Accepting request 1303253 from devel:languages:perl

- updated to 4.40.0 (4.04)
   see /usr/share/doc/packages/perl-JSON-XS/Changes
  4.04 Fri 05 Sep 2025 23:59:48 CEST
          - fix heap overflow causing crashes, possibly information
            disclosure or worse (CVE-2025-40928), and causes JSON::XS to
            accept invalid JSON texts as valid in some cases. Thanks to
            Michael Hudak for finding this, the CPAN Security Group for
            coordinating this, and Reini Urban for double-checking the patch
            (and Peter Juhasz for potentially reporting this much earlier).
  (bsc#1249330)

OBS-URL: https://build.opensuse.org/request/show/1303253
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/perl-JSON-XS?expand=0&rev=25

JSON-XS-4.03.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:515536f45f2fa1a7e88c8824533758d0121d267ab9cb453a1b5887c8a56b9068
-size 86749

README.md

@@ -0,0 +1,12 @@
+
+## Build Results
+
+Current state of perl in openSUSE:Factory is
+
+![Factory build results](https://br.opensuse.org/status/openSUSE:Factory/perl-JSON-XS/standard)
+
+The current state of perl in the devel project build (devel:languages:perl)
+
+![Devel project build results](https://br.opensuse.org/status/devel:languages:perl/perl-JSON-XS)
+
+

_scmsync.obsinfo

@@ -0,0 +1,5 @@
+mtime: 1757350598
+commit: a69ced4fd2b708e9deba2a411e486e71d67e65173524ae177e65c567ba28dd72
+url: https://src.opensuse.org/perl/perl-JSON-XS.git
+revision: a69ced4fd2b708e9deba2a411e486e71d67e65173524ae177e65c567ba28dd72
+projectscmsync: https://src.opensuse.org/perl/_ObsPrj

build.specials.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4fa7fa2ad26617194a735b5eb14fb94de29702ac6058b1e79ee8ca5acadd72da
+size 256

perl-JSON-XS.changes

@@ -1,3 +1,18 @@
+-------------------------------------------------------------------
+Mon Sep  8 16:53:42 UTC 2025 - Tina Müller <tina.mueller@suse.com>
+
+- updated to 4.40.0 (4.04)
+   see /usr/share/doc/packages/perl-JSON-XS/Changes
+
+  4.04 Fri 05 Sep 2025 23:59:48 CEST
+          - fix heap overflow causing crashes, possibly information
+            disclosure or worse (CVE-2025-40928), and causes JSON::XS to
+            accept invalid JSON texts as valid in some cases. Thanks to
+            Michael Hudak for finding this, the CPAN Security Group for
+            coordinating this, and Reini Urban for double-checking the patch
+            (and Peter Juhasz for potentially reporting this much earlier).
+  (bsc#1249330)
+
 -------------------------------------------------------------------
 Wed Oct 28 03:07:22 UTC 2020 - Tina Müller <timueller+perl@suse.de>
 

perl-JSON-XS.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package perl-JSON-XS
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,24 +16,28 @@
 #
 
 
-Name:           perl-JSON-XS
-Version:        4.03
-Release:        0
 %define cpan_name JSON-XS
-Summary:        JSON serialising/deserialising, done correctly and fast
+Name:           perl-JSON-XS
+Version:        4.40.0
+Release:        0
+# 4.04 -> normalize -> 4.40.0
+%define cpan_version 4.04
 License:        Artistic-1.0 OR GPL-1.0-or-later
-Group:          Development/Libraries/Perl
+Summary:        JSON serialising/deserialising, done correctly and fast
 URL:            https://metacpan.org/release/%{cpan_name}
-Source0:        https://cpan.metacpan.org/authors/id/M/ML/MLEHMANN/%{cpan_name}-%{version}.tar.gz
+Source0:        https://cpan.metacpan.org/authors/id/M/ML/MLEHMANN/%{cpan_name}-%{cpan_version}.tar.gz
 Source1:        cpanspec.yml
-BuildRoot:      %{_tmppath}/%{name}-%{version}-build
+Source100:      README.md
 BuildRequires:  perl
 BuildRequires:  perl-macros
 BuildRequires:  perl(Canary::Stability)
+BuildRequires:  perl(ExtUtils::MakeMaker) >= 6.52
 BuildRequires:  perl(Types::Serialiser)
 BuildRequires:  perl(common::sense)
 Requires:       perl(Types::Serialiser)
 Requires:       perl(common::sense)
+Provides:       perl(JSON::XS) = %{version}
+%undefine       __perllib_provides
 %{perl_requires}
 
 %description
@@ -45,12 +49,11 @@ See MAPPING, below, on how JSON::XS maps perl values to JSON values and
 vice versa.
 
 %prep
-%setup -q -n %{cpan_name}-%{version}
-find . -type f ! -path "*/t/*" ! -name "*.pl" ! -path "*/bin/*" ! -path "*/script/*" ! -name "configure" -print0 | xargs -0 chmod 644
+%autosetup -n %{cpan_name}-%{cpan_version} -p1
 
 %build
 perl Makefile.PL INSTALLDIRS=vendor OPTIMIZE="%{optflags}"
-make %{?_smp_mflags}
+%make_build
 
 %check
 make test
@@ -61,7 +64,6 @@ make test
 %perl_gen_filelist
 
 %files -f %{name}.files
-%defattr(-,root,root,755)
 %doc Changes README
 %license COPYING