Version: 0.81-bp150.2.4
* Tue Oct 03 2017 coolo@suse.com
- patch the Makefile to build with perl 5.26
* Tue Sep 06 2016 coolo@suse.com
- updated to 0.81
see /usr/share/doc/packages/perl-Module-Signature/Changes
* Sun Jun 12 2016 coolo@suse.com
- updated to 0.80
see /usr/share/doc/packages/perl-Module-Signature/Changes
* Fri Jan 08 2016 chris@computersalat.de
- update changelog
* add missing CVE tags for 0.78 changes (boo#928382)
* Tue May 19 2015 coolo@suse.com
- updated to 0.79
see /usr/share/doc/packages/perl-Module-Signature/Changes
[Changes for 0.79 - Mon May 18 23:02:11 CST 2015]
* Restore "cpansign --skip" functionality.
Contributed by: CLOOS
* Fri Apr 17 2015 coolo@suse.com
- updated to 0.78
see /usr/share/doc/packages/perl-Module-Signature/Changes
[Changes for 0.78 - Thu Apr 9 16:58:27 CST 2015]
* Fix verify() use from cpanm and CPAN.pm.
Contributed by: ANDK
[Changes for 0.77 - Wed Apr 8 19:36:50 CST 2015]
* Include the latest public keys of PAUSE, ANDK and AUDREYT.
* Clarify scripts/cpansign copyright to CC0.
Reported by: @pghmcfc
[Changes for 0.76 - Wed Apr 8 18:05:48 CST 2015]
* Fix signature tests by defaulting to verify(skip=>1)
when $ENV{TEST_SIGNATURE} is true.
Reported by: @pghmcfc
[Changes for 0.75 - Tue Apr 7 04:56:09 CST 2015]
Two more issues reported by John Lightsey:
* Update ChangeLog.
* More protection of @INC from relative paths. (CVE-2015-3409)
Fix various issues reported by John Lightsey:
[Changes for 0.74 - Tue Apr 7 02:39:14 CST 2015]
Fix various issues reported by John Lightsey:
* Fix GPG signature parsing logic. (CVE-2015-3406)
* MANIFEST.SKIP is no longer consulted unless --skip is given. (CVE-2015-3407)
* Properly use open() modes to avoid injection attacks. (CVE-2015-3408)
* Sun Aug 04 2013 coolo@suse.com
- fix souce url
* Wed Jul 03 2013 chris@computersalat.de
- update to 0.73
* fix for bnc#828010 (CVE-2013-2145)
https://bugzilla.novell.com/process_bug.cgi
https://bugzilla.redhat.com/show_bug.cgi?id=971096
* Properly redo the previous fix using File::Spec->file_name_is_absolute.
- [Changes for 0.72 - Wed Jun 5 23:19:02 CST 2013]
* Only allow loading Digest::* from absolute paths in @INC,
by ensuring they begin with \ or / characters.
Contributed by: Florian Weimer (CVE-2013-2145)
- [Changes for 0.71 - Tue Jun 4 18:24:10 CST 2013]
* Constrain the user-specified digest name to /^\w+\d+$/.
* Avoid loading Digest::* from relative paths in @INC.
Contributed by: Florian Weimer (CVE-2013-2145)
- [Changes for 0.70 - Thu Nov 29 01:45:54 CST 2012]
* Don't check gpg version if gpg does not exist.
This avoids unnecessary warnings during installation
when gpg executable is not installed.
Contributed by: Kenichi Ishigaki
- [Changes for 0.69 - Fri Nov 2 23:04:19 CST 2012]
* Support for gpg under these alternate names:
gpg gpg2 gnupg gnupg2
Contributed by: Michael Schwern
* Mon Dec 19 2011 cfarrell@suse.com
- license update: CC0-1.0 and (GPL-1.0+ or Artistic-1.0)
License purports to be CC zero, not CC-BY. Also, see the script/cpansign
and Module/Signature (line 88+) files for Perl licenses
* Thu Dec 15 2011 coolo@suse.com
- regenerate with cpanspec to fix requires/buildrequires
* Wed Dec 14 2011 coolo@suse.com
- update to 0.68
* Fix breakage introduced by 0.67 (Andreas König).
* Better handling of \r (Andreas König, Zefram)
* Wed Dec 14 2011 coolo@suse.com
- fix license to be in spdx.org format
* Tue Nov 30 2010 coolo@novell.com
- switch to perl_requires macro
* Wed Sep 08 2010 chris@computersalat.de
- update to 0.66
* Fix incompatibility with EU::Manifest 1.54 to 1.57
(Paul Howarth) (Closes RT#61124).
* Sat Sep 04 2010 chris@computersalat.de
- update to 0.65
* Skip MYMETA (Alexandr Ciornii)
* Sat Jul 24 2010 chris@computersalat.de
- removed UTF-8 chars from changes
* Wed Jul 21 2010 chris@computersalat.de
- update to 0.64
* Avoid creating gnupg configuration files for the user invoking Makefile.PL
(Closes RT#41978).
* Correctly detect the version of gnupg on cygwin and add tests for it
(Paul Fenwick) (Closes RT#39258).
- [Changes for 0.63 - Sun, 28 Mar 2010 04:46:27 +0100]
* Fix diagnostic message from Makefile.PL when the user dosn't have gnupg or
Crypt::OpenPGP (miyagawa).
- [Changes for 0.62 - Tue, 23 Mar 2010 22:17:39 +0100]
* Change the default keyserver from the outdated pgp.mit.edu to
pool.sks-keyservers.net.
- [Changes for 0.61 - Thu, 19 Mov 2009 00:56:41 CST]
* Added "=encoding utf8" to POD to fix author name display.
No functional changes.
- [Changes for 0.60 - Mon, 16 Nov 2009 22:48:54 CST]
* LICENSING CHANGE: This compilation and all individual files in it
are now under the nullary CC0 1.0 Universal terms:
To the extent possible under law, <cpan@audreyt.org> has waived all
copyright and related or neighboring rights to Module-Signature.
* Updated Module::Install to 0.91, prompted by Florian Ragwitz.
- recreated by cpanspec 1.78
- noarch pkg
* Sat Jul 25 2009 chris@computersalat.de
- spec mods
* removed ^----------
* removed ^#---------
* Sat Jun 27 2009 chris@computersalat.de
- fixed deps
o changed Digest::SHA1 to Digest::SHA
* Fri Jun 26 2009 chris@computersalat.de
- initial package 0.55