perl-devel November 2011

perl-devel@lists.fedoraproject.org

23 participants
539 discussions

[perl-Bio-SamTools] New upstream release 1.32
by Adam Huffman 10 Nov '11

10 Nov '11

commit b7913bc0681d0e5795b0182771f68be30e257b7e Author: Adam Huffman <bloch(a)verdurin.com> Date: Thu Nov 10 22:11:02 2011 +0000 New upstream release 1.32 .gitignore | 1 + perl-Bio-SamTools.spec | 5 ++++- sources | 2 +- 3 files changed, 6 insertions(+), 2 deletions(-) --- diff --git a/.gitignore b/.gitignore index 8d31530..4e1e6dc 100644 --- a/.gitignore +++ b/.gitignore @@ -3,3 +3,4 @@ /Bio-SamTools-1.29.tar.gz /Bio-SamTools-1.30.tar.gz /Bio-SamTools-1.31.tar.gz +/Bio-SamTools-1.32.tar.gz diff --git a/perl-Bio-SamTools.spec b/perl-Bio-SamTools.spec index e87668f..c360099 100644 --- a/perl-Bio-SamTools.spec +++ b/perl-Bio-SamTools.spec @@ -1,5 +1,5 @@ Name: perl-Bio-SamTools -Version: 1.31 +Version: 1.32 Release: 1%{?dist} Summary: Bio::SamTools Perl module License: GPL+ or Artistic 2.0 @@ -57,6 +57,9 @@ find %{buildroot} -depth -type d -exec rmdir {} 2>/dev/null \; %{_bindir}/genomeCoverageBed.pl %changelog +* Thu Nov 10 2011 Adam Huffman <verdurin(a)fedorapeople.org> - 1.32-1 +- New upstream release 1.32 + * Sun Oct 2 2011 Tom Callaway <spot(a)fedoraproject.org> - 1.31-1 - update to 1.31 diff --git a/sources b/sources index b0a6906..d43d6a2 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -d19ccb747abcb1a3a078b769412f6bbb Bio-SamTools-1.31.tar.gz +566f8eb1a84856da3e524b32f3edfd47 Bio-SamTools-1.32.tar.gz

1 0

File Bio-SamTools-1.32.tar.gz uploaded to lookaside cache by verdurin
by Adam Huffman 10 Nov '11

10 Nov '11

A file has been added to the lookaside cache for perl-Bio-SamTools: 566f8eb1a84856da3e524b32f3edfd47 Bio-SamTools-1.32.tar.gz

1 0

[Bug 751886] CVE-2011-4115 perl-Parallel-ForkManager: insecure temporary file usage
by Red Hat Bugzilla 10 Nov '11

10 Nov '11

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=751886 --- Comment #4 from Jason Tibbitts <tibbs(a)math.uh.edu> 2011-11-10 13:11:51 EST --- I like the idea of making tempdir mandatory. It conveniently both shows us if any consuming code would have the security issue and pushes responsibility for that bit of security elsewhere. Let me whip something up. I believe the maintainers of the packages which depend on Parallel::ForkManager are CC'd on this ticket already; could either of you check to see if your packages would have issues with this or if they even use the problematic feature? -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

[Bug 751751] perl-IO-Socket-SSL failing to return last line of data
by Red Hat Bugzilla 10 Nov '11

10 Nov '11

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=751751 Fedora Update System <updates(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |ON_QA --- Comment #8 from Fedora Update System <updates(a)fedoraproject.org> 2011-11-10 12:32:00 EST --- Package perl-IO-Socket-SSL-1.49-1.fc16: * should fix your issue, * was pushed to the Fedora 16 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing perl-IO-Socket-SSL-1.49-1.fc16' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2011-15601 then log in and leave karma (feedback). -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

[Bug 751886] CVE-2011-4115 perl-Parallel-ForkManager: insecure temporary file usage
by Red Hat Bugzilla 10 Nov '11

