Upgrade Module-Metadata from 1.000014 to 1.000016

Perl · Aug 22, 2013 · 68cdd4b · 68cdd4b
1 parent 6200d5a
commit 68cdd4b
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 5 deletions.
diff --git a/Porting/Maintainers.pl b/Porting/Maintainers.pl
@@ -1226,7 +1226,7 @@ package Maintainers;
 
     'Module::Metadata' => {
         'MAINTAINER'   => 'dagolden',
-        'DISTRIBUTION' => 'BOBTFISH/Module-Metadata-1.000014.tar.gz',
+        'DISTRIBUTION' => 'ETHER/Module-Metadata-1.000016.tar.gz',
         'FILES'        => q[cpan/Module-Metadata],
         'EXCLUDED'     => [
             qr{^maint},

diff --git a/cpan/Module-Metadata/lib/Module/Metadata.pm b/cpan/Module-Metadata/lib/Module/Metadata.pm
@@ -11,7 +11,7 @@ package Module::Metadata;
 
 use strict;
 use vars qw($VERSION);
-$VERSION = '1.000014';
+$VERSION = '1.000016';
 $VERSION = eval $VERSION;
 
 use Carp qw/croak/;
@@ -345,7 +345,7 @@ sub new_from_module {
     }
 
     # Normalize versions.  Can't use exists() here because of bug in YAML::Node.
-    # XXX "bug in YAML::Node" comment seems irrelvant -- dagolden, 2009-05-18
+    # XXX "bug in YAML::Node" comment seems irrelevant -- dagolden, 2009-05-18
     for (grep defined $_->{version}, values %prime) {
       $_->{version} = $normalize_version->( $_->{version} );
     }
@@ -800,8 +800,10 @@ Module::Metadata - Gather package and POD information from perl module files
 
 =head1 DESCRIPTION
 
-This module provides a standard way to gather metadata about a .pm file
-without executing unsafe code.
+This module provides a standard way to gather metadata about a .pm file through
+(mostly) static analysis and (some) code execution.  When determining the
+version of a module, the C<$VERSION> assignment is C<eval>ed, as is traditional
+in the CPAN toolchain.
 
 =head1 USAGE
 

diff --git a/pod/perldelta.pod b/pod/perldelta.pod
@@ -130,6 +130,13 @@ L<Module::CoreList> has been upgraded from version 2.97 to 2.98.
 
 The list of Perl versions covered has been updated.
 
+=item *
+
+L<Module::Metadata> has been upgraded from version 1.000014 to 1.000016.
+
+The module's DESCRIPTION has been re-worded regarding safety/security to
+satisfy CVE-2013-1437.
+
 =back
 
 =head2 Removed Modules and Pragmata