[Bug 984185] New: perl should be a hardened build
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=984185
Bug ID: 984185
Summary: perl should be a hardened build
Product: Fedora
Version: 18
Component: perl
Severity: unspecified
Priority: unspecified
Assignee: mmaslano(a)redhat.com
Reporter: h.reindl(a)thelounge.net
QA Contact: extras-qa(a)fedoraproject.org
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
tcallawa(a)redhat.com
perl is often used for long running services (mailgraph, smokeping, postgrey..)
as well as called from webservers with untrusted input
so it should be "Full RELRO" and PIE
http://fedoraproject.org/wiki/Packaging:Guidelines#PIE
______________________________________________________
If your package meets any of the following criteria you MUST enable the PIE
compiler flags:
Your package is long running. This means it's likely to be started and keep
running until the machine is rebooted, not start on demand and quit on idle.
Your package has suid binaries, or binaries with capabilities.
Your package runs as root.
If your package meets the following criteria you should consider enabling the
PIE compiler flags:
Your package accepts/processes untrusted input.
______________________________________________________
[root@srv-rhsoft:~]$ checksec --file /usr/bin/perl
RELRO STACK CANARY NX PIE RPATH
RUNPATH FILE
Partial RELRO Canary found NX enabled No PIE RPATH
RUNPATH /usr/bin/perl
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=YABEZK214w&a=cc_unsubscribe
6 years, 9 months
[Bug 570321] New: Missing Dependencies postgresql-plperl and perl-BDB-Pg > 2.0
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: Missing Dependencies postgresql-plperl and perl-BDB-Pg > 2.0
https://bugzilla.redhat.com/show_bug.cgi?id=570321
Summary: Missing Dependencies postgresql-plperl and perl-BDB-Pg
> 2.0
Product: Fedora EPEL
Version: el5
Platform: All
OS/Version: Linux
Status: NEW
Severity: medium
Priority: low
Component: bucardo
AssignedTo: itamar(a)ispbrasil.com.br
ReportedBy: james.t.saint-rossy(a)nasa.gov
QAContact: extras-qa(a)fedoraproject.org
CC: fedora-perl-devel-list(a)redhat.com,
itamar(a)ispbrasil.com.br
Classification: Fedora
Description of problem:
Installing bucardo-4.4.0-2.el5 fails with missing dependencies.
postgresql-plperl and perl-bdb-pg >= 2.0 do not exist in either the default or
epel repositories.
Version-Release number of selected component (if applicable):
bucardo-4.4.0-2.el5
How reproducible:
Always
Steps to Reproduce:
1. yum install bucardo
Actual results:
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* addons: mirror.skiplink.com
* base: mirror.cogentco.com
* epel: mirrors.tummy.com
* extras: mirrors.serveraxis.net
* updates: mirror.san.fastserv.com
addons | 951 B 00:00
base | 2.1 kB 00:00
epel | 3.4 kB 00:00
extras | 2.1 kB 00:00
updates | 1.9 kB 00:00
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package bucardo.noarch 0:4.4.0-2.el5 set to be updated
--> Processing Dependency: perl(DBD::Pg) >= 2.0 for package: bucardo
--> Processing Dependency: postgresql-plperl for package: bucardo
--> Processing Dependency: perl(DBD::Pg) for package: bucardo
--> Processing Dependency: perl(DBIx::Safe) for package: bucardo
--> Running transaction check
---> Package bucardo.noarch 0:4.4.0-2.el5 set to be updated
--> Processing Dependency: perl(DBD::Pg) >= 2.0 for package: bucardo
--> Processing Dependency: postgresql-plperl for package: bucardo
---> Package perl-DBD-Pg.i386 0:1.49-2.el5_3.1 set to be updated
---> Package perl-DBIx-Safe.noarch 0:1.2.5-6.el5 set to be updated
--> Finished Dependency Resolution
bucardo-4.4.0-2.el5.noarch from epel has depsolving problems
