Security Advisories (3)
CVE-2017-0373 (2017-05-10)

The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file.

CPANSA-Config-Model-2017-01 (2017-05-10)

YAML or YAML::XS can be loaded automatically making it possible to run arbitrary code loading a specially crafted YAML file.

CVE-2017-0374 (2017-05-10)

Loads models from a local directory, making it possible to substitute the model.

NAME

Config::Model::Backend::Shellvar - Read and write config as a SHELLVAR data structure

VERSION

version 1.211

SYNOPSIS

# model declaration
name => 'FooConfig',

read_config  => [
                  { backend => 'shellvar' , 
                    config_dir => '/etc/foo',
                    file  => 'foo.conf',      # optional
                    auto_create => 1,         # optional
                  }
                ],

 element => ...
) ;

DESCRIPTION

This module is used directly by Config::Model to read or write the content of a configuration tree written with SHELLVAR syntax in Config::Model configuration tree.

Note that undefined values are skipped for list element. I.e. if a list element contains ('a',undef,'b'), the data structure will contain 'a','b'.

CONSTRUCTOR

new ( node => $node_obj, name => 'shellvar' ) ;

Inherited from Config::Model::Backend::Any. The constructor will be called by Config::Model::AutoRead.

read ( io_handle => ... )

Of all parameters passed to this read call-back, only io_handle is used. This parameter must be IO::File object already opened for read.

It can also be undef. In this case, read() will return 0.

When a file is read, read() will return 1.

write ( io_handle => ... )

Of all parameters passed to this write call-back, only io_handle is used. This parameter must be IO::File object alwritey opened for write.

write() will return 1.

AUTHOR

Dominique Dumont, (ddumont at cpan dot org)

SEE ALSO

Config::Model, Config::Model::AutoRead, Config::Model::Backend::Any,