Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package perl-DBD-CSV for openSUSE:Factory checked in at 2026-06-27 18:07:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/perl-DBD-CSV (Old) and /work/SRC/openSUSE:Factory/.perl-DBD-CSV.new.11887 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-DBD-CSV" Sat Jun 27 18:07:43 2026 rev:42 rq:1361941 version:0.630.0 Changes: -------- --- /work/SRC/openSUSE:Factory/perl-DBD-CSV/perl-DBD-CSV.changes 2025-01-27 20:53:23.354021980 +0100 +++ /work/SRC/openSUSE:Factory/.perl-DBD-CSV.new.11887/perl-DBD-CSV.changes 2026-06-27 18:09:49.331535167 +0200 @@ -1,0 +2,12 @@ +Mon Jun 22 10:49:53 UTC 2026 - Tina Müller <[email protected]> + +- updated to 0.630.0 (0.63) + see /usr/share/doc/packages/perl-DBD-CSV/ChangeLog + + 0.63 - 2026-06-22, H.Merijn Brand + * It's 2026 + * New test for DBI-1.648 CVE fix + * Minor typo in doc + * Raise recommended versions for fixed CVE's + +------------------------------------------------------------------- Old: ---- DBD-CSV-0.62.tgz New: ---- DBD-CSV-0.63.tgz README.md _scmsync.obsinfo build.specials.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ perl-DBD-CSV.spec ++++++ --- /var/tmp/diff_new_pack.nxWefK/_old 2026-06-27 18:09:49.907554674 +0200 +++ /var/tmp/diff_new_pack.nxWefK/_new 2026-06-27 18:09:49.907554674 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-DBD-CSV # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,34 +18,35 @@ %define cpan_name DBD-CSV Name: perl-DBD-CSV -Version: 0.620.0 +Version: 0.630.0 Release: 0 -# 0.62 -> normalize -> 0.620.0 -%define cpan_version 0.62 +# 0.63 -> normalize -> 0.630.0 +%define cpan_version 0.63 License: Artistic-1.0 OR GPL-1.0-or-later Summary: DBI driver for CSV files URL: https://metacpan.org/release/%{cpan_name} Source0: https://cpan.metacpan.org/authors/id/H/HM/HMBRAND/%{cpan_name}-%{cpan_version}.tgz Source1: cpanspec.yml +Source100: README.md BuildArch: noarch BuildRequires: perl BuildRequires: perl-macros -BuildRequires: perl(DBD::File) >= 0.42 +BuildRequires: perl(DBD::File) >= 0.420 BuildRequires: perl(DBI) >= 1.628 BuildRequires: perl(SQL::Statement) >= 1.405 BuildRequires: perl(Test::More) >= 0.90 -BuildRequires: perl(Text::CSV_XS) >= 1.01 -Requires: perl(DBD::File) >= 0.42 +BuildRequires: perl(Text::CSV_XS) >= 1.10 +Requires: perl(DBD::File) >= 0.420 Requires: perl(DBI) >= 1.628 Requires: perl(SQL::Statement) >= 1.405 Requires: perl(Test::More) >= 0.9 -Requires: perl(Text::CSV_XS) >= 1.01 +Requires: perl(Text::CSV_XS) >= 1.10 Provides: perl(DBD::CSV) = %{version} %undefine __perllib_provides -Recommends: perl(DBD::File) >= 0.44 -Recommends: perl(DBI) >= 1.643 +Recommends: perl(DBD::File) >= 0.450 +Recommends: perl(DBI) >= 1.649 Recommends: perl(SQL::Statement) >= 1.414 -Recommends: perl(Text::CSV_XS) >= 1.590 +Recommends: perl(Text::CSV_XS) >= 1.620 %{perl_requires} %description ++++++ DBD-CSV-0.62.tgz -> DBD-CSV-0.63.tgz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/DBD-CSV-0.62/ChangeLog new/DBD-CSV-0.63/ChangeLog --- old/DBD-CSV-0.62/ChangeLog 2025-01-13 13:04:16.000000000 +0100 +++ new/DBD-CSV-0.63/ChangeLog 2026-06-22 11:57:56.000000000 +0200 @@ -1,3 +1,9 @@ +0.63 - 2026-06-22, H.Merijn Brand + * It's 2026 + * New test for DBI-1.648 CVE fix + * Minor typo in doc + * Raise recommended versions for fixed