--> Missing Dependency: postgresql-plperl is needed by package
bucardo-4.4.0-2.el5.noarch (epel)
bucardo-4.4.0-2.el5.noarch from epel has depsolving problems
--> Missing Dependency: perl(DBD::Pg) >= 2.0 is needed by package
bucardo-4.4.0-2.el5.noarch (epel)
Error: Missing Dependency: postgresql-plperl is needed by package
bucardo-4.4.0-2.el5.noarch (epel)
Error: Missing Dependency: perl(DBD::Pg) >= 2.0 is needed by package
bucardo-4.4.0-2.el5.noarch (epel)
You could try using --skip-broken to work around the problem
You could try running: package-cleanup --problems
package-cleanup --dupes
rpm -Va --nofiles --nodigest
Expected results:
Package successfully installs
Additional info:
Tested on Centos 5.4 and RHEL 5.4
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
7 years
[Bug 783468] New: missing dependancy on perl-Email-Simple-Creator
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: missing dependancy on perl-Email-Simple-Creator
https://bugzilla.redhat.com/show_bug.cgi?id=783468
Summary: missing dependancy on perl-Email-Simple-Creator
Product: Fedora EPEL
Version: el5
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: perl-Email-MIME-Creator
AssignedTo: tcallawa(a)redhat.com
ReportedBy: carl.johnstone(a)onthebeach.co.uk
QAContact: extras-qa(a)fedoraproject.org
CC: tcallawa(a)redhat.com, fedora-perl-devel-list(a)redhat.com
Classification: Fedora
Story Points: ---
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Description of problem:
The perl-Email-MIME-Creator package has a missing dependency on
Email::Simple::Creator / perl-Email-Simple-Creator
Version-Release number of selected component (if applicable):
perl-Email-MIME-Creator.noarch 0:1.453-2.el5
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
7 years
[Bug 706721] New: Missing Requires: perl(Clone)
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: Missing Requires: perl(Clone)
https://bugzilla.redhat.com/show_bug.cgi?id=706721
Summary: Missing Requires: perl(Clone)
Product: Fedora EPEL
Version: el5
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: perl-Hash-Merge
AssignedTo: tcallawa(a)redhat.com
ReportedBy: redhat-bugzilla(a)camperquake.de
QAContact: extras-qa(a)fedoraproject.org
CC: tcallawa(a)redhat.com, iarnell(a)gmail.com,
fedora-perl-devel-list(a)redhat.com
Classification: Fedora
Story Points: ---
Description of problem:
perl-Hash-Merge requires perl(Clone), but the spec does not reflect this.
Version-Release number of selected component (if applicable):
perl-Hash-Merge-0.11-2.el5
How reproducible:
Look at /usr/lib/perl5/vendor_perl/5.8.8/Hash/Merge.pm, line 231
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
7 years
[Bug 703101] New: [PATCH] DateTime should be rebuilt on tzdata updates
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: [PATCH] DateTime should be rebuilt on tzdata updates
https://bugzilla.redhat.com/show_bug.cgi?id=703101
Summary: [PATCH] DateTime should be rebuilt on tzdata updates
Product: Fedora EPEL
Version: el5
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: perl-DateTime
AssignedTo: tremble(a)tremble.org.uk
ReportedBy: lkundrak(a)v3.sk
QAContact: extras-qa(a)fedoraproject.org
CC: fedora-perl-devel-list(a)redhat.com,
tremble(a)tremble.org.uk
Classification: Fedora
Story Points: ---
Description of problem:
tzdata package updates and new time zones are added from time to time (such as
Asia/Kolkata). As DateTime contains files generated from it, it should be
rebuilt on each such update.
The patch attached adds an explicit dependency on specific version of tzdata,
so that it would disallow updates in case of tzdata rebuild w/o DateTime
rebuilt, so that it would no go unnoticed.
