Re: [BLFS Trac] #23486: Perl Module Dependencies Update - Business-ISBN-Data-20260617.001 Clone-0.50 DateTime-TimeZone-2.68 HTTP-Message-7.02 List-SomeUtils-XS-0.59 Role-Tiny-2.002005 Test-Simple-1.302222 TimeDate-2.35 WWW-RobotRules-6.03

#23486: Perl Module Dependencies Update - Business-ISBN-Data-20260617.001
Clone-0.50 DateTime-TimeZone-2.68 HTTP-Message-7.02 List-SomeUtils-XS-0.59
Role-Tiny-2.002005 Test-Simple-1.302222 TimeDate-2.35 WWW-RobotRules-6.03
-----------------------------+------------------------------
 Reporter:  Douglas R. Reno  |       Owner:  Douglas R. Reno
     Type:  enhancement      |      Status:  assigned
 Priority:  normal           |   Milestone:  13.1
Component:  BOOK             |     Version:  git
 Severity:  normal           |  Resolution:
 Keywords:                   |
-----------------------------+------------------------------
Comment (by Douglas R. Reno):

 **Business-ISBN-Data**

 {{{
 20260617.001 2026-06-21T17:26:07Z
         * data update for 2026-06-17
 20260613.001 2026-06-13T07:15:29Z
         * data update for 2026-06-13
 20260611.001 2026-06-11T15:19:31Z
         * data update for 2026-06-11
 20260604.001 2026-06-04T10:03:44Z
         * data update for 2026-06-04
 20260523.001 2026-05-23T07:46:14Z
         * data update for 2026-05-23
 20260522.001 2026-05-22T20:56:02Z
         * data update for 2026-05-22
 20260521.001 2026-05-21T22:11:05Z
         * data update for 2026-05-21
 20260519.001 2026-05-19T05:24:44Z
         * data update for 2026-05-19
 20260508.001 2026-05-08T20:41:04Z
         * data update for 2026-05-08
 20260502.001 2026-05-04T14:22:06Z
         * data update for 2026-05-02
 20260424.001 2026-04-24T14:49:48Z
         * data update for 2026-04-24
 20260416.001 2026-04-16T14:26:58Z
         * stop unintended autovivification of ISBN_RANGE_MESSAGE (#236)
 20260411.001 2026-04-11T09:00:38Z
         * data update for 2026-04-11
 20260410.001 2026-04-10T09:43:45Z
         * data update for 2026-04-10
 20260408.001 2026-04-08T04:56:36Z
         * data update for 2026-04-08
 20260403.001 2026-04-03T05:36:28Z
         * data update for 2026-04-03
 20260331.001 2026-04-01T23:11:44Z
         * data update for 2026-03-31
 20260328.001 2026-03-28T07:02:06Z
         * data update for 2026-03-26
 20260325.001 2026-03-25T08:53:25Z
         * data update for 2026-03-25
 20260321.001 2026-03-22T17:08:17Z
         * data update for 2026-03-17
 20260317.001 2026-03-17T10:46:47Z
         * data update for 2026-03-17
 }}}

 **Clone**

 {{{
 0.50 2026-03-28 atoomic
   - fix: deep-copy HVs past MAX_DEPTH instead of aliasing (GH #93)
   - fix: strip macOS xattrs from dist directory before packaging
   - cleanup: remove unreachable break and empty magic_ref if-body in
 Clone.xs
   - docs: update MAX_DEPTH limits to reflect actual platform values
   - docs: add SECURITY.md policy for vulnerability reporting
   - Prefer using gtar in Makefile.PL
 0.49 2026-03-24 21:23:44 atoomic
   - fix: exclude macOS extended attributes from dist tarball
   - fix: suppress DBI STDERR noise in t/13-io-handle.t (GH #82)
   - fix: skip DBI fork tests on Windows
   - fix: remove spurious warn output in t/03-scalar.t
   - Add AI_POLICY.md documenting AI-assisted workflow
 0.48 2026-03-02 16:01:53 atoomic
   - perf: optimize hot paths in Clone.xs
   - fix: replace subtest with SKIP/bare blocks to avoid Test2 warnings
   - fix: don't require MGf_DUP flag for ext magic duplication
   - fix: lower MAX_DEPTH to 4000 to prevent SEGV on CPAN smokers
   - fix: use platform-adaptive depth in t/10-deep_recursion.t for Windows
   - Fix t/10-deep_recursion.t for Windows
   - Fix C89 declaration-after-statement violations in Clone.xs
   - Fix deep recursion stack overflow on Windows
   - Fix cloning of Math::BigInt::GMP objects (fixes #16)
   - Fix cloning of threads::shared data structures (fixes #18)
   - Add thread safety test for Class::DBI-like patterns (fixes #14)
   - Add comprehensive documentation with examples and limitations
   - Improve README.md structure and installation instructions
   - Add DBI + DBD::SQLite as recommended test dependencies
   - Fix weakened reference cloning via deferred weakening (fixes #15)
   - Fix memory leak when cloning non-existent hash values (fixes #42)
   - Fix segfault when cloning DBI database handles (fixes #27)
   - Rewrite t/09-circular.t to fix SEGV on CPAN Testers (fixes #54)
   - Replace static recursion_depth with stack parameter
   - Fix C++ style comments in Clone.xs for C89 portability
   - Fix memory leak in Clone.xs (fixes #42)
   - Allow a MAX_DEPTH recursion of 32000 calls (fixes #19 aka RT97525)
   - Rename tests with more readable names
   - Remove TODO from cow test
 }}}

 **DateTime-TimeZone**

 {{{
 2.68    2026-04-23
 - This release is based on version 2026b of the Olson database. This
 release includes contemporary
   changes for British Columbia, CA.
 2.67    2026-03-05
 - This release is based on version 2026a of the Olson database. This
 release includes contemporary
   changes for Moldova.
 }}}

 **HTTP-Message**

 {{{
 7.02      2026-06-05 23:28:36Z
     - now handling HTTP method '0' (GH#211) (Karen Etheridge)
 }}}

 **List-SomeUtils-XS**

 {{{
 0.59     2026-06-22
 - Fix a heap buffer overflow in the pairwise function when it would return
 a very large
 list. Fixed by Paul Johnson.
 }}}

 **Role-Tiny**

 {{{
 2.002005 - 2026-05-17
   - split role initialization from setting pragmas to allow more
 flexibility
     for subclasses
   - ensure consistent internal handling of Class::C3 vs mro
   - reduced Exporter dependency to 0 (any version)
 }}}

 **Test-Simple**

 {{{
 1.302222  2026-06-15 10:18:50-07:00 America/Los_Angeles
     - Add missing Changes entry
     - Fix test that fails on some windows versions due to path seperators
 1.302221  2026-06-13 22:12:23-07:00 America/Los_Angeles
     - EBDIC fixes
 1.302220  2026-06-09 15:49:19-07:00 America/Los_Angeles
     - Add [PruneCruft] to dist.ini so build artifacts (blib/, pm_to_blib,
 MYMETA.*) no
 longer leak into release tarballs.
     - Remove Net::BitTorrent from broken list
     - Amend tests to adapt to more accurate line number reporting in core
 (#1080)
 }}}

