CVS commit: pkgsrc/net/p5-Net-OAuth
"Thomas Klausner" <[email protected]>
| Newsgroups | gmane.os.netbsd.devel.pkgsrc.cvs |
|---|---|
| Message-ID | <[email protected]> |
Module Name: pkgsrc
Committed By: wiz
Date: Wed Aug 19 18:33:03 UTC 2026
Modified Files:
pkgsrc/net/p5-Net-OAuth: Makefile distinfo
Log Message:
p5-Net-OAuth: update to 0.33.
0.33 Mon 17 Aug 23:14:01 BST 2026
[Security]
- Restrict the verification algorithm to those specified in the allowed_signature_methods, which is
now required. THIS IS A BREAKING CHANGE.
See https://github.com/vurtdev/Net-OAuth/security/advisories/GHSA-c8rm-g5cm-4pf5 (CVE-2026-72889)
for more information.
- HMAC_SHA1 and HMAC_SHA256 signature keys cannot be blank.
- HMAC_SHA1, HMAC_SHA256 and PLAINTEXT signature verification now use constant-time comparison (CVE-2026-75589).
[Documentation]
- Updated the GitHub repository location, which moved before the version 0.32 release.
(The former location does redirect to the new location.)
- Removed CONTRIBUTING.md due to changes in the AI policy.
- Updated copyright year.
To generate a diff of this commit:
cvs rdiff -u -r1.28 -r1.29 pkgsrc/net/p5-Net-OAuth/Makefile
cvs rdiff -u -r1.9 -r1.10 pkgsrc/net/p5-Net-OAuth/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
(unnamed)
(text/x-diff, 1.5 KB)
Modified files:
Index: pkgsrc/net/p5-Net-OAuth/Makefile
diff -u pkgsrc/net/p5-Net-OAuth/Makefile:1.28 pkgsrc/net/p5-Net-OAuth/Makefile:1.29
--- pkgsrc/net/p5-Net-OAuth/Makefile:1.28 Sun Aug 16 15:24:31 2026
+++ pkgsrc/net/p5-Net-OAuth/Makefile Wed Aug 19 18:33:03 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.28 2026/08/16 15:24:31 wiz Exp $
+# $NetBSD: Makefile,v 1.29 2026/08/19 18:33:03 wiz Exp $
-DISTNAME= Net-OAuth-0.32
+DISTNAME= Net-OAuth-0.33
PKGNAME= p5-${DISTNAME}
CATEGORIES= net perl5
MASTER_SITES= ${MASTER_SITE_PERL_CPAN:=../../authors/id/R/RR/RRWO/}
Index: pkgsrc/net/p5-Net-OAuth/distinfo
diff -u pkgsrc/net/p5-Net-OAuth/distinfo:1.9 pkgsrc/net/p5-Net-OAuth/distinfo:1.10
--- pkgsrc/net/p5-Net-OAuth/distinfo:1.9 Sun Aug 16 15:24:31 2026
+++ pkgsrc/net/p5-Net-OAuth/distinfo Wed Aug 19 18:33:03 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.9 2026/08/16 15:24:31 wiz Exp $
+$NetBSD: distinfo,v 1.10 2026/08/19 18:33:03 wiz Exp $
-BLAKE2s (Net-OAuth-0.32.tar.gz) = a6a8ccba243437ff724b4e867964b899f1c40f59f52fcd4dd7fb9adaa4d876e0
-SHA512 (Net-OAuth-0.32.tar.gz) = 4fb48f6d210f62eec85694fd040b1593293b0035df659e6d5bec21a79155c6fbf3ffdd02766deda02833fbffc07eb3153e83fab517362bdb104ea0bf5d8d440f
-Size (Net-OAuth-0.32.tar.gz) = 32274 bytes
+BLAKE2s (Net-OAuth-0.33.tar.gz) = 431a728559925c1e7d076a346164176d9427a6d2942fa7e0f51fd14cb5f41caa
+SHA512 (Net-OAuth-0.33.tar.gz) = f2f9f122a68e64b54cd2892ac92d6443bd21a839b5caf689703d1d609dfb2f81e8a9076f099eb8bfae232cd2fd333b497951043028f7a3238ba3c2df1f367e4c
+Size (Net-OAuth-0.33.tar.gz) = 32999 bytes