Additional info:
At the very least, even if the patch is rejected, please trigger a DateTime
rebuild. Maybe coordinate with tzdata maintainer on future updates.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
7 years
[Bug 757089] New: cpanspec error: Dest dir longer than base dir is not supported
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: cpanspec error: Dest dir longer than base dir is not supported
https://bugzilla.redhat.com/show_bug.cgi?id=757089
Summary: cpanspec error: Dest dir longer than base dir is not
supported
Product: Fedora
Version: 16
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: cpanspec
AssignedTo: steve(a)silug.org
ReportedBy: kas(a)fi.muni.cz
QAContact: extras-qa(a)fedoraproject.org
CC: steve(a)silug.org, fedora-perl-devel-list(a)redhat.com
Classification: Fedora
Story Points: ---
Type: ---
Description of problem:
I am trying to build some CPAN modules as RPMs (namely Env::C and
IO::Socket::Multicast), but the build fails with the following error:
[...]
extracting debug info from
/root/rpmbuild/BUILDROOT/perl-Env-C-0.08-1.fc16.x86_64/usr/lib64/perl5/vendor_perl/auto/Env/C/C.so
Dest dir longer than base dir is not supported
error: Bad exit status from /var/tmp/rpm-tmp.LI9AHv (%install)
I am not sure why the length of both paths should matter at all, but the cause
of the problem is that cpanspec sets up too long buildroot.
Taking the generated spec file, shortening the buildroot path, and rebuilding
the package using the modified spec file works for me
Before:
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
After:
BuildRoot: %{_tmppath}/%{name}
Version-Release number of selected component (if applicable):
cpanspec-1.78-9.fc16.noarch
How reproducible:
100 %
Steps to Reproduce:
1. cpanspec --build Env::C
Actual results:
build fails with the above error message
Expected results:
perl-Env-C binary and source RPMs should be built
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
7 years
[Bug 347901] New: Port perl-IO-Socket-SSL to use NSS library for cryptography
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
https://bugzilla.redhat.com/show_bug.cgi?id=347901
Summary: Port perl-IO-Socket-SSL to use NSS library for
cryptography
Product: Fedora
Version: devel
Platform: All
OS/Version: Linux
Status: NEW
Severity: medium
Priority: medium
Component: perl-IO-Socket-SSL
AssignedTo: wtogami(a)redhat.com
ReportedBy: pvrabec(a)redhat.com
QAContact: extras-qa(a)fedoraproject.org
CC: fedora-perl-devel-
list@redhat.com,jpo@di.uminho.pt,tmraz(a)redhat.com
perl-IO-Socket-SSL should be ported to use NSS library for cryptography.
See the tracking bug for details and links on how it could be done.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
7 years, 3 months
[Bug 874942] New: Net-DNS: system configuration is used instead of user's
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=874942
Bug ID: 874942
QA Contact: extras-qa(a)fedoraproject.org
Severity: high
External Bug URL: http://rt.cpan.org/Public/
Version: rawhide
Priority: unspecified
CC: mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, psabata(a)redhat.com
Assignee: mmaslano(a)redhat.com
Summary: Net-DNS: system configuration is used instead of
user's
Regression: ---
Story Points: ---
Classification: Fedora
OS: Unspecified
Reporter: mmaslano(a)redhat.com
Type: Bug
Documentation: ---
Hardware: Unspecified
Mount Type: ---
Status: NEW
Component: perl-Net-DNS
Product: Fedora
External Bug ID: CPAN 67602
If I define my own configuration file, system files are used, which could be
security issue. Example: My configuration file is defined as: my $res =
Net::DNS::Resolver->new(config_file => '/my/dns.conf'); These files are read
even if I defined my own file: /etc/resolv.conf $HOME/.resolv.conf
./.resolv.conf Last 2 files shouldn't be read by default since it's possible
security issue - user can drop .resolv.conf pointing to malicious dns server.
This issue was found during testing spamassassin with selinux. For details see:
https://bugzilla.redhat.com/sh ow_bug.cgi?id=628866#c2
I'm reporting this error back into our bugzilla because of last comment in rt:
I think the level of this PR should be elevated to 'security'.
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 4 months