March 2015 - perl-devel - Fedora Mailing-Lists

[Bug 1128978] New: perl-Plack: trailing slashes removed leading to source code disclosure

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1128978 Bug ID: 1128978 Summary: perl-Plack: trailing slashes removed leading to source code disclosure Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mmcallis(a)redhat.com CC: jose.p.oliveira.oss(a)gmail.com, perl-devel(a)lists.fedoraproject.org, rc040203(a)freenet.de Plack 1.0031 fixes the following security issue: - Plack::App::File would previously strip trailing slashes off provided paths. This in combination with the common pattern of serving files with Plack::Middleware::Static could allow an attacker to bypass a whitelist of generated files (avar) #446 Upstream fix: https://github.com/avar/Plack/commit/bc1731dbb53850c380875ad683cd87c8ec99... References: https://github.com/plack/Plack/issues/405 http://seclists.org/oss-sec/2014/q3/345 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=3o7im6lCPi&a=cc_unsubscribe

8 years, 9 months

1
8
0 / 0

[Bug 1110723] New: CVE-2014-0477 perl-Email-Address: Denial-of-Service in Email::Address::parse

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1110723 Bug ID: 1110723 Summary: CVE-2014-0477 perl-Email-Address: Denial-of-Service in Email::Address::parse Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: vkaigoro(a)redhat.com CC: perl-devel(a)lists.fedoraproject.org, rob.myers(a)gtri.gatech.edu, tcallawa(a)redhat.com It was discovered [1] that there's a denial of service vulnerability in Email::Address, a Perl module for RFC 2822 address parsing and creation[2]. Email::Address::parse uses significant time on parsing empty quoted string, as allowed by RFC 2822. Suggested fix was applied upstream as [3] contained in a new upstream version 1.905[4] which contain additional commits to avoid slowdowns. External References: [1] http://seclists.org/oss-sec/2014/q2/563 [2] https://metacpan.org/release/Email-Address [3] https://github.com/rjbs/Email-Address/commit/83f8306117115729ac9346523762... [4] https://github.com/rjbs/Email-Address/blob/master/Changes -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=O6OgIb7i9P&a=cc_unsubscribe

8 years, 9 months

1
16
0 / 0

[Bug 1131085] New: perl-Task-Kensho-Toolchain-0.37 is available

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1131085 Bug ID: 1131085 Summary: perl-Task-Kensho-Toolchain-0.37 is available Product: Fedora Version: rawhide Component: perl-Task-Kensho-Toolchain Keywords: FutureFeature, Triaged Assignee: jplesnik(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com Latest upstream release: 0.37 Current version/release in Fedora Rawhide: 0.36-2.fc21 URL: http://search.cpan.org/dist/Task-Kensho-Toolchain/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=dzwL4bX8pS&a=cc_unsubscribe

8 years, 9 months

1
6
0 / 0

[Bug 1199093] New: perl-MooX-ConfigFromFile-0.006 is available

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1199093 Bug ID: 1199093 Summary: perl-MooX-ConfigFromFile-0.006 is available Product: Fedora Version: rawhide Component: perl-MooX-ConfigFromFile Keywords: FutureFeature, Triaged Assignee: ddick(a)cpan.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: ddick(a)cpan.org, perl-devel(a)lists.fedoraproject.org Latest upstream release: 0.006 Current version/release in rawhide: 0.005-1.fc22 URL: http://search.cpan.org/dist/MooX-ConfigFromFile/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=Iet6ycfPLQ&a=cc_unsubscribe

8 years, 9 months

1
9
0 / 0

[Bug 1204096] New: perl-MooX-Cmd-0.013 is available

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1204096 Bug ID: 1204096 Summary: perl-MooX-Cmd-0.013 is available Product: Fedora Version: rawhide Component: perl-MooX-Cmd Keywords: FutureFeature, Triaged Assignee: ddick(a)cpan.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: ddick(a)cpan.org, perl-devel(a)lists.fedoraproject.org Latest upstream release: 0.013 Current version/release in rawhide: 0.011-1.fc22 URL: http://search.cpan.org/dist/MooX-Cmd/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=8HANwfRpg7&a=cc_unsubscribe

8 years, 9 months

1
12
0 / 0

[Bug 1186281] New: perl-MooX-Options-4.016 is available

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1186281 Bug ID: 1186281 Summary: perl-MooX-Options-4.016 is available Product: Fedora Version: rawhide Component: perl-MooX-Options Keywords: FutureFeature, Triaged Assignee: ddick(a)cpan.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: ddick(a)cpan.org, perl-devel(a)lists.fedoraproject.org Latest upstream release: 4.016 Current version/release in Fedora Rawhide: 4.015-1.fc22 URL: http://search.cpan.org/dist/MooX-Options/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Soon this service will be implemented by a new system: https://release-monitoring.org/ It will require to manage monitored projects via a new web interface. Please make yourself familiar with the new system to ease the transition. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=cmBf9KupUz&a=cc_unsubscribe

