开源软件构建与测试

_service:tar_scm:perl.spec Changed

@@ -24,7 +24,7 @@
 License:        (GPL+ or Artistic) and (GPLv2+ or Artistic) and MIT and UCD and Public Domain and BSD
 Epoch:          4
 Version:        %{perl_version}
-Release:        1
+Release:        2
 Summary:        A highly capable, feature-rich programming language
 Url:            https://www.perl.org/
 Source0:        https://www.cpan.org/src/5.0/%{name}-%{version}.tar.xz
@@ -80,9 +80,8 @@
 %package libs
 Summary:        The libraries for the perl
 License:        (GPL+ or Artistic) and HSRL and MIT and UCD
-Provides:       perl(:MODULE_COMPAT_5.34.0) perl(:VERSION) = 5.34.0
 Provides:       %perl_compat
-Provides:       perl(:VERSION) = %{perl_version} libperl.so.5.34()(64bit)
+Provides:       perl(:VERSION) = %{perl_version}
 Provides:       perl(:WITH_64BIT) perl(:WITH_ITHREADS) perl(:WITH_THREADS)
 Provides:       perl(:WITH_LARGEFILES) perl(:WITH_PERLIO) perl(unicore::Name)
 Provides:       perl(utf8_heavy.pl)
@@ -497,6 +496,9 @@
 %{_mandir}/man3/*
 
 %changelog
+* Fri Aug 25 2023 yangmingtai <yangmingtai@huawei.com> - 4:5.38.0-2
+- delete unused files and provides
+
 * Mon Jul 31 2023 yangmingtai <yangmingtai@huawei.com> - 4:5.38.0-1
 - update version to 5.38.0

_service:tar_scm:backport-CVE-2023-31484.patch Deleted

_service:tar_scm:backport-CVE-2023-31486.patch Deleted

@@ -1,84 +0,0 @@
-From 1490431e40e22052f75a0b3449f1f53cbd27ba92 Mon Sep 17 00:00:00 2001
-From: Dominic Hargreaves <dom@earth.li>
-Date: Thu, 21 May 2020 22:53:37 +0100
-Subject: PATCH Enable SSL by default in HTTP::Tiny
-
-HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN,
-has an insecure default TLS configuration where users must opt in to verify certificates.
-
-Reference: https://salsa.debian.org/perl-team/interpreter/perl/-/commit/1490431e40e22052f75a0b3449f1f53cbd27ba92.patch
-Conflict:NA
----
- cpan/HTTP-Tiny/lib/HTTP/Tiny.pm | 20 +++++++++-----------
- 1 file changed, 9 insertions(+), 11 deletions(-)
-
-diff --git a/cpan/HTTP-Tiny/lib/HTTP/Tiny.pm b/cpan/HTTP-Tiny/lib/HTTP/Tiny.pm
-index 5803e4599f01..5970b6e225f3 100644
---- a/cpan/HTTP-Tiny/lib/HTTP/Tiny.pm
-+++ b/cpan/HTTP-Tiny/lib/HTTP/Tiny.pm
-@@ -40,7 +40,7 @@ sub _croak { require Carp; Carp::croak(@_) }
- #pod * C<timeout> — Request timeout in seconds (default is 60) If a socket open,
- #pod   read or write takes longer than the timeout, an exception is thrown.
- #pod * C<verify_SSL> — A boolean that indicates whether to validate the SSL
--#pod   certificate of an C<https> — connection (default is false)
-+#pod   certificate of an C<https> — connection (default is true)
- #pod * C<SSL_options> — A hashref of C<SSL_*> — options to pass through to
- #pod   L<IO::Socket::SSL>
- #pod
-@@ -112,7 +112,7 @@ sub new {
-         max_redirect => 5,
-         timeout      => defined $args{timeout} ? $args{timeout} : 60,
-         keep_alive   => 1,
--        verify_SSL   => $args{verify_SSL} || $args{verify_ssl} || 0, # no verification by default
-+        verify_SSL   => $args{verify_SSL} // $args{verify_ssl} // 1, # verification by default
-         no_proxy     => $ENV{no_proxy},
-     };
- 
-@@ -1038,7 +1038,7 @@ sub new {
-         timeout          => 60,
-         max_line_size    => 16384,
-         max_header_lines => 64,
--        verify_SSL       => 0,
-+        verify_SSL       => 1,
-         SSL_options      => {},
-         %args
-     }, $class;
-@@ -1765,7 +1765,7 @@ C<timeout> — Request timeout in seconds (default is 60) If a socket open, read
- 
- =item *
- 
--C<verify_SSL> — A boolean that indicates whether to validate the SSL certificate of an C<https> — connection (default is false)
-+C<verify_SSL> — A boolean that indicates whether to validate the SSL certificate of an C<https> — connection (default is true)
- 
- =item *
- 
-@@ -2035,7 +2035,7 @@ Verification of server identity
- 
- =back
- 
--B<By default, HTTP::Tiny does not verify server identity>.
-+B<By default, HTTP::Tiny verifies server identity>.
- 
- Server identity verification is controversial and potentially tricky because it
- depends on a (usually paid) third-party Certificate Authority (CA) trust model
-@@ -2043,16 +2043,14 @@ to validate a certificate as legitimate.  This discriminates against servers
- with self-signed certificates or certificates signed by free, community-driven
- CA's such as L<CAcert.org|http://cacert.org>.
- 
--By default, HTTP::Tiny does not make any assumptions about your trust model,
--threat level or risk tolerance.  It just aims to give you an encrypted channel
--when you need one.
--
- Setting the C<verify_SSL> attribute to a true value will make HTTP::Tiny verify
- that an SSL connection has a valid SSL certificate corresponding to the host
- name of the connection and that the SSL certificate has been verified by a CA.
- Assuming you trust the CA, this will protect against a L<man-in-the-middle
--attack|http://en.wikipedia.org/wiki/Man-in-the-middle_attack>.  If you are
--concerned about security, you should enable this option.
-+attack|http://en.wikipedia.org/wiki/Man-in-the-middle_attack>.
-+
-+If you are not concerned about security, and this default causes
-+problems, you should disable this option.
- 
- Certificate verification requires a file containing trusted CA certificates.
-

Changes of Revision 2