Security Advisories (3)
CVE-2017-0373 (2017-05-10)

The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file.

CPANSA-Config-Model-2017-01 (2017-05-10)

YAML or YAML::XS can be loaded automatically making it possible to run arbitrary code loading a specially crafted YAML file.

CVE-2017-0374 (2017-05-10)

Loads models from a local directory, making it possible to substitute the model.

NAME

Config::Model::Value::LayeredInclude - Include a sub layer configuration

VERSION

version 2.093

SYNOPSIS

# in a model declaration:
'element' => [
  'include' => {
    'class' => 'Config::Model::Value::LayeredInclude',

    # usual Config::Model::Value parameters
    'type' => 'leaf',
    'value_type' => 'uniline',
    'convert' => 'lc',
    'summary' => 'Include file for cascaded configuration',
    'description' => 'To support multiple variants of ...'
  },
]

DESCRIPTION

This class inherits from Config::Model::Value. It overrides _store to trigger a refresh of layered value when a value is changed. I.e. changing this value trigger a reload of the referred configuration file which values are used as default value. This class was designed to cope with multistrap configuration.

CAUTION

A configuration file can support 2 kinds of include:

  • Layered include which sets default values like multistrap or ssh. These includes are read-only.

  • Real includes like apache. In this cases modified configuration items can be written to included files.

This class works only with the first type

AUTHOR

Copyright 2011,2013 Dominique Dumont <ddumont at cpan.org>

AUTHOR

Dominique Dumont

COPYRIGHT AND LICENSE

This software is Copyright (c) 2005-2016 by Dominique Dumont.

This is free software, licensed under:

The GNU Lesser General Public License, Version 2.1, February 1999