10 Nov '11

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=751886 --- Comment #3 from Tomas Hoger <thoger(a)redhat.com> 2011-11-10 04:17:49 EST --- I gave this some look yesterday, and I can't see any nice way to fix this either. Safely creating temporary directory under /tmp would probably be the least invasive way to fix, but there's a problem with the clean-up at the end. It seems it's valid to use this module in a way that parent process forks bunch of child processes, let them do their work and exit before they finish. Hence this approach should leave a temporary directory behind on each run of such script. Changing child code to create the file safely does not seem like an option either. If the predictable file name is used, attacker may "DoS" the child (create temp file so that child can not while its "reply" data structure). Child can block (keep re-trying to create the file) or exit (let parent parse malicious file), but cases seem wrong. As a side note, in current implementation, parent process tries to read the temp file even when the script is not written to use this data passing feature. Hence attacker can easily make parent deserialize arbitrary malicious Storable blob. Storable man page only mention it's unsafe when storing / retrieving of CODE is allowed (not by default), but still sounds like "don't do this". Even if it's safe, that may have other side effects (block parent on read, make it use extra memory, trigger side effects when opening special files). Parent process can create temp file safely, but can not use predictable file name with its current format, as it does not know child pid before fork. Hence it'd need to use random name and have it stored in both parent and child data structs. Of course, this has the same problem as temp dir idea in cases where parent exits before child. One improvement can be to create temp file only when script wants to use structure passing (and hence parent is expected to wait for child), i.e. when on_finish callback is set. However, even though docs say to declare callbacks before first start, it's apparent you can set them after start, as run_on_finish accepts optional pid argument to set child-specific callback. I'm not sure what the intended semantic was, as setting callback after run is racy and the callback may not be run if child exits quickly. One idea is to make new's tempdir parameter mandatory if script wants to use structure passing, and document that caller should provide a safe temporary directory (i.e. not /tmp) - such as directory that is not world writeable (/home/user/something or /var/lib/something), or safely created under /tmp. Of course, that's something that we can't do without upstream. We can downgrade module to the F14 version that lacks this new feature ;). -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

[perl-Tk] Rebuild for libpng 1.5
by Iain Arnell 09 Nov '11

09 Nov '11

commit c8569d4d24dde5ca958adad8b82c32213e2c1a2e Author: Iain Arnell <iarnell(a)gmail.com> Date: Thu Nov 10 05:42:47 2011 +0100 Rebuild for libpng 1.5 perl-Tk.spec | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-Tk.spec b/perl-Tk.spec index dbfc679..8d43786 100644 --- a/perl-Tk.spec +++ b/perl-Tk.spec @@ -5,7 +5,7 @@ Name: perl-Tk # devel version fix for perl 5.14: %define real_version 804.029_500 Version: 804.029 -Release: 4%{?dist} +Release: 5%{?dist} Summary: Perl Graphical User Interface ToolKit Group: Development/Libraries @@ -120,6 +120,9 @@ find __demos/ -type f -exec chmod -x {} \; %changelog +* Thu Nov 10 2011 Iain Arnell <iarnell(a)gmail.com> 804.029-5 +- Rebuild for libpng 1.5 + * Thu Oct 21 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> 804.029-4 - Split out Tk/MMutil.pm, Tk/install.pm, Tk/MakeDepend.pm into perl-Tk-devel. (Avoid dependency on perl-devel - BZ 741777).

1 0

[perl-Gtk2-WebKit] Rebuild for libpng 1.5
by Iain Arnell 09 Nov '11

09 Nov '11

commit 21b2f0b31681a3eabcb714e3351ac091eae658aa Author: Iain Arnell <iarnell(a)gmail.com> Date: Thu Nov 10 05:32:43 2011 +0100 Rebuild for libpng 1.5 perl-Gtk2-WebKit.spec | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-Gtk2-WebKit.spec b/perl-Gtk2-WebKit.spec index 982952a..a584bd3 100644 --- a/perl-Gtk2-WebKit.spec +++ b/perl-Gtk2-WebKit.spec @@ -1,6 +1,6 @@ Name: perl-Gtk2-WebKit Version: 0.09 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Web content engine library for Gtk2 License: LGPLv2+ Group: Development/Libraries @@ -69,6 +69,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Thu Nov 10 2011 Iain Arnell <iarnell(a)gmail.com> 0.09-2 +- Rebuild for libpng 1.5 + * Thu Aug 04 2011 Remi Collet <remi(a)fedoraproject.org> 0.09-1 - initial package for review - Specfile autogenerated by cpanspec 1.78.

