From 90b777e370bb489d62e888e0361f428d5421f42b5d36ad3430c36ab5fd3b5d02 Mon Sep 17 00:00:00 2001 From: Nathan Cutler Date: Tue, 1 Apr 2025 12:57:57 +0000 Subject: [PATCH] Accepting request 1266156 from devel:languages:perl:autoupdate - Add manual license - updated to 0.8.0 (0.008) see /usr/share/doc/packages/perl-Data-Entropy/Changes version 0.008; 2025-03-27 * Use Crypt::URandom to seed the default algorithm with cryptographically secure random bytes instead of the builtin rand() function (bsc#1240395, CVE-2025-1860). * This module has been marked as deprecated. * A security policy was added. * Remove use of Module::Build. * Updated maintainer information. OBS-URL: https://build.opensuse.org/request/show/1266156 OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-Data-Entropy?expand=0&rev=3 --- Data-Entropy-0.007.tar.gz | 3 -- Data-Entropy-0.008.tar.gz | 3 ++ cpanspec.yml | 35 ++++++++++++++++++ perl-Data-Entropy.changes | 20 ++++++++++ perl-Data-Entropy.spec | 77 +++++++++++++++++++++------------------ 5 files changed, 99 insertions(+), 39 deletions(-) delete mode 100644 Data-Entropy-0.007.tar.gz create mode 100644 Data-Entropy-0.008.tar.gz create mode 100644 cpanspec.yml diff --git a/Data-Entropy-0.007.tar.gz b/Data-Entropy-0.007.tar.gz deleted file mode 100644 index 3e3805d..0000000 --- a/Data-Entropy-0.007.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:2611c4a1a3038594d79ea4ed14d9e15a9af8f77105f51667795fe4f8a53427e4 -size 43667 diff --git a/Data-Entropy-0.008.tar.gz b/Data-Entropy-0.008.tar.gz new file mode 100644 index 0000000..ad9bd63 --- /dev/null +++ b/Data-Entropy-0.008.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:18a52b1386e82c6b8cdb384a39861d60220a442a790e077010be72dd853b67b3 +size 40697 diff --git a/cpanspec.yml b/cpanspec.yml new file mode 100644 index 0000000..c76cf3a --- /dev/null +++ b/cpanspec.yml @@ -0,0 +1,35 @@ +--- +#description_paragraphs: 3 +#description: |- +# override description from CPAN +#summary: override summary from CPAN +#no_testing: broken upstream +#sources: +# - source1 +# - source2 +#patches: +# foo.patch: -p1 +# bar.patch: +# baz.patch: PATCH-FIX-OPENSUSE +#preamble: |- +# BuildRequires: gcc-c++ +#post_prep: |- +# hunspell=`pkg-config --libs hunspell | sed -e 's,-l,,; s, *,,g'` +# sed -i -e "s,hunspell-X,$hunspell," t/00-prereq.t Makefile.PL +#post_build: |- +# rm unused.files +#post_install: |- +# sed on %{name}.files +license: perl +#skip_noarch: 1 +#custom_build: |- +#./Build build flags=%{?_smp_mflags} --myflag +#custom_test: |- +#startserver && make test +#ignore_requires: Bizarre::Module +#skip_doc: regexp_to_skip_for_doc.* +#add_doc: files to add to docs +#misc: |- +#anything else to be added to spec file +#follows directly after %files section, so it can contain new blocks or also +#changes to %files section diff --git a/perl-Data-Entropy.changes b/perl-Data-Entropy.changes index 6c6f242..883d7d7 100644 --- a/perl-Data-Entropy.changes +++ b/perl-Data-Entropy.changes @@ -1,3 +1,23 @@ +------------------------------------------------------------------- +Tue Apr 1 12:43:39 UTC 2025 - Tina Müller + +- Add manual license + +------------------------------------------------------------------- +Fri Mar 28 05:35:22 UTC 2025 - Tina Müller + +- updated to 0.8.0 (0.008) + see /usr/share/doc/packages/perl-Data-Entropy/Changes + + version 0.008; 2025-03-27 + * Use Crypt::URandom to seed the default algorithm with + cryptographically secure random bytes instead of the builtin + rand() function (bsc#1240395, CVE-2025-1860). + * This module has been marked as deprecated. + * A security policy was added. + * Remove use of Module::Build. + * Updated maintainer information. + ------------------------------------------------------------------- Thu Dec 11 12:57:50 UTC 2014 - ncutler@suse.com diff --git a/perl-Data-Entropy.spec b/perl-Data-Entropy.spec index 1983b55..ed1a420 100644 --- a/perl-Data-Entropy.spec +++ b/perl-Data-Entropy.spec @@ -1,7 +1,7 @@ # # spec file for package perl-Data-Entropy # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2025 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,74 +12,79 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # -Name: