Security Advisories (3)
CVE-2017-0373 (2017-05-10)

The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file.

CPANSA-Config-Model-2017-01 (2017-05-10)

YAML or YAML::XS can be loaded automatically making it possible to run arbitrary code loading a specially crafted YAML file.

CVE-2017-0374 (2017-05-10)

Loads models from a local directory, making it possible to substitute the model.

NAME

Config::Model::Annotation - Read and write configuration annotations

VERSION

version 1.232

SYNOPSIS

my $arw = Config::Model::Annotation 
         -> new (
                 config_class_name => $self->{root_class_name},
                 instance => $self ,
                ) ;

$arw->load;

$arw->save;

DESCRIPTION

This module provides an object that read and write annotations (a bit like comments) to and from a configuration tree.

Depending on the effective id of the process, the annotation will be saved in:

  • /var/lib/config-model/<model_name>-note.yml for root (EUID == 0)

  • ~/.config-model/<model_name>-note.yml for normal user (EUID > 0)

CONSTRUCTOR

Quite standard. The constructor is passed a Config::Model::Instance object.

METHODS

save()

Save annotations in a file (See DESCRIPTION)

load()

Loads annotations from a file (See DESCRIPTION)

AUTHOR

Dominique Dumont, (ddumont at cpan dot org)

SEE ALSO

Config::Model, Config::Model::Node, Config::Model::Loader, Config::Model::Searcher, Config::Model::Value,