[Bug 1188221] New: perl-Gtk2: incorrect memory management in Gtk2::Gdk::Display::list_devices [epel-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1188221
Bug ID: 1188221
Summary: perl-Gtk2: incorrect memory management in
Gtk2::Gdk::Display::list_devices [epel-all]
Product: Fedora EPEL
Version: el6
Component: perl-Gtk2
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: tcallawa(a)redhat.com
Reporter: vkaigoro(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
tcallawa(a)redhat.com
Blocks: 1188219
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora EPEL. While
only one tracking bug has been filed, please correct all affected versions
at the same time. If you need to fix the versions independent of each
other, you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1188219
[Bug 1188219] perl-Gtk2: incorrect memory management in
Gtk2::Gdk::Display::list_devices
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=P2QmAhLfon&a=cc_unsubscribe
9 years, 3 months
[Bug 1195803] New: perl-Parallel-Scoreboard-0.07-1.fc23 FTBFS on bootstrap: reflexive build-time dependency on perl(Parallel::Scoreboard)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1195803
Bug ID: 1195803
Summary: perl-Parallel-Scoreboard-0.07-1.fc23 FTBFS on
bootstrap: reflexive build-time dependency on
perl(Parallel::Scoreboard)
Product: Fedora
Version: rawhide
Component: perl-Parallel-Scoreboard
Assignee: rc040203(a)freenet.de
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
rc040203(a)freenet.de
perl-Parallel-Scoreboard-0.07-1.fc23 cannot be bootstrapped because it
build-requires itself via `perl(Parallel::Scoreboard)' RPM dependency symbol:
# LANG=en_US.UTF-8 yum-builddep
~test/fedora/perl-Parallel-Scoreboard/perl-Parallel-Scoreboard.spec
Loaded plugins: auto-update-debuginfo
Getting requirements for
/home/test/fedora/perl-Parallel-Scoreboard/perl-Parallel-Scoreboard.spec
--> perl-Class-Accessor-Lite-0.06-3.fc22.noarch
--> Already installed : perl-Digest-MD5-2.54-1.fc22.x86_64
--> Already installed : perl-ExtUtils-MakeMaker-7.04-1.fc22.noarch
--> Already installed : 4:perl-5.20.2-322.fc23.x86_64
--> Already installed : perl-File-Path-2.09-311.fc22.noarch
--> Already installed : perl-File-Temp-0.23.04-310.fc22.noarch
--> Already installed : perl-HTML-Parser-3.71-8.fc22.x86_64
--> Already installed : 4:perl-5.20.2-322.fc23.x86_64
--> Already installed : perl-JSON-2.90-3.fc22.noarch
--> Already installed : 4:perl-5.20.2-322.fc23.x86_64
--> perl-Parallel-Scoreboard-0.07-1.fc22.noarch
--> perl-Spiffy-0.46-2.fc22.noarch
--> perl-Test-Base-0.88-2.fc22.noarch
--> perl-Test-Base-0.88-2.fc22.noarch
--> Already installed : perl-Test-Simple-1.001014-1.fc22.noarch
--> Already installed : perl-Test-Simple-1.001014-1.fc22.noarch
--> Already installed : perl-Test-Simple-1.001014-1.fc22.noarch
--> perl-Test-Warn-0.30-3.fc22.noarch
--> Already installed : 4:perl-5.20.2-322.fc23.x86_64
--> Already installed : 4:perl-5.20.2-322.fc23.x86_64
--> Running transaction check
---> Package perl-Class-Accessor-Lite.noarch 0:0.06-3.fc22 will be installed
---> Package perl-Parallel-Scoreboard.noarch 0:0.07-1.fc22 will be installed
---> Package perl-Spiffy.noarch 0:0.46-2.fc22 will be installed
---> Package perl-Test-Base.noarch 0:0.88-2.fc22 will be installed
---> Package perl-Test-Warn.noarch 0:0.30-3.fc22 will be installed
--> Processing Dependency: perl(Sub::Uplevel) >= 0.12 for package:
perl-Test-Warn-0.30-3.fc22.noarch
--> Running transaction check
---> Package perl-Sub-Uplevel.noarch 1:0.25-1.fc22 will be installed
--> Finished Dependency Resolution
--> Finding unneeded leftover dependencies
Found and removing 0 unneeded dependencies
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
perl-Class-Accessor-Lite noarch 0.06-3.fc22 rawhide 16 k
perl-Parallel-Scoreboard noarch 0.07-1.fc22 rawhide 21 k
perl-Spiffy noarch 0.46-2.fc22 rawhide 44 k
perl-Test-Base noarch 0.88-2.fc22 rawhide 55 k