1 0

[perl-GD] Rebuild for libpng 1.5
by Iain Arnell 09 Nov '11

09 Nov '11

commit 97ae53182208e018ad85b6191ab04c41d3f161f7 Author: Iain Arnell <iarnell(a)gmail.com> Date: Thu Nov 10 05:17:22 2011 +0100 Rebuild for libpng 1.5 perl-GD.spec | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-GD.spec b/perl-GD.spec index af3cf4b..9cfebc3 100644 --- a/perl-GD.spec +++ b/perl-GD.spec @@ -1,6 +1,6 @@ Name: perl-GD Version: 2.44 -Release: 8%{?dist} +Release: 9%{?dist} Summary: Perl interface to the GD graphics library Group: Development/Libraries @@ -76,6 +76,9 @@ base64 t/test.out.3.png_new %changelog +* Thu Nov 10 2011 Iain Arnell <iarnell(a)gmail.com> 2.44-9 +- Rebuild for libpng 1.5 + * Sat Jun 18 2011 Iain Arnell <iarnell(a)gmail.com> 2.44-8 - patch to avoid issue with ExtUtils::MakeMaker and CCFLAGS see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628522

1 0

[perl-Gtk2-Unique] Rebuild for libpng 1.5
by Iain Arnell 09 Nov '11

09 Nov '11

commit 51ad14371c575ca3f52c24604e0db42f523316a1 Author: Iain Arnell <iarnell(a)gmail.com> Date: Thu Nov 10 05:16:30 2011 +0100 Rebuild for libpng 1.5 perl-Gtk2-Unique.spec | 7 ++++++- 1 files changed, 6 insertions(+), 1 deletions(-) --- diff --git a/perl-Gtk2-Unique.spec b/perl-Gtk2-Unique.spec index 50326d3..dc5f91b 100644 --- a/perl-Gtk2-Unique.spec +++ b/perl-Gtk2-Unique.spec @@ -1,6 +1,6 @@ Name: perl-Gtk2-Unique Version: 0.05 -Release: 3%{?dist} +Release: 4%{?dist} Summary: Perl bindings for the C library "libunique" License: GPL+ or Artistic Group: Development/Libraries @@ -12,6 +12,7 @@ BuildRequires: perl(ExtUtils::PkgConfig) >= 1.03 BuildRequires: perl(Glib) >= 1.180 BuildRequires: perl(Glib::MakeHelper) BuildRequires: perl(Gtk2) >= 1.00 +BuildRequires: perl(Test::More) BuildRequires: unique-devel Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) @@ -72,6 +73,10 @@ rm -rf $RPM_BUILD_ROOT %{perl_vendorarch}/Gtk2/Unique/Install/*.h %changelog +* Wed Nov 09 2011 Iain Arnell <iarnell(a)gmail.com> 0.05-4 +- Rebuild for libpng 1.5 +- BuildRequires perl(Test::More) + * Wed Jul 20 2011 Petr Sabata <contyk(a)redhat.com> - 0.05-3 - Perl mass rebuild

1 0

[perl-Gtk2-ImageView] Rebuild for libpng 1.5
by Iain Arnell 09 Nov '11

09 Nov '11

commit 1498b3781f88665471e3eed6c27ffb4cac3d741c Author: Iain Arnell <iarnell(a)gmail.com> Date: Thu Nov 10 05:12:38 2011 +0100 Rebuild for libpng 1.5 perl-Gtk2-ImageView.spec | 7 ++++++- 1 files changed, 6 insertions(+), 1 deletions(-) --- diff --git a/perl-Gtk2-ImageView.spec b/perl-Gtk2-ImageView.spec index 81f41eb..29186ad 100644 --- a/perl-Gtk2-ImageView.spec +++ b/perl-Gtk2-ImageView.spec @@ -1,6 +1,6 @@ Name: perl-Gtk2-ImageView Version: 0.04 -Release: 10%{?dist} +Release: 11%{?dist} Summary: Perl bindings to the GtkImageView image viewer widget Group: Development/Libraries @@ -18,6 +18,7 @@ BuildRequires: perl(Cairo) >= 1.00 BuildRequires: perl(ExtUtils::Depends) >= 0.2 BuildRequires: perl(ExtUtils::PkgConfig) >= 1.03 BuildRequires: perl(Gtk2) +BuildRequires: perl(Test::More) Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) Requires: perl(Glib) >= 1.163 Requires: perl(Cairo) >= 1.00 @@ -71,6 +72,10 @@ rm -rf $RPM_BUILD_ROOT %{perl_vendorarch}/Gtk2/ImageView/Install/*.h %changelog +* Thu Nov 10 2011 Iain Arnell <iarnell(a)gmail.com> 0.04-11 +- Rebuild for libpng 1.5 +- BuildRequires perl(Test::More) + * Tue Jun 21 2011 Marcela Mašláňová <mmaslano(a)redhat.com> - 0.04-10 - Perl mass rebuild

1 0

← Newer
1
...
36
37
38
39
40
41
42
...
54
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel November 2011