CVE's + 0.62 - 2025-01-13, H.Merijn Brand * doc should not be part of test diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/DBD-CSV-0.62/META.json new/DBD-CSV-0.63/META.json --- old/DBD-CSV-0.62/META.json 2025-01-13 13:04:49.000000000 +0100 +++ new/DBD-CSV-0.63/META.json 2026-06-22 11:58:20.000000000 +0200 @@ -1,94 +1,91 @@ { + "generated_by" : "Author", + "release_status" : "stable", + "author" : [ + "Jochen Wiedmann", + "Jeff Zucker", + "H.Merijn Brand <[email protected]>", + "Jens Rehsack <[email protected]>" + ], "meta-spec" : { - "version" : 2, - "url" : "http://search.cpan.org/perldoc?CPAN::Meta::Spec"; - }, - "name" : "DBD-CSV", - "resources" : { - "repository" : { - "web" : "https://github.com/perl5-dbi/DBD-CSV";, - "url" : "https://github.com/perl5-dbi/DBD-CSV";, - "type" : "git" + "url" : "http://search.cpan.org/perldoc?CPAN::Meta::Spec";, + "version" : 2 }, - "license" : [ - "http://dev.perl.org/licenses/"; - ], - "bugtracker" : { - "web" : "https://github.com/perl5-dbi/DBD-CSV/issues"; - } - }, - "provides" : { - "DBD::CSV" : { - "version" : "0.62", - "file" : "lib/DBD/CSV.pm" - } - }, - "dynamic_config" : 1, "prereqs" : { "configure" : { + "recommends" : { + "ExtUtils::MakeMaker" : "7.22" + }, "suggests" : { - "ExtUtils::MakeMaker" : "7.70" - }, + "ExtUtils::MakeMaker" : "7.78" + }, "requires" : { "ExtUtils::MakeMaker" : "0", "DBI" : "1.628" + } }, - "recommends" : { - "ExtUtils::MakeMaker" : "7.22" - } - }, "runtime" : { - "suggests" : { - "DBI" : "1.646" - }, "recommends" : { - "DBD::File" : "0.44", "SQL::Statement" : "1.414", - "DBI" : "1.643", - "Text::CSV_XS" : "1.59" - }, + "DBD::File" : "0.45", + "DBI" : "1.649", + "Text::CSV_XS" : "1.62" + }, "requires" : { + "perl" : "5.008001", "DBD::File" : "0.42", "SQL::Statement" : "1.405", - "DBI" : "1.628", - "perl" : "5.008001", - "Text::CSV_XS" : "1.01" - } - }, - "test" : { - "recommends" : { - "Encode" : "3.12", - "Test::More" : "1.302207" + "Text::CSV_XS" : "1.01", + "DBI" : "1.628" + } }, + "build" : { + "requires" : { + "Config" : "0" + } + }, + "test" : { "requires" : { - "Test::Harness" : "0", - "Test::More" : "0.90", "charnames" : "0", "Cwd" : "0", - "Encode" : "0" - }, + "Encode" : "0", + "Test::Harness" : "0", + "Test::More" : "0.90" + }, + "recommends" : { + "Test::More" : "1.302222", + "Encode" : "3.12" + }, "suggests" : { - "Encode" : "3.21" + "Encode" : "3.24" + } } }, - "build" : { - "requires" : { - "Config" : "0" + "resources" : { + "bugtracker" : { + "web" : "https://github.com/perl5-dbi/DBD-CSV/issues"; + }, + "repository" : { + "url" : "https://github.com/perl5-dbi/DBD-CSV";, + "web" : "https://github.com/perl5-dbi/DBD-CSV";, + "type" : "git" + }, + "license" : [ + "http://dev.perl.org/licenses/"; + ] + }, + "provides" : { + "DBD::CSV" : { + "file" : "lib/DBD/CSV.pm", + "version" : "0.63" } - } - }, + }, + "x_installdirs" : "site", + "dynamic_config" : 1, + "version" : "0.63", "license" : [ "perl_5" - ], - "author" : [ - "Jochen Wiedmann", - "Jeff Zucker", - "H.Merijn Brand <[email protected]>", - "Jens Rehsack <[email protected]>" - ], - "abstract" : "DBI driver for CSV files", - "generated_by" : "Author", - "version" : "0.62", - "x_installdirs" : "site", - "release_status" : "stable" -} + ], + "name" : "DBD-CSV", + "abstract" : "DBI driver for CSV files" + } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/DBD-CSV-0.62/META.yml new/DBD-CSV-0.63/META.yml --- old/DBD-CSV-0.62/META.yml 2025-01-13 13:04:49.000000000 +0100 +++ new/DBD-CSV-0.63/META.yml 2026-06-22 11:58:20.000000000 +0200 @@ -1,47 +1,47 @@ ---- +--- abstract: DBI driver for CSV files -author: +author: - Jochen Wiedmann - Jeff Zucker - H.Merijn Brand <[email protected]> - Jens Rehsack <[email protected]> -build_requires: - Config: 0 -configure_requires: +build_requires: + Config: '0' +configure_requires: DBI: '1.628' - ExtUtils::MakeMaker: 0 + ExtUtils::MakeMaker: '0' dynamic_config: 1 -generated_by: Author, CPAN::Meta::Converter version 2.150010 +generated_by: Author, CPAN::Meta::Converter version 2.150013 license: perl -meta-spec: +meta-spec: url: http://module-build.sourceforge.net/META-spec-v1.4.html version: '1.4' name: DBD-CSV -provides: - DBD::CSV: +provides: + DBD::CSV: file: lib/DBD/CSV.pm - version: '0.62' -recommends: - DBD::File: '0.44' - DBI: '1.643' + version: '0.63' +recommends: + DBD::File: '0.45' + DBI: '1.649' Encode: '3.12' SQL::Statement: '1.414' - Test::More: '1.302207' - Text::CSV_XS: '1.59' -requires: - Cwd: 0 + Test::More: '1.302222' + Text::CSV_XS: '1.62' +requires: + Cwd: '0' DBD::File: '0.42' DBI: '1.628' - Encode: 0 + Encode: '0' SQL::Statement: '1.405' - Test::Harness: 0 + Test::Harness: '0' Test::More: '0.90' Text::CSV_XS: '1.01' - charnames: 0 + charnames: '0' perl: '5.008001' -resources: +resources: bugtracker: https://github.com/perl5-dbi/DBD-CSV/issues license: http://dev.perl.org/licenses/ repository: https://github.com/perl5-dbi/DBD-CSV -version: '0.62' +version: '0.63' x_installdirs: site diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/DBD-CSV-0.62/Makefile.PL new/DBD-CSV-0.63/Makefile.PL --- old/DBD-CSV-0.62/Makefile.PL 2025-01-13 13:03:59.000000000 +0100 +++ new/DBD-CSV-0.63/Makefile.PL 2026-01-09 13:09:23.000000000 +0100 @@ -1,6 +1,6 @@ # -*- perl -*- -# Copyright (c) 2009-2025 H.Merijn Brand +# Copyright (c) 2009-2026 H.Merijn Brand require 5.008001; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/DBD-CSV-0.62/README new/DBD-CSV-0.63/README --- old/DBD-CSV-0.62/README 2025-01-13 12:27:34.000000000 +0100 +++ new/DBD-CSV-0.63/README 2026-01-09 13:09:28.000000000 +0100 @@ -9,7 +9,7 @@ values). Copying - Copyright (C) 2009-2025 by H.Merijn Brand + Copyright (C) 2009-2026 by H.Merijn Brand Copyright (C) 2004-2009 by Jeff Zucker Copyright (C) 1998-2004 by Jochen Wiedmann diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/DBD-CSV-0.62/SECURITY.md new/DBD-CSV-0.63/SECURITY.md --- old/DBD-CSV-0.62/SECURITY.md 2025-01-13 12:31:42.000000000 +0100 +++ new/DBD-CSV-0.63/SECURITY.md 2026-01-25 11:47:59.000000000 +0100 @@ -1,21 +1,20 @@ # Security Policy for the DBD::CSV distribution. -Report issues via email at: Jochen Wiedmann. +Report security issues by email to Jochen Wiedmann. - -This is the Security Policy for the Perl DBD::CSV distribution. +This is the Security Policy for DBD::CSV. The latest version of the Security Policy can be found in the [git repository for DBD::CSV](https://github.com/perl5-dbi/DBD-CSV). This text is based on the CPAN Security Group's Guidelines for Adding -a Security Policy to Perl Distributions (version 1.0.0) +a Security Policy to Perl Distributions (version 