perl-Data-Entropy -Version: 0.007 -Release: 0 %define cpan_name Data-Entropy +Name: perl-Data-Entropy +Version: 0.8.0 +Release: 0 +# 0.008 -> normalize -> 0.8.0 +%define cpan_version 0.008 +#Upstream: +License: Artistic-1.0 OR GPL-1.0-or-later Summary: Entropy (randomness) management -License: Artistic-1.0 or GPL-1.0+ -Group: Development/Libraries/Perl -Url: http://search.cpan.org/dist/Data-Entropy/ -Source: http://www.cpan.org/authors/id/Z/ZE/ZEFRAM/%{cpan_name}-%{version}.tar.gz +URL: https://metacpan.org/release/%{cpan_name} +Source0: https://cpan.metacpan.org/authors/id/R/RR/RRWO/%{cpan_name}-%{cpan_version}.tar.gz +Source1: cpanspec.yml BuildArch: noarch -BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: perl BuildRequires: perl-macros BuildRequires: perl(Crypt::Rijndael) -BuildRequires: perl(Data::Float) >= 0.008 +BuildRequires: perl(Crypt::URandom) >= 0.360 +BuildRequires: perl(Data::Float) >= 0.8.0 BuildRequires: perl(HTTP::Lite) >= 2.2 BuildRequires: perl(Module::Build) BuildRequires: perl(Params::Classify) BuildRequires: perl(parent) -#BuildRequires: perl(Data::Entropy) -#BuildRequires: perl(Data::Entropy::RawSource::CryptCounter) -#BuildRequires: perl(Data::Entropy::Source) Requires: perl(Crypt::Rijndael) -Requires: perl(Data::Float) >= 0.008 +Requires: perl(Crypt::URandom) >= 0.360 +Requires: perl(Data::Float) >= 0.8.0 Requires: perl(HTTP::Lite) >= 2.2 +Requires: perl(Module::Build) Requires: perl(Params::Classify) Requires: perl(parent) +Provides: perl(Data::Entropy) = %{version} +Provides: perl(Data::Entropy::Algorithms) = %{version} +Provides: perl(Data::Entropy::RawSource::CryptCounter) = %{version} +Provides: perl(Data::Entropy::RawSource::Local) = %{version} +Provides: perl(Data::Entropy::RawSource::RandomOrg) = %{version} +Provides: perl(Data::Entropy::RawSource::RandomnumbersInfo) = %{version} +Provides: perl(Data::Entropy::Source) = %{version} +%undefine __perllib_provides %{perl_requires} %description This module maintains a concept of a current selection of entropy source. -Algorithms that require entropy, such as those in the -Data::Entropy::Algorithms manpage, can use the source nominated by this -module, avoiding the need for entropy source objects to be explicitly -passed around. This is convenient because usually one entropy source will -be used for an entire program run and so an explicit entropy source -parameter would rarely vary. There is also a default entropy source, -avoiding the need to explicitly configure a source at all. +Algorithms that require entropy, such as those in +Data::Entropy::Algorithms, can use the source nominated by this module, +avoiding the need for entropy source objects to be explicitly passed +around. This is convenient because usually one entropy source will be used +for an entire program run and so an explicit entropy source parameter would +rarely vary. There is also a default entropy source, avoiding the need to +explicitly configure a source at all. If nothing is done to set a source then it defaults to the use of Rijndael -(AES) in counter mode (see the Data::Entropy::RawSource::CryptCounter -manpage and the Crypt::Rijndael manpage), keyed using Perl's built-in -'rand' function. This gives a data stream that looks like concentrated -entropy, but really only has at most the entropy of the 'rand' seed. Within -a single run it is cryptographically difficult to detect the correlation -between parts of the pseudo-entropy stream. If more true entropy is -required then it is necessary to configure a different entropy source. +(AES) in counter mode (see Data::Entropy::RawSource::CryptCounter and +Crypt::Rijndael), keyed using Crypt::URandom. %prep -%setup -q -n %{cpan_name}-%{version} +%autosetup -n %{cpan_name}-%{cpan_version} -p1 %build -%{__perl} Build.PL installdirs=vendor -./Build build flags=%{?_smp_mflags} +perl Makefile.PL INSTALLDIRS=vendor +%make_build %check -./Build test +make test %install -./Build install destdir=%{buildroot} create_packlist=0 +%perl_make_install +%perl_process_packlist %perl_gen_filelist %files -f %{name}.files -%defattr(-,root,root,755) -%doc Changes README +%doc Changes README SECURITY.md %changelog