 **TimeDate**

 {{{
 2.35      2026-03-20 21:44:45-06:00 America/Denver
 2.34_03   2026-03-18 22:12:43-06:00 America/Denver (TRIAL RELEASE)
   * test: document and pin RT#84075/GH#12 fix in regression suite
   * fix: add NST, NFT, and NDT (Newfoundland) timezone support
   * fix: add ICT and PHT timezone support
   * fix: restore rebase regressions and clarify first-century limitation
   * fix: normalize two-digit years in str2time to avoid Time::Local
 windowing mismatch
   * fix: use standard 2-letter German weekday abbreviations
   * fix: detect timegm/timelocal overflow for far-future dates (RT#88777)
   * test: add regression tests for RT#88777 (negative epoch for far-future
 dates)
   * fix: use stored epoch in format_Z/format_z to fix DST fall-back
 timezone name
   * fix: document MSK timezone history and add regression test (RT#98949)
   * fix: strftime %s with timezone now returns correct epoch (RT#52387)
   * test: add POD validity regression test for RT#53557
   * fix: include day in year-inference for dates without an explicit year
   * fix: document MSK timezone history and add regression test (RT#81350)
   * ci: install Pod::Checker via cpm in Linux CI
   * docs: add SECURITY.md with vulnerability reporting policy
   * test: add regression tests for RT#57800 / GH#3 (numeric m/d/yyyy
 pre-1970 dates)
   * fix: normalize year offset for dates before 1901 in strptime
 (RT#106105)
   * fix: reject timezone-only inputs in strptime (RT#70650)
   * test: add failing tests for RT#70650 (ludicrous date parsing)
   * fix: prevent negative month from strptime for 6-digit inputs like
 '199001'
   * test: add Portuguese format and round-trip tests from PR #61
   * fix: treat number > 31 after month name as year, not day (GH#2)
   * fix: translate timezone abbreviations (%Z) in language-specific
 formatting
   * fix: tz_name() offset in seconds was treated as minutes (RT#59298)
   * docs: fix ISO-8601 example date in Date::Parse POD (issue #6)
   * feat: add optional LANGUAGE parameter to time2str()
   * feat: allow str2time() to accept a custom reference epoch (RT#64789)
   * docs: clarify strptime() return format for ISO 8601 dates (issue #44)
   * feat: add Portuguese language module
   * fix: prefer CEST over MEST as canonical Central European Summer Time
 name
   * fix: add ICT and PHT timezone abbreviations to Time::Zone (RT#123247)
   * fix: standardize Greek.pm to use native Unicode instead of \x{}
 escapes
   * test: add regression test for RT#105031 / GH#17 (1965-12-31 maps to
 2065)
   * fix: declare Carp as runtime prerequisite in Makefile.PL
   * fix: infer current year for future months when no year given
 (RT#92611)
   * test: add regression tests for RT#53413 (4-digit year mangling)
   * fix: handle leap day in year-only date parsing test
   * fix: support IANA timezone names in tz2zone and tz_offset (RT#76968)
   * fix: preserve comma as ISO 8601 decimal separator in strptime
   * fix: add French day ordinal suffix in format_o
   * fix: make tz_name tests deterministic across DST transitions
 2.34      2026-02-27 17:00:48-07:00 America/Denver
   * doc: Increase POD coverage
   * refactor: extract _build_lookups helper, remove hash-building
 duplication
   * fix: correct language data bugs and minor code review fixes
   * Fixup utf8 and add tests
   * Use Dist::Zilla for the distro
   * rebase: apply review feedback on #52
   * fix: uncomment Indian Standard timezone (IST)
   * feat: support boost C++ timestamp format (%Y-%b-%d %H:%M:%S.%f)
   * fix: correct typos across documentation and comments
   * stop using use vars
   * rebase: apply review feedback on #49
   * Remove limitation from Date::Parse
   * Create Arabic.pm
 }}}

 **WWW-RobotRules**

 {{{
 6.03      2026-05-23 02:23:28Z
     - Doing a proper version bump.
 6.02      2026-05-21 14:45:27Z
     - WWW::RobotRules::AnyDBM_File::agent() no longer truncates the on-
 disk
       cache through an untie/tie(O_TRUNC) sequence. Stale-data reset now
 goes
       through the tied-hash CLEAR, eliminating a symlink-follow race that
 a
       local attacker with write access to the cache directory could
 exploit
       to overwrite arbitrary files writable by the crawler user.
     - The on-disk cache file mode has been tightened from 0640 to 0600.
     - t/rules-dbm.t has been hardened against symlink attacks on its
 tempfile
       during package builds.
     - A new SECURITY CONSIDERATIONS POD section documents the residual
       caller-trust requirement: the constructor's tie still follows
 symlinks
       because AnyDBM_File cannot portably plumb O_NOFOLLOW, so the caller
       must store the cache file in a directory writable only by the user
       that runs the code.
     - References: CWE-377, CWE-378, CWE-379.
 }}}
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23486#comment:3>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page