diff --git a/Module-Signature-0.83.tar.gz b/Module-Signature-0.83.tar.gz deleted file mode 100644 index fe2e00d..0000000 --- a/Module-Signature-0.83.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:3c15f3845a85d2a76a81253be53cb0f716465a3f696eb9c50e92eef34e9601cb -size 82161 diff --git a/Module-Signature-0.86.tar.gz b/Module-Signature-0.86.tar.gz new file mode 100644 index 0000000..5f1da35 --- /dev/null +++ b/Module-Signature-0.86.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:34b21e365a8249eb07c9be27bc3550b2c05f191ab69c4a9b54b2b2ff5db40251 +size 97094 diff --git a/perl-Module-Signature.changes b/perl-Module-Signature.changes index b757160..6d25b44 100644 --- a/perl-Module-Signature.changes +++ b/perl-Module-Signature.changes @@ -1,3 +1,14 @@ +------------------------------------------------------------------- +Fri Jun 26 03:12:00 UTC 2020 - Tina Müller + +- updated to 0.86 + see /usr/share/doc/packages/perl-Module-Signature/Changes + + [Changes for 0.86 - Thu Jun 25 21:06:24 CST 2020] + * Update PAUSE and ANDK keys to 2020. (@dweekly) + * Update documentation pertaining to SHA1. (@dweekly) + * Fix compatibility with Crypt::OpenPGP. (@niklasholm) + ------------------------------------------------------------------- Thu Aug 30 05:38:05 UTC 2018 - coolo@suse.com diff --git a/perl-Module-Signature.spec b/perl-Module-Signature.spec index c1c87a9..4ea48d3 100644 --- a/perl-Module-Signature.spec +++ b/perl-Module-Signature.spec @@ -1,7 +1,7 @@ # # spec file for package perl-Module-Signature # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,19 +12,19 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # Name: perl-Module-Signature -Version: 0.83 +Version: 0.86 Release: 0 #Upstream: SUSE-Public-Domain %define cpan_name Module-Signature Summary: Module signature file manipulation License: CC0-1.0 AND (GPL-1.0-or-later OR Artistic-1.0) Group: Development/Libraries/Perl -Url: http://search.cpan.org/dist/Module-Signature/ +URL: https://metacpan.org/release/%{cpan_name} Source0: https://cpan.metacpan.org/authors/id/A/AU/AUDREYT/%{cpan_name}-%{version}.tar.gz Source1: cpanspec.yml BuildArch: noarch @@ -57,6 +57,11 @@ dist'. Be sure to delete the _SIGNATURE_ file afterwards. Please also see NOTES about _MANIFEST.SKIP_ issues, especially if you are using *Module::Build* or writing your own _MANIFEST.SKIP_. +Signatures made with Module::Signature prior to version 0.82 used the SHA1 +algorithm by default. SHA1 is now considered broken, and therefore module +authors are strongly encouraged to regenerate their _SIGNATURE_ files. +Users verifying old SHA1 signature files will receive a warning. + %prep %setup -q -n %{cpan_name}-%{version} # MANUAL BEGIN @@ -64,11 +69,11 @@ sed -i -e 's/use inc::Module::Install/use lib q[.];\nuse inc::Module::Install/' # MANUAL END %build -%{__perl} Makefile.PL INSTALLDIRS=vendor -%{__make} %{?_smp_mflags} +PERL_USE_UNSAFE_INC=1 perl Makefile.PL INSTALLDIRS=vendor +make %{?_smp_mflags} %check -%{__make} test +make test %install %perl_make_install @@ -77,6 +82,6 @@ sed -i -e 's/use inc::Module::Install/use lib q[.];\nuse inc::Module::Install/' %files -f %{name}.files %defattr(-,root,root,755) -%doc ANDK2018.pub AUDREYT2018.pub AUTHORS Changes NIKLASHOLM2018.pub PAUSE2019.pub README +%doc ANDK2020.pub AUDREYT2018.pub AUTHORS Changes NIKLASHOLM2018.pub PAUSE2020.pub README %changelog