[libmodule-metadata-perl] 02/02: Update debian/changelog

Salvatore Bonaccorso carnil at debian.org
Wed Aug 21 17:01:54 UTC 2013


This is an automated email from the git hooks/post-receive script.

carnil pushed a commit to branch master
in repository libmodule-metadata-perl.

commit 02aacdf2e5e2eea3e3489d781199a98f3ab5ac9c
Author: Salvatore Bonaccorso <carnil at debian.org>
Date:   Wed Aug 21 18:56:46 2013 +0200

    Update debian/changelog
    
    Git-Dch: Ignore
---
 debian/changelog |   12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 403ced3..167f1e3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,15 @@
+libmodule-metadata-perl (1.000015-1) UNRELEASED; urgency=low
+
+  * Imported Upstream version 1.000015
+    - Adresses CVE-2013-1437 as (serious) documentation bug:
+      Module::Metadata executes code when gathering metadata about a
+      module by design. In versions previous to 1.000015 the
+      documentation however stated, that Module::Metadata provides a
+      standard way to gather metadata about a .pm file without executing
+      unsafe code.
+
+ -- Salvatore Bonaccorso <carnil at debian.org>  Wed, 21 Aug 2013 18:52:38 +0200
+
 libmodule-metadata-perl (1.000014-1) unstable; urgency=low
 
   [ Salvatore Bonaccorso ]

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libmodule-metadata-perl.git



More information about the Pkg-perl-cvs-commits mailing list