[libyaml-libyaml-perl] 03/03: Merge tag 'debian/0.41-6'

Salvatore Bonaccorso carnil at debian.org
Sat Nov 29 07:45:12 UTC 2014


This is an automated email from the git hooks/post-receive script.

carnil pushed a commit to branch master
in repository libyaml-libyaml-perl.

commit a45a0957115b1f93aa7fc4db50a69e1c58d6ec38
Merge: 35a674d 4ddfbad
Author: Salvatore Bonaccorso <carnil at debian.org>
Date:   Sat Nov 29 08:44:21 2014 +0100

    Merge tag 'debian/0.41-6'
    
    tagging package libyaml-libyaml-perl version debian/0.41-6
    
    Conflicts:
    	debian/changelog

 debian/changelog                   |  9 +++++++++
 debian/patches/CVE-2014-9130.patch | 26 ++++++++++++++++++++++++++
 debian/patches/series              |  1 +
 3 files changed, 36 insertions(+)

diff --cc debian/changelog
index bfb3eca,a6d06ee..e2a321b
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,32 -1,12 +1,41 @@@
 +libyaml-libyaml-perl (0.52-1) UNRELEASED; urgency=medium
 +
 +  [ gregor herrmann ]
 +  TODO:
 +  - check patches. should be fine but the high amount of CVEs scares me
 +  - we have a lintian ftp-master autoreject problem:
 +    E: libyaml-libyaml-perl: embedded-library usr/lib/perl5/auto/YAML/XS/LibYAML/LibYAML.so: libyaml
 +    also http://bugs.debian.org/664224
 +    override or can we fix it?
 +    first try in branch gregoa/use-system-yaml
 +
 +  * New upstream releases 0.43, 0.44, 0.45.
 +  * Update copyright years. Drop information about removed files.
 +  * Refresh two patches. Refresh CVE-2014-2525.patch and libyaml-guard-
 +    against-overflows-in-indent-and-flow_level.patch, both have an offset of
 +    one line.
 +  * Install new CONTRIBUTING file.
 +
 +  [ Salvatore Bonaccorso ]
 +  * Update Vcs-Browser URL to cgit web frontend
 +
 +  [ gregor herrmann ]
 +  * Add debian/upstream/metadata
 +  * Imported upstream version 0.52
 +  * Declare compliance with Debian Policy 3.9.6.
 +  * Mark package as autopkgtest-able.
 +
 + -- gregor herrmann <gregoa at debian.org>  Fri, 10 Oct 2014 14:20:57 +0200
 +
+ libyaml-libyaml-perl (0.41-6) unstable; urgency=high
+ 
+   * Team upload.
+   * Add CVE-2014-9130.patch patch.
+     Fix CVE-2014-9130: assertion failure caused by wrapped strings.
+     (Closes: 771365)
+ 
+  -- Salvatore Bonaccorso <carnil at debian.org>  Sat, 29 Nov 2014 08:23:09 +0100
+ 
  libyaml-libyaml-perl (0.41-5) unstable; urgency=high
  
    * Team upload.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libyaml-libyaml-perl.git



More information about the Pkg-perl-cvs-commits mailing list