perl-Test-Warn noarch 0.30-3.fc22 rawhide 24 k
Installing for dependencies:
perl-Sub-Uplevel noarch 1:0.25-1.fc22 rawhide 32 k
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=uOOJNI1bp0&a=cc_unsubscribe
9 years, 3 months
[Bug 1185489] New: permissions of dspamc different than dspam
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1185489
Bug ID: 1185489
Summary: permissions of dspamc different than dspam
Product: Fedora EPEL
Version: el6
Component: dspam
Severity: low
Assignee: nathanael(a)gnat.ca
Reporter: kirkman.brian(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: nathanael(a)gnat.ca, perl-devel(a)lists.fedoraproject.org
Description of problem:
The permissions for /usr/bin/dspam are 2511 dspam:mail whereas the permissions
for /usr/bin/dspamc are 755 root:root. Dspam runs fine as a daemon being called
by postfix, but calling dspamc to connect to the daemon is too permissive for
most applications, i.e. dovecot-antispam.
Version-Release number of selected component (if applicable):
dspam 3.10.2 and dspam-client 3.10.2
How reproducible:
Always
Steps to Reproduce:
1. setup a working dspam daemon
2. setup dovecot-antispam to call dspamc
3. move message from Inbox to Junk folder
Actual results:
/var/log/maillog logs the following when moving message from inbox to Junk
folder:
Jan 23 15:33:37 mail.localhost dspam[16176]: Unable to open file for reading:
/etc/dspam.conf: Permission denied
Jan 23 15:33:37 mail.localhost dspam[16176]: Unable to read dspam.conf
Jan 23 15:33:37 mail.localhost dovecot: imap(myuser(a)mydomain.com): Connection
closed bytes=153/1227
Expected results:
Permissions of dspamc should allow dspamc to connect to dspam daemon. If dspamc
is set to 2511 dspam:mail then dspamc can connect to dspam daemon.
Additional info:
The dspamc binary is installed using the dspam-client package.
The setup described above is:
Postfix --> DSPAM daemon [LMTP unix socket] --> Dovecot [LMTP unix socket]
with dspamc being called from dovecot-antispam to connect to the dspam daemon
and retrain spam.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=KiDoaR7AZv&a=cc_unsubscribe
9 years, 3 months
[Bug 1193177] New: sqlite3_drv bad memory free and severe performance bug - with patch
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1193177
Bug ID: 1193177
Summary: sqlite3_drv bad memory free and severe performance bug
- with patch
Product: Fedora EPEL
Version: el6
Component: dspam
Severity: medium
Assignee: nathanael(a)gnat.ca
Reporter: stuart(a)gathman.org
QA Contact: extras-qa(a)fedoraproject.org
CC: nathanael(a)gnat.ca, perl-devel(a)lists.fedoraproject.org
Created attachment 992325
--> https://bugzilla.redhat.com/attachment.cgi?id=992325&action=edit
Patch for problems reported
Description of problem:
The dspam sqlite3_drv runs in auto_commit mode, resulting in 1000s of
transactions on a single email - rendering it unusably slow. Further, it
crashes on sql errors (include expected failures such as with
_ds_verify_signature) because it uses the system free() on the error message
from sqlite3, instead of sqlite3_free().
Version-Release number of selected component (if applicable):
dspam-3.10.2-4.el6.x86_64
How reproducible:
always
Steps to Reproduce:
1. run dspam_train with sqlite3 configured to see performance bug.
2. verify_signature error can be seen eventually in normal operation, but more
quickly with the pydspam-1.3 test suite, with Dspam.py modified to load the
sqlite3 driver (one line change). Apply the performance bug fix first - or it
will be a while...
3.
Actual results:
Unusably slow, and crashes on verify_signature when signature does not exist.
Expected results:
Reasonable performance, and no crashes.
Additional info:
https://pypi.python.org/pypi?%3Aaction=pkg_edit&name=pydspam
Patch to fix the problems attached.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=kmUjakIn3F&a=cc_unsubscribe
9 years, 3 months