public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/perl-YAML] rawhide: Update to v1.320.0 (rhbz#2502797)
@ 2026-07-20 15:24 Paul Howarth
0 siblings, 0 replies; only message in thread
From: Paul Howarth @ 2026-07-20 15:24 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/perl-YAML
Branch : rawhide
Commit : 6fc2cdc422efa4d9aad420cc2ca22a4555cee3a3
Author : Paul Howarth <paul@city-fan.org>
Date : 2026-07-20T16:23:38+01:00
Stats : +24/-10 in 5 file(s)
URL : https://src.fedoraproject.org/rpms/perl-YAML/c/6fc2cdc422efa4d9aad420cc2ca22a4555cee3a3?branch=rawhide
Log:
Update to v1.320.0 (rhbz#2502797)
- New upstream release v1.320.0
- Security: Avoid backtracking leading to exponential load time
(CVE-2026-63676)
- Stick with existing version numbering scheme for now
---
diff --git a/.gitignore b/.gitignore
index ad44a17..ce622b9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
/YAML-[0-9.]*.tar.gz
/YAML-free-[0-9.]*.tar.gz
+/YAML-free-v[0-9.]*.tar.gz
diff --git a/YAML-free b/YAML-free
index beae38a..9750c9e 100755
--- a/YAML-free
+++ b/YAML-free
@@ -15,7 +15,7 @@ case $# in
;;
esac
-if echo "$YAML_tarball" | grep --silent -x 'YAML-[1-9][0-9]*\.[0-9][0-9.]*\.tar\.gz'; then
+if echo "$YAML_tarball" | grep --silent -Ex 'YAML-v?[1-9][0-9]*\.[0-9][0-9.]*\.tar\.gz'; then
YAML_free_tarball=$(echo "$YAML_tarball" | sed -e 's|^YAML|YAML-free|')
YAML_dirname=$(echo "$YAML_tarball" | sed -e 's|\.tar\.gz$||')
else
diff --git a/perl-YAML.rpmlintrc b/perl-YAML.rpmlintrc
index be7a498..76b5145 100644
--- a/perl-YAML.rpmlintrc
+++ b/perl-YAML.rpmlintrc
@@ -1,2 +1,5 @@
# Tarball modified to remove non-free content
-addFilter("invalid-url Source0: YAML-free-[0-9.]*\.tar\.gz")
+addFilter("invalid-url Source0: YAML-free-v?[0-9.]*\.tar\.gz")
+
+# libyaml is a library for YAML handling
+addFilter("spelling-error \('libyaml',")
diff --git a/perl-YAML.spec b/perl-YAML.spec
index e5b3de6..351d3e3 100644
--- a/perl-YAML.spec
+++ b/perl-YAML.spec
@@ -11,17 +11,21 @@
%bcond_with perl_YAML_enables_extra_test
%endif
+# Not sure if v-string versioning will be long term
+%global package_version 1.32
+%global cpan_version %(LC_ALL=C; printf 'v%.3f.0' '%{package_version}')
+
Name: perl-YAML
-Version: 1.31
-Release: 8%{?dist}
-Summary: YAML Ain't Markup Language (tm)
+Version: %{package_version}
+Release: 1%{?dist}
+Summary: YAML Ain't Markup Language (TM)
License: GPL-1.0-or-later OR Artistic-1.0-Perl
URL: https://metacpan.org/release/YAML
-# Tarball created from https://cpan.metacpan.org/modules/by-module/YAML/YAML-%%{version}.tar.gz
+# Tarball created from https://cpan.metacpan.org/modules/by-module/YAML/YAML-%%{cpan_version}.tar.gz
# using script YAML-free (see https://bugzilla.redhat.com/show_bug.cgi?id=1813197)
-Source0: YAML-free-%{version}.tar.gz
+Source0: YAML-free-%{cpan_version}.tar.gz
# Script to remove non-free content from upstream tarball
-# Usage: YAML-free YAML-%%{version}.tar.gz
+# Usage: YAML-free YAML-%%{cpan_version}.tar.gz
Source1: YAML-free
BuildArch: noarch
# Module Build
@@ -85,7 +89,7 @@ Please consider using these first:
YAML::PP API
%prep
-%setup -q -n YAML-%{version}
+%setup -q -n YAML-%{cpan_version}
%build
perl Makefile.PL INSTALLDIRS=vendor NO_PACKLIST=1 NO_PERLLOCAL=1
@@ -143,6 +147,12 @@ make test AUTHOR_TESTING=%{with perl_YAML_enables_extra_test}
%{_mandir}/man3/YAML::Types.3*
%changelog
+* Mon Jul 20 2026 Paul Howarth <paul@city-fan.org> - 1.32-1
+- Update to v1.320.0 (rhbz#2502797)
+ - Security: Avoid backtracking leading to exponential load time
+ (CVE-2026-63676)
+- Stick with existing version numbering scheme for now
+
* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.31-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
diff --git a/sources b/sources
index 4760ec9..03b394a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (YAML-free-1.31.tar.gz) = fd259d41f8f5b5ef58365ceecc489f238560253e298fe9392d480dd1fff51f77a0e6e45413c37fd0e54bbd7a898484a90228d69701d7304cf47a2c1d320e2fd8
+SHA512 (YAML-free-v1.320.0.tar.gz) = efc8d3a42d3935f992d8a156be925ae4688e2d2ae08557fd968ad00e5cbaf6ed46f619592fea8a38ceb3fd85b557b1caa1eb3a700b8f27938919ae79c64c221e
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-07-20 15:24 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-20 15:24 [rpms/perl-YAML] rawhide: Update to v1.320.0 (rhbz#2502797) Paul Howarth
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox