-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 21 Aug 2013 20:54:37 +0200
Source: libmodule-metadata-perl
Binary: libmodule-metadata-perl
Architecture: source all
Version: 1.000015-1
Distribution: unstable
Urgency: low
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
libmodule-metadata-perl - Perl module to gather package and POD information from perl modul
Changes:
libmodule-metadata-perl (1.000015-1) unstable; urgency=low
.
* Team upload.
* Imported Upstream version 1.000015
- Addresses CVE-2013-1437 as (serious) documentation bug:
Module::Metadata executes code when gathering metadata about a
module by design. In versions previous to 1.000015 the
documentation stated, however, that Module::Metadata provides a
standard way to gather metadata about a .pm file without executing
unsafe code.
* Rewrite short and long description.
Rewrite short description matching the X is a Perl module [...] scheme.
Rewrite the long description based on the Module::Metadata POD,
containing also the note about how the information is gathered.
Checksums-Sha1:
327eee5fcf0cfc7c25309183858c87e1e744627b 2232 libmodule-metadata-perl_1.000015-1.dsc
a4e8e27bcd4c898c7090b13d22d1c9945f4573c7 32322 libmodule-metadata-perl_1.000015.orig.tar.gz
e87446fb4a7c84de8bb403e4c268f074f1034a48 2400 libmodule-metadata-perl_1.000015-1.debian.tar.gz
605f31ede382380dc6363d397db373c242848a50 18736 libmodule-metadata-perl_1.000015-1_all.deb
Checksums-Sha256:
c298b4820313ec4051fc8c58af0a1ad68f935c98ee79de189b50dd763836ccaf 2232 libmodule-metadata-perl_1.000015-1.dsc
6e123b6fa67b07bfa404d87bf2eb8ed2938d6458090f9a5256dcebef2382516d 32322 libmodule-metadata-perl_1.000015.orig.tar.gz
38d629b1c88b7489f3c1ef4a52f240275461e4bc222f1d17acdbfa22c1f06f8c 2400 libmodule-metadata-perl_1.000015-1.debian.tar.gz
ce48eebb1f901e6b3949ac73e5802550c5be8d843a84929354fa2fd2f40d2ce5 18736 libmodule-metadata-perl_1.000015-1_all.deb
Files:
5ad9814b7753363341e063d9d4d44e44 2232 perl optional libmodule-metadata-perl_1.000015-1.dsc
7b4e30c9c5eec618e4d87524966c1c8d 32322 perl optional libmodule-metadata-perl_1.000015.orig.tar.gz
6af9b24b7e026881334fedcb200d9cbe 2400 perl optional libmodule-metadata-perl_1.000015-1.debian.tar.gz
93d4140e4167cdeb2284643f63200d05 18736 perl optional libmodule-metadata-perl_1.000015-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)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=cyBP
-----END PGP SIGNATURE-----