1.3.0) https://security.metacpan.org/docs/guides/security-policy-for-authors.html # How to Report a Security Vulnerability -Security vulnerabilities can be reported by e-mail to the current -project maintainers at Jochen Wiedmann. +Security vulnerabilities can be reported to the current DBD::CSV +maintainers by email to Jochen Wiedmann. Please include as many details as possible, including code samples or test cases, so that we can reproduce the issue. Check that your @@ -62,13 +61,16 @@ Any security vulnerabilities in DBD::CSV are covered by this policy. +Security vulnerabilities in versions of any libraries that are +included in DBD::CSV are also covered by this policy. + Security vulnerabilities are considered anything that allows users to execute unauthorised code, access unauthorised resources, or to have an adverse impact on accessibility or performance of a system. -Security vulnerabilities in upstream software (embedded libraries, -prerequisite modules or system libraries, or in Perl), are not -covered by this policy unless they affect DBD::CSV, or DBD::CSV can +Security vulnerabilities in upstream software (prerequisite modules +or system libraries, or in Perl), are not covered by this policy +unless they affect DBD::CSV, or DBD::CSV can be used to exploit vulnerabilities in them. Security vulnerabilities in downstream software (any software that diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/DBD-CSV-0.62/cpanfile new/DBD-CSV-0.63/cpanfile --- old/DBD-CSV-0.62/cpanfile 2025-01-13 13:04:49.000000000 +0100 +++ new/DBD-CSV-0.63/cpanfile 2026-06-22 11:58:20.000000000 +0200 @@ -3,12 +3,10 @@ requires "SQL::Statement" => "1.405"; requires "Text::CSV_XS" => "1.01"; -recommends "DBD::File" => "0.44"; -recommends "DBI" => "1.643"; +recommends "DBD::File" => "0.45"; +recommends "DBI" => "1.649"; recommends "SQL::Statement" => "1.414"; -recommends "Text::CSV_XS" => "1.59"; - -suggests "DBI" => "1.646"; +recommends "Text::CSV_XS" => "1.62"; on "configure" => sub { requires "DBI" => "1.628"; @@ -16,7 +14,7 @@ recommends "ExtUtils::MakeMaker" => "7.22"; - suggests "ExtUtils::MakeMaker" => "7.70"; + suggests "ExtUtils::MakeMaker" => "7.78"; }; on "build" => sub { @@ -31,7 +29,7 @@ requires "charnames"; recommends "Encode" => "3.12"; - recommends "Test::More" => "1.302207"; + recommends "Test::More" => "1.302222"; - suggests "Encode" => "3.21"; + suggests "Encode" => "3.24"; }; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/DBD-CSV-0.62/lib/Bundle/DBD/CSV.pm new/DBD-CSV-0.63/lib/Bundle/DBD/CSV.pm --- old/DBD-CSV-0.62/lib/Bundle/DBD/CSV.pm 2025-01-13 12:37:52.000000000 +0100 +++ new/DBD-CSV-0.63/lib/Bundle/DBD/CSV.pm 2026-06-22 11:56:08.000000000 +0200 @@ -21,15 +21,15 @@ =head1 CONTENTS -DBI 1.646 +DBI 1.649 -Text::CSV_XS 1.59 +Text::CSV_XS 1.62 SQL::Statement 1.414 -DBD::File 0.44 +DBD::File 0.45 -DBD::CSV 0.62 +DBD::CSV 0.63 =head1 DESCRIPTION @@ -44,7 +44,7 @@ =head1 COPYRIGHT AND LICENSE -Copyright (C) 2009-2025 by H.Merijn Brand +Copyright (C) 2009-2026 by H.Merijn Brand Copyright (C) 2004-2009 by Jeff Zucker Copyright (C) 1998-2004 by Jochen Wiedmann diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/DBD-CSV-0.62/lib/DBD/CSV.pm new/DBD-CSV-0.63/lib/DBD/CSV.pm --- old/DBD-CSV-0.62/lib/DBD/CSV.pm 2025-01-13 12:37:15.000000000 +0100 +++ new/DBD-CSV-0.63/lib/DBD/CSV.pm 2026-06-12 