This Week in PSC (143)

https://blogs.perl.org/users/psc/2024/04/this-week-in-psc-143.html

Various methods of finding the center of a sample

Changes for 0.15 - 2024-04-02T09:56:35-04:00

• BUG FIX

Perl Weekly Challenge 263: Merge Items

https://blogs.perl.org/users/laurent_r/2024/04/perl-weekly-challenge-263-merge-items.html

A FOSS Ecosystem Checklist for the Benefit of Maintainer Sustainability

https://blogs.perl.org/users/salve_j_nilsen/2024/04/a-foss-ecosystem-checklist-for-the-benefit-of-maintainer-sustainability.html

cat-v command implementation

Changes for 0.9902 - 2024-04-02T10:12:53Z

• make option -t to take tab width

Grammar for graphs

Changes for 0.1.1 - 2024-04-02

• Add NAME section so MetaCPAN recognises module (GH#1).

SPVM Language

Changes for 0.989097 - 2023-04-02

• Imcompatible Changes
• Compilation Error Messsage Improvement
• Document Fix and Improvement

Easy to use REPL with existing lexical support and DWIM tab completion.

Changes for 0.18

• 2024-04-02
• Updated pod.

Sah schemas related to Perl

Changes for 0.050 - 2024-02-16

• Rename module/dist Sah-Schema{s,Bundle}-Perl following rename of Sah-Schema{s,Bundle} (for visual clarity and consistency with naming of other bundles).
• [ux] Allow Foo//Bar (in addition to Foo/Bar) to be normalized as Foo::Bar.

find perl root and push lib modules path to @INC

Changes for 0.04 - 2024-04-01T22:07:19Z

• add dependencys to cpanfile Cwd, Path::Tiny

Easily send emails from Mojolicious applications

Changes for 0.01 - 2024-03-29T09:02:38-05:00

• First public release

Perl Weekly Challenge 263: Target Index

https://blogs.perl.org/users/laurent_r/2024/04/perl-weekly-challenge-263-target-index.html

Audit CPAN distributions for known vulnerabilities

Changes for 20240401.002 - 2024-04-01T12:27:17Z

• Fix some incorrect data in CPANSA-HTTP-Body-2013-4407 (CVE report is wrong). From Stig in briandfoy/cpan-security-advisory#150 .

Audit CPAN distributions for known vulnerabilities

Changes for 20240401.001 - 2024-04-01T11:50:11Z

• data update for 2024-04-01
• fix data issue for Mojolicious report (briandfoy/cpan-security-advisory#149) (Timothy Legge)

cat-v command implementation

Changes for 0.9901 - 2024-04-01T10:20:20Z

• organized docs directory

PDF DateTime Parser and Formatter.

Changes for 0.01 - 2024-04-01T11:22:08+02:00

• First version.

A Twist of a Date

https://blogs.perl.org/users/buddy_burden/2024/04/a-twist-of-a-date.html

Synthesizer settings librarian

Changes for 0.0042 - 2024-03-31T20:12:33Z

• Fix eg/visualize.pl and Module.yaml.

Validate Japanese zip-codes

Changes for 0.20240329

• Update some table classes.

Libdeflate compression library

Changes for 0.08_01 - 2024-04-01

• Try to do something about version mistakes

Schemas related to filesystem path

Changes for 0.031 - 2024-02-16

• Rename module/dist Sah-Schema{s,Bundle}-Path following rename of Sah-Schema{s,Bundle} (for visual clarity and consistency with naming of other bundles).

Dark and Darker: Tips For Beginners

https://blogs.perl.org/users/myramillan/2024/04/dark-and-darker-tips-for-beginners.html

Very configurable Markdown processor written in pure Perl, supporting the CommonMark spec and many extensions

Changes for 1.00 - 2024-03-31

• Initial release with full support for the CommonMark spec, the GitHub Flavored Markdown extentions, and partial support for original Markdown syntax.

A conditional language within a YAML struct

Changes for 1.01 - 2024-03-31

• Fix the decode method to handle files correctly

A conditional language within a JSON struct

Changes for 1.01 - 2024-03-31

• Fix the decode method to handle files correctly

Tied objects

Changes for 0.23 - 2024-03-30

• Update Factory::Sub dependency.
• Add support for default factory callbacks
• Add tests for chaining into a factory into a chain into a factory... extended some syntax to achieve this.

Predict satellite visibility using Astro::Coord::ECI

Changes for 0.054 - 2024-03-31

• Prefer Astro::Coord::ECI::Utils::gm_strftime to POSIX::strftime because the behavior of POSIX::strftime when formatting GMT changed in Perl 5.39.8, and is no longer compatible with the libc implementation, which does not alter the components given it. This requires Astro::Coord::ECI::Utils version 0.131.
• Convert testing to Test2::V0.

Shamelessly copied Tk::Tree widget

Changes for 0.02

• Configured Left and Right key to open and close branches. Corrected documentation.

Tied objects

Changes for 0.20 - 2024-03-30

• Adds clear_meta and set_meta on Rope so that you can manipulate an Objects meta definition
• Extends CONFIGURE PROPERTIES with predicates and clearers

create diffs between HTTP requests

Changes for 0.07 - 2024-03-30

• Switch tests from YAML to YAML::PP This is mainly to avoid YAML::Syck being loaded, which can't handle some of our YAML (?!)

This isn't directly perl-related, but it's a good reminder that as the bus-factor of our projects dwindle down to 0, the danger of a dependency attack goes up.

Obligatory XKCD

The story is still unfolding, and I've just been reading it from the HN post

In this case, it appears that the maintainer of xz-utils, who has been maintaining it since 2009 and mentioned online that they don't really have the capacity for it anymore finally had a motivated helper show up to assist with the work 2.5 years ago. That motivated helper now appears to either be a long-con state actor, or a compromised account.

liblzma is used by libsystemd. Redhat and Debian patch ssh to use libsystemd. The startup code of libxz detects when it is loaded into sshd during initialization and replaces a core auth function of sshd with its own copy. The malicious code comes from compressed compiled code within one of the libxz unit test files that gets sneakily injected into the build during the ./configure script. The person who discovered it only found it due to valgrind errors and a slower startup time for ssh, which are mistakes a more sophisticated attacker might not have made.

Oh, and of course the question on everyone's mind, you're probably not affected yet because the latest liblzma is only used in pre-release distros right now. But check if you have xz 5.6 or later. However, the author has been contributing to xz for 2.5 years so who knows if this is the first attack or not...

submitted by /u/nrdvana
[link] [comments]

Dependency

^xkcd

Libdeflate compression library

Changes for 0.08 - 2024-03-30

• Check compiler when installing and exit if version is too low
• Include a missing file

Sah schemas related to ArrayData

Changes for 0.005 - 2024-02-16

• Rename module/dist Sah-Schema{s,Bundle}-ArrayData following rename of Sah-Schema{s,Bundle} (for visual clarity and consistency with naming of other bundles).

Interface to the Qhull convex hull, Delauny triangulation, Voronoi diagram software suite

Changes for 0.06 - 2024-03-29T17:56:08-04:00

• BUG FIX

automate the Chrome browser

Changes for 0.73 - 2024-03-29

• Tests should not hang when run as root now
• Sandbox is automatically disabled when running as root

Multi column file system explorer

Changes for 0.01 - 2024-03-01T10:42:59Z

• original version; created by h2xs 1.23 with options -X Tk::FileBrowser