[libtest-signature-perl] 01/01: Imported Debian patch 1.10-1+deb6u1

[Salvatore Bonaccorso]

This is an automated email from the git hooks/post-receive script.

carnil pushed a commit to branch squeeze
in repository libtest-signature-perl.

commit 48300af7cb812cca0806a4101cab7821a57921e5
Author: Santiago Ruano Rincón <santiagorr at riseup.net>
Date:   Wed Jul 1 12:20:29 2015 +0200

    Imported Debian patch 1.10-1+deb6u1
---
 debian/changelog                                 | 12 ++++++++++++
 debian/patches/CVE-2015-3407-compatibility.patch | 11 +++++++++++
 debian/patches/series                            |  1 +
 debian/source/format                             |  1 +
 4 files changed, 25 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 300de0b..278cc4b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,15 @@
+libtest-signature-perl (1.10-1+deb6u1) squeeze-lts; urgency=medium
+
+  * Non-maintainer upload by the Squeeze LTS team.
+  * Set debian/source/format to 3.0 (quilt)
+
+  [Salvatore Bonaccorso <carnil at debian.org>]
+  * Consider MANIFEST.SKIP when verfying signature as part of testsuites.
+    Set skip => 1 on Module::Signature::verify for compatibility with the
+    fix for CVE-2015-3407 in libmodule-signature-perl.
+
+ -- Santiago Ruano Rincón <santiagorr at riseup.net>  Wed, 01 Jul 2015 12:20:29 +0200
+
 libtest-signature-perl (1.10-1) unstable; urgency=low
 
   * Initial Release. (Closes: #519769)
diff --git a/debian/patches/CVE-2015-3407-compatibility.patch b/debian/patches/CVE-2015-3407-compatibility.patch
new file mode 100644
index 0000000..9634f51
--- /dev/null
+++ b/debian/patches/CVE-2015-3407-compatibility.patch
@@ -0,0 +1,11 @@
+--- libtest-signature-perl-1.10.orig/lib/Test/Signature.pm
++++ libtest-signature-perl-1.10/lib/Test/Signature.pm
+@@ -96,7 +96,7 @@
+             $action->("Cannot connect to the keyserver.");
+         }
+         else {
+-            $test->ok( Module::Signature::verify() ==
++            $test->ok( Module::Signature::verify(skip => 1) ==
+                   Module::Signature::SIGNATURE_OK() => $name );
+         }
+     }
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..a410dc9
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1 @@
+CVE-2015-3407-compatibility.patch
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000..163aaf8
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libtest-signature-perl.git