16:40:26.000000000 +0200 @@ -29,7 +29,7 @@ our @ISA = qw( DBD::File ); -our $VERSION = "0.62"; +our $VERSION = "0.63"; our $ATTRIBUTION = "DBD::CSV $DBD::CSV::VERSION by H.Merijn Brand"; our $err = 0; # holds error code for DBI::err @@ -1252,7 +1252,7 @@ The module is using flock () internally. However, this function is not available on some platforms. Use of flock () is disabled on MacOS and Windows 95: There's no locking at all (perhaps not so important on -these operating systems, as they are for single users anyways). +these operating systems, as they are for single users anyway). =back @@ -1338,7 +1338,7 @@ =head1 COPYRIGHT AND LICENSE -Copyright (C) 2009-2025 by H.Merijn Brand +Copyright (C) 2009-2026 by H.Merijn Brand Copyright (C) 2004-2009 by Jeff Zucker Copyright (C) 1998-2004 by Jochen Wiedmann diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/DBD-CSV-0.62/t/70_csv.t new/DBD-CSV-0.63/t/70_csv.t --- old/DBD-CSV-0.62/t/70_csv.t 2018-03-24 11:19:42.000000000 +0100 +++ new/DBD-CSV-0.63/t/70_csv.t 2026-05-28 10:04:42.000000000 +0200 @@ -3,6 +3,7 @@ use strict; use warnings; use Test::More; +use File::Spec; BEGIN { use_ok ("DBI"); } do "./t/lib.pl"; @@ -85,12 +86,33 @@ # Check, whether the csv_tables->{$tbl}{file} attribute works like (my $def4 = TableDefinition ($tbl4, @tbl_def), qr{^create table $tbl4}i, "table definition"); -ok ($dbh->{csv_tables}{$tbl4}{file} = DbFile ($tbl4), "set table/file"); +{ my $dbf4 = DbFile ($tbl4); + my $dbd4 = DbDir (); + + $dbh->{f_dir_search} = [ $dbd4 ]; + ok ($dbh->{csv_tables}{$tbl4}{file} = $dbf4, "set table/file"); + } ok ($dbh->do ($def4), "create table"); ok (-f DbFile ($tbl4), "does exists"); ok ($dbh->do ("drop table $tbl4"), "drop table"); +if ($DBI::VERSION ge "1.648") { + ok (my $tbl5 = FindNewTable ($dbh), "find new test table"); + my $dir5 = File::Spec->catdir (DbDir (), "not-in-scope"); + mkdir $dir5; + ok (my $dbf5 = File::Spec->catdir ($dir5, $tbl5), "in bad location"); + ok (!-f $dbf5, "does not exist"); + ok ($dbh->{csv_tables}{$tbl5}{file} = $dbf5, "set to illegal location"); + { my @d; + local $SIG{__DIE__} = sub { push @d => @_ }; + local $dbh->{PrintError} = 0; + eval { $dbh->do ("create table $tbl5 (x char)"); }; + like ("@d", qr{is unsafe and not allowed}, "unsafe caught"); + }; + rmdir $dir5; + } + ok ($dbh->disconnect, "disconnect"); undef $dbh; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/DBD-CSV-0.62/t/lib.pl new/DBD-CSV-0.63/t/lib.pl --- old/DBD-CSV-0.62/t/lib.pl 2018-04-05 08:37:23.000000000 +0200 +++ new/DBD-CSV-0.63/t/lib.pl 2026-05-28 09:39:22.000000000 +0200 @@ -116,8 +116,7 @@ my $testtable = "testaa"; - sub FindNewTable - { + sub FindNewTable { my $dbh = shift; my @tables = defined $listTablesHook ? $listTablesHook->($dbh) ++++++ README.md ++++++ ## Build Results Current state of perl in openSUSE:Factory is  The current state of perl in the devel project build (devel:languages:perl)  ++++++ _scmsync.obsinfo ++++++ mtime: 1782125393 commit: 77f7001a74380f49cd524f58470ce1d4c8ec9dce341756930fdca2f878dfc245 url: https://src.opensuse.org/perl/perl-DBD-CSV revision: 77f7001a74380f49cd524f58470ce1d4c8ec9dce341756930fdca2f878dfc245 projectscmsync: https://src.opensuse.org/perl/_ObsPrj ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-06-22 12:49:53.000000000 +0200 @@ -0,0 +1 @@ +.osc
