index: + directory: + - t + - inc +generated_by: ExtUtils::MakeMaker version 6.4801 +meta-spec: + url: http://module-build.sourceforge.net/META-spec-v1.4.html + version: 1.4 +repository: http://github.com/gisle/digest-sha1 diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Digest-SHA1-2.11/SHA1.pm new/Digest-SHA1-2.12/SHA1.pm --- old/Digest-SHA1-2.11/SHA1.pm 2006-01-18 12:29:05.000000000 +0100 +++ new/Digest-SHA1-2.12/SHA1.pm 2009-05-23 13:16:07.000000000 +0200 @@ -3,7 +3,7 @@ use strict; use vars qw($VERSION @ISA @EXPORT_OK); -$VERSION = '2.11'; # $Date: 2006/01/18 11:29:05 $ +$VERSION = '2.12'; require Exporter; *import = \&Exporter::import; @@ -63,6 +63,11 @@ input a message of arbitrary length and produces as output a 160-bit "fingerprint" or "message digest" of the input. +In 2005, security flaws were identified in SHA-1, namely that a possible +mathematical weakness might exist, indicating that a stronger hash function +would be desirable. The L<Digest::SHA> module implements the stronger +algorithms in the SHA family. + The C<Digest::SHA1> module provide a procedural interface for simple use, as well as an object oriented interface that can handle messages of arbitrary length and which can read files directly. @@ -222,6 +227,8 @@ http://www.itl.nist.gov/fipspubs/fip180-1.htm +http://en.wikipedia.org/wiki/SHA_hash_functions + =head1 COPYRIGHT This library is free software; you can redistribute it and/or diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Digest-SHA1-2.11/SHA1.xs new/Digest-SHA1-2.12/SHA1.xs --- old/Digest-SHA1-2.11/SHA1.xs 2006-01-18 12:25:48.000000000 +0100 +++ new/Digest-SHA1-2.12/SHA1.xs 2009-05-23 12:51:46.000000000 +0200 @@ -1,5 +1,3 @@ -/* $Id: SHA1.xs,v 1.16 2006/01/18 11:25:48 gisle Exp $ */ - #ifdef __cplusplus extern "C" { #endif @@ -66,7 +64,7 @@ /* Useful defines & typedefs */ #if defined(U64TYPE) && (defined(USE_64_BIT_INT) || ((BYTEORDER != 0x1234) && (BYTEORDER != 0x4321))) -typedef U64TYPE ULONG; +typedef U64TYPE ULONGx; # if BYTEORDER == 0x1234 # undef BYTEORDER # define BYTEORDER 0x12345678 @@ -75,15 +73,15 @@ # define BYTEORDER 0x87654321 # endif #else -typedef unsigned long ULONG; /* 32-or-more-bit quantity */ +typedef unsigned long ULONGx; /* 32-or-more-bit quantity */ #endif #define SHA_BLOCKSIZE 64 #define SHA_DIGESTSIZE 20 typedef struct { - ULONG digest[5]; /* message digest */ - ULONG count_lo, count_hi; /* 64-bit bit count */ + ULONGx digest[5]; /* message digest */ + ULONGx count_lo, count_hi; /* 64-bit bit count */ U8 data[SHA_BLOCKSIZE]; /* SHA data buffer */ int local; /* unprocessed amount in data */ } SHA_INFO; @@ -144,7 +142,7 @@ { int i; U8 *dp; - ULONG T, A, B, C, D, E, W[80], *WP; + ULONGx T, A, B, C, D, E, W[80], *WP; dp = sha_info->data; @@ -158,9 +156,9 @@ #if BYTEORDER == 0x1234 #define SWAP_DONE - /* assert(sizeof(ULONG) == 4); */ + /* assert(sizeof(ULONGx) == 4); */ for (i = 0; i < 16; ++i) { - T = *((ULONG *) dp); + T = *((ULONGx *) dp); dp += 4; W[i] = ((T << 24) & 0xff000000) | ((T << 8) & 0x00ff0000) | ((T >> 8) & 0x0000ff00) | ((T >> 24) & 0x000000ff); @@ -169,9 +167,9 @@ #if BYTEORDER == 0x4321 #define SWAP_DONE - /* assert(sizeof(ULONG) == 4); */ + /* assert(sizeof(ULONGx) == 4); */ for (i = 0; i < 16; ++i) { - T = *((ULONG *) dp); + T = *((ULONGx *) dp); dp += 4; W[i] = T32(T); } @@ -179,9 +177,9 @@ #if BYTEORDER == 0x12345678 #define SWAP_DONE - /* assert(sizeof(ULONG) == 8); */ + /* assert(sizeof(ULONGx) == 8); */ for (i = 0; i < 16; i += 2) { - T = *((ULONG *) dp); + T = *((ULONGx *) dp); dp += 8; W[i] = ((T << 24) & 0xff000000) | ((T << 8) & 0x00ff0000) | ((T >> 8) & 0x0000ff00) | ((T >> 24) & 0x000000ff); @@ -193,9 +191,9 @@ #if BYTEORDER == 0x87654321 #define SWAP_DONE - /* assert(sizeof(ULONG) == 8); */ + /* assert(sizeof(ULONGx) == 8); */ for (i = 0; i < 16; i += 2) { - T = *((ULONG *) dp); + T = *((ULONGx *) dp); dp += 8; W[i] = T32(T >> 32); W[i+1] = T32(T); @@ -275,14 +273,14 @@ static void sha_update(SHA_INFO *sha_info, U8 *buffer, int count) { int i; - ULONG clo; + ULONGx clo; - clo = T32(sha_info->count_lo + ((ULONG) count << 3)); + clo = T32(sha_info->count_lo + ((ULONGx) count << 3)); if (clo < sha_info->count_lo) { ++sha_info->count_hi; } sha_info->count_lo = clo; - sha_info->count_hi += (ULONG) count >> 29; + sha_info->count_hi += (ULONGx) count >> 29; if (sha_info->local) { i = SHA_BLOCKSIZE - sha_info->local; if (i > count) { @@ -338,7 +336,7 @@ static void sha_final(unsigned char digest[20], SHA_INFO *sha_info) { int count; - ULONG lo_bit_count, hi_bit_count; + ULONGx lo_bit_count, hi_bit_count; lo_bit_count = sha_info->count_lo; hi_bit_count = sha_info->count_hi; @@ -383,7 +381,7 @@ static char* hex_20(const unsigned char* from, char* to) { - static char *hexdigits = "0123456789abcdef"; + static const char *hexdigits = "0123456789abcdef"; const unsigned char *end = from + 20; char *d = to; @@ -398,7 +396,7 @@ static char* base64_20(const unsigned char* from, char* to) { - static char* base64 = + static const char* base64 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; const unsigned char *end = from + 20; unsigned char c1, c2, c3; @@ -485,7 +483,7 @@ SV* self PREINIT: SHA_INFO* cont = get_sha_info(aTHX_ self); - char *myname = sv_reftype(SvRV(self),TRUE); + const char *myname = sv_reftype(SvRV(self),TRUE); SHA_INFO* context; PPCODE: New(55, context, 1, SHA_INFO); @@ -571,7 +569,7 @@ sha_init(&ctx); if (DOWARN) { - char *msg = 0; + const char *msg = 0; if (items == 1) { if (SvROK(ST(0))) { SV* sv = SvRV(ST(0)); @@ -588,8 +586,8 @@ } } if (msg) { - char *f = (ix == F_BIN) ? "sha1" : - (ix == F_HEX) ? "sha1_hex" : "sha1_base64"; + const char *f = (ix == F_BIN) ? "sha1" : + (ix == F_HEX) ? "sha1_hex" : "sha1_base64"; warn("&Digest::SHA1::%s function %s", f, msg); } } ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org