Overview

Request 947240 revoked

- Update to version 1.9020:
* s/PAUSE/CPAN/
* update documentation
* remove the signature verification of CHECKSUM file
* do not import PAUSE2022.pub by ourselves
* import PAUSE2022.pub by ourselves in tests
* check cpan_path in CHECKSUMS file too
* use 'eq' instead of '==' to test the return value of Module::Signature::_verify
* App::Ack now requires perl 5.10.1
* take care of perl that is built with man pages disabled
* bump "future" perl
* remove obsolete test
* remove travis.yml
* create github actions workflow file


Dirk Stoecker's avatar

Still the same issues as discussed in previous SR.


Ondřej Súkup's avatar

fixes CVE + changes package style from all in one fatpack ( something should not be in proper distibution ) to normal Perl package

automatic packaging --> this isnt CPAN package so we can't use this path



Tina Müller's avatar

Where did you get the code from, and the version number?


Ondřej Súkup's avatar

look at _service

version number is what reports 'cpanm --version'


Sebastian Riedel's avatar

Looking at the code it seems like it should be 1.7907.


Sebastian Riedel's avatar

While the changes seem pretty safe to backport, i would try to avoid incrementing the version number. We don't know what upstream will choose for the next release yet.


Ondřej Súkup's avatar

it will be higher than 1.9022

and from readme.md in Menlo dir upstream works on cpanminus-2.0 release


Tina Müller's avatar

In any case, I think going into all three directories App-cpanminus, Menlo-Legacy and Menlo and doing an install does look wrong. Have you compared the resulting rpm?


Ondřej Súkup's avatar

yes, and it needs this,but probably better solution will be introduce perl-Menlo-Legacy and perl-Menlo` packages and set Requires for this in App-cpanminus


Dirk Stoecker's avatar

There ARE perl-Menlo and perl-Menlo-Legacy packages!


Sebastian Riedel's avatar

It is also still unconfirmed if that patch actually fixes the issue.



Request History
Ondřej Súkup's avatar

mimi_vx created request

- Update to version 1.9020:
* s/PAUSE/CPAN/
* update documentation
* remove the signature verification of CHECKSUM file
* do not import PAUSE2022.pub by ourselves
* import PAUSE2022.pub by ourselves in tests
* check cpan_path in CHECKSUMS file too
* use 'eq' instead of '==' to test the return value of Module::Signature::_verify
* App::Ack now requires perl 5.10.1
* take care of perl that is built with man pages disabled
* bump "future" perl
* remove obsolete test
* remove travis.yml
* create github actions workflow file


Tina Müller's avatar

tinita declined request

I need to decline this, as we agreed that in the current form the update doesn't make sense.
See also comments in https://progress.opensuse.org/issues/104164


Ondřej Súkup's avatar

mimi_vx revoked request

The source project 'home:mimi_vx:branches:devel:languages:perl' has been removed

openSUSE Build Service is sponsored by