cpan-audit

cpan-audit - CPAN-Audit-20220817.001

Published by github-actions[bot] about 2 years ago

Revision history for Perl extension CPAN-Audit

20220817.001 2022-08-18T22:27:26Z
* Added the --exclude-file option to cpan-audit (Graham TerMarsch)
* No database updates just yet as we straighten out some things in
cpan-security-advisory

20220729.001 2022-07-29T06:29:54Z
* Added feature to exclude reports, mostly for those persistent
vulnerabilities, such as File::Temp, that won't go away.
* Added a freshness check. You can check if your database is
old.
* There's no database update in this release. That's coming soon.

20220713.001_001 2022-07-15T16:38:39Z
* Try out a way to exclude some reports (say, like File::Temp)
from Graham TerMarsch (Github #5). This feature might change.
* No database updates in this release.

20220708.001 2022-07-08T08:51:14Z
* Many more reports (thanks to Robert Rothenberg)

20220705.001 2022-07-05T16:44:45Z
* check for simple "freshness" of DB with cpan-audit -f
* weekly update for the data - too many additions to list (thanks
to Robert Rothenberg)

20220629.003 2022-06-29T17:56:53Z
* This is the same as the last release, where I forgot to update the
version in CPAN::Audit to match that in CPAN::Audit::DB.

20220627.003 2022-06-29T15:44:34Z
* Updates for CPANSA-App-revealup, Mozilla-CA, Plack-Middleware-StaticShared,
and CPANSA-Socket (Robert Rothenberg)
* Starting to track which problems are embedded, non-Perl libraries
(Robert Rothenberg)
* The lib/CPAN/Audit/DB.pm file is now GPG-signed, although we don't do
anything with that just yet. See GPG_README.md.
* There are several discussions on GitHub where people can note their
preferences on future development.

20220625.001 2022-06-25T19:44:05Z
* Updates to File::Slurp and JavaScript::Duktape(::XS)?
* New reports for Crypt

20220624.001 2022-06-25T00:35:07Z
* reports for JavaScript-Duktape-XS, File-Slurp, RPC-XML, CBOX-XS,
IPC-Run, XML-Simple, Sys-Syslog, WWW-Mechanize, LWP, Imager, GD,
CryptX, Mojolicious, all from Robert Rothenberg.

20220622.002 2022-06-22T23:33:43Z
* I put the docs in the wrong file!

20220622.001 2022-06-22T20:59:18Z
* Advisories for Plack, DBD::SQLite from Robert Rothenberg
* Refactored and documented util/generated - can now output JSON,
although that probably isn't useful yet

20220620.001 2022-06-21T03:14:25Z
* Add CVE-2020-8927 for IO-Compress-Brotli (Robert Rothenberg)
briandfoy/cpan-security-advisory#18
* Fix to perl versions so they don't appear as if they are in
the future (#4)

20220613.001 2022-06-13T18:10:47Z
* Fix DB for Perl versions by specify all versions as semantic versions
(noted by Robert Rothenberg)

20220611 2022-06-12T22:58:50Z
* Use GNU tar instead of bsdtar. Upgrading macOS apparently breaks
the established way of avoiding weird Mac tarballs.
* Added a couple of ancient security reports to CPANSA.

20220608 2022-06-08T15:08:53Z
* Update for the latest CVEs
* Now also tracks CVEs in perl too
* now maintained by brian d foy

0.15 2019-03-09T09:47:36Z

- regenerate database fixing Plack-Middleware-Session distribution name

0.14 2019-01-26T10:23:21Z

[ADVISORIES]
CPANSA-Dancer2
CPANSA-HTTP-Session2
CPANSA-Plack-Middleware-Session-Cookie

0.13 2018-11-22T20:38:09Z

- --no-corelist option by MCRayRay
- test fixes

0.12 2018-11-11T19:43:25Z

- require Module::CoreList latest version

0.11 2018-11-11T18:57:53Z

- check core modules by James Raspass

0.10 2018-11-07T20:17:30Z

- --quiet option
- small refactoring
- require the latest version of Pod::Usage

0.09 2018-11-05T21:17:35Z

- do not hide db from pause (#7)

0.08 2018-10-17T18:10:41Z

[ADVISORIES]
- CPANSA-Net-DNS
- CPANSA-PAR
- CPANSA-PAR-Packer
- CPANSA-RT-Authen-ExternalAuth
- CPANSA-Tk
- CPANSA-UI-Dialog (updated)
- CPANSA-XML-LibXML

0.07 2018-10-16T21:37:20Z

- test fixes

0.06 2018-10-16T19:19:22Z

- use name instead of fullname
- fix installed modules discovery

0.05 2018-10-15T19:36:39Z

[ADVISORIES]
- CPANSA-MHonArc
- CPANSA-Module-Signature
- CPANSA-libapreq2
- CPANSA-mod_perl
- CPANSA-Compress-Raw-Bzip2
- CPANSA-Compress-Raw-Zlib

[IMPROVEMENTS]
- kritika.io and metacpan badges

0.04 2018-10-14T10:56:27Z

[FEATURES]
- install command accepts path to installations

[IMPROVEMENTS]
- get rid of Carton dependency
- more test coverage
- CI integrations
- perl 5.8 compat

0.03 2018-10-13T12:59:36Z

[ADVISORIES]
- CPANSA-App-Github-Email
- CPANSA-Crypt-OpenSSL-DSA
- CPANSA-Crypt-Passwd-XS
- CPANSA-DBD-MariaDB
- CPANSA-Dancer
- CPANSA-Data-Dumper
- CPANSA-Email-Address
- CPANSA-Encode
- CPANSA-ExtUtils-MakeMaker
- CPANSA-FCGI
- CPANSA-Fake-Encode
- CPANSA-Fake-Our
- CPANSA-File-DataClass
- CPANSA-File-Path
- CPANSA-HTTP-Tiny
- CPANSA-Imager
- CPANSA-PathTools

[FEATURES]
- new installed command to audit all installed modules
- cpan.snapshot support by Takumi Akiyama (github.com/akiym)

0.02 2018-10-09T08:24:36Z

- support perl 5.8

0.01 2018-10-08T06:39:07Z

- original version

cpan-audit - CPAN-Audit-20220729.001