pkgsrc/devel/p5-PAR/Makefile
gls 4784b9c314 Update devel/p5-PAR to 1.005.
Includes a fix for CVE 2011-4114.

Upstream changes:

[Changes for 1.005 - Dec 2, 2011]
  - run all tests using a nonce PAR_TMPDIR (otherwise CPAN Testers
  goes crazy as top level /tmp/par-USER directories (or similar)
  from previous tests may now be considered "unsafe")

[Changes for 1.004 - Nov 30, 2011]
  - back out r1241: it causes errors in PAR::Packer's test suite
  - change "unsafe directory" error message to match the wording
  used by PAR::Packer
  - remove "debian" sub directory: it isn't released to CPAN and
  Debian will supply its own anyway
  - remove some cruft from MANIFEST.SKIP

[Changes for 1.003 - Nov 28, 2011]
  -  RT #69560/CVE-2011-4114: PAR packed files are extracted to unsafe
  and predictable temporary directories
  (Note: this bug was originally reported against PAR::Packer, but
  it applies to PAR as well)
  - create parent of cache directory (i.e. /tmp/par-USER) with mode 0700
  - if it already exists, make sure that (and bail out if not)
   - it's not a symlink
   - it's mode 0700
   - it's owned by USER
  - Fix a problem packing XML::LibXSLT on Windows (see the thread starting
  with http://www.nntp.perl.org/group/perl.par/2011/02/msg4919.html)
  - Die (with a hopefully useful message) if any error is encountered
  during an Archive::Zip extract operation
2011-12-04 20:52:25 +00:00

27 lines
912 B
Makefile

# $NetBSD: Makefile,v 1.17 2011/12/04 20:52:25 gls Exp $
#
DISTNAME= PAR-1.005
PKGNAME= p5-${DISTNAME}
CATEGORIES= devel
MASTER_SITES= ${MASTER_SITE_PERL_CPAN:=PAR/RSCHUPP/}
MAINTAINER= pkgsrc-users@NetBSD.org
HOMEPAGE= http://search.cpan.org/dist/PAR/
COMMENT= Cross-Platform Packaging and Debugging Tool
LICENSE= ${PERL5_LICENSE}
PKG_DESTDIR_SUPPORT= user-destdir
DEPENDS+= p5-Archive-Zip>=1:../../archivers/p5-Archive-Zip
DEPENDS+= {perl>=5.10.1,p5-AutoLoader>5.66}:../../devel/p5-AutoLoader
DEPENDS+= p5-IO-Compress>=2.017:../../devel/p5-IO-Compress
DEPENDS+= p5-Module-ScanDeps>=0.45:../../devel/p5-Module-ScanDeps
DEPENDS+= p5-Module-Signature>=0.35:../../security/p5-Module-Signature
DEPENDS+= p5-PAR-Dist>=0.32:../../devel/p5-PAR-Dist
PERL5_PACKLIST= auto/PAR/.packlist
PERL5_MODULE_TYPE= Module::Install::Bundled
.include "../../lang/perl5/module.mk"
.include "../../mk/bsd.pkg.mk"