8 years, 9 months

1
7
0 / 0

[Bug 1203786] New: perl-ExtUtils-F77-1.17 is available

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1203786 Bug ID: 1203786 Summary: perl-ExtUtils-F77-1.17 is available Product: Fedora Version: rawhide Component: perl-ExtUtils-F77 Keywords: FutureFeature, Triaged Assignee: orion(a)cora.nwra.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: orion(a)cora.nwra.com, perl-devel(a)lists.fedoraproject.org Latest upstream release: 1.17 Current version/release in rawhide: 1.16-20.fc22 URL: http://search.cpan.org/dist/ExtUtils-F77/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ZbJL1ooWMw&a=cc_unsubscribe

8 years, 9 months

1
4
0 / 0

[Bug 1199972] New: perl-Gtk3-0.019-1.fc23 FBTFS:

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1199972 Bug ID: 1199972 Summary: perl-Gtk3-0.019-1.fc23 FBTFS: Product: Fedora Version: rawhide Component: perl-Gtk3 Assignee: berrange(a)redhat.com Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: berrange(a)redhat.com, perl-devel(a)lists.fedoraproject.org perl-Gtk3-0.019-1.fc23 fails to build in F23 because a test fails: t/floating-refs.t .............. ok Gtk-Message: GtkDialog mapped without a transient parent. This is discouraged. GLib-GObject-WARNING **: The property GtkColorButton:color is deprecated and shouldn't be used anymore. It will be removed in a future version. at /usr/lib64/perl5/vendor_perl/Glib/Object/Introspection.pm line 58. GLib-GIO-Message: Using the 'memory' GSettings backend. Your settings will not be saved or shared with other applications. GLib-GObject-WARNING **: The property GtkButton:use-stock is deprecated and shouldn't be used anymore. It will be removed in a future version. at /builddir/build/BUILD/Gtk3-0.019/blib/lib/Gtk3.pm line 702. GLib-GObject-WARNING **: The property GtkSettings:gtk-button-images is deprecated and shouldn't be used anymore. It will be removed in a future version. at /builddir/build/BUILD/Gtk3-0.019/blib/lib/Gtk3.pm line 702. *** menu position callback ignoring error: Can't use string ("320") as an ARRAY ref while "strict refs" in use at t/overrides.t line 235. *** menu position callback must return two integers (x, y) or two integers and a boolean (x, y, push_in) at /builddir/build/BUILD/Gtk3-0.019/blib/lib/Gtk3.pm line 937. *** menu position callback ignoring error: Can't use string ("320") as an ARRAY ref while "strict refs" in use at t/overrides.t line 235. *** menu position callback must return two integers (x, y) or two integers and a boolean (x, y, push_in) at /builddir/build/BUILD/Gtk3-0.019/blib/lib/Gtk3.pm line 937. Can't find information for method Pixbuf::save at t/overrides.t line 639. # Looks like you planned 164 tests but ran 144. # Looks like your test exited with 1 just after 144. t/overrides.t .................. Dubious, test returned 1 (wstat 256, 0x100) Failed 20/164 subtests (less 55 skipped subtests: 89 okay) This happens since upgrading gdk-pixbuf2 from 2.31.2-2.fc23 to 2.31.3-1.fc23. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=FsHu8z1Mep&a=cc_unsubscribe

8 years, 9 months

1
10
0 / 0

[Bug 1178388] New: perl-Gtk3-0.020 is available

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1178388 Bug ID: 1178388 Summary: perl-Gtk3-0.020 is available Product: Fedora Version: rawhide Component: perl-Gtk3 Keywords: FutureFeature, Triaged Assignee: berrange(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: berrange(a)redhat.com, perl-devel(a)lists.fedoraproject.org Latest upstream release: 0.020 Current version/release in Fedora Rawhide: 0.019-1.fc22 URL: http://search.cpan.org/dist/Gtk3/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Soon this service will be implemented by a new system: https://release-monitoring.org/ It will require to manage monitored projects via a new web interface. Please make yourself familiar with the new system to ease the transition. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=df9QclJL1x&a=cc_unsubscribe

8 years, 9 months

1
8
0 / 0

[Bug 750805] New: Fails to build on ARM, needs to use default setjmp not ucontext

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: Fails to build on ARM, needs to use default setjmp not ucontext https://bugzilla.redhat.com/show_bug.cgi?id=750805 Summary: Fails to build on ARM, needs to use default setjmp not ucontext Product: Fedora Version: 15 Platform: Unspecified OS/Version: Unspecified Status: NEW Severity: unspecified Priority: unspecified Component: perl-Coro AssignedTo: ppisar(a)redhat.com ReportedBy: henrik(a)henriknordstrom.net QAContact: extras-qa(a)fedoraproject.org CC: fedora-perl-devel-list(a)redhat.com, mmaslano(a)redhat.com, kwizart(a)gmail.com, bochecha(a)fedoraproject.org, ppisar(a)redhat.com Classification: Fedora Story Points: --- Type: --- Description of problem: ARM do not implement the needed ucontext functions, and need to use the default setjmp method. This is normally the default, except that fedora patches it to hardwire ucontext as default method.. Version-Release number of selected component (if applicable): perl-Coro-5.372-3.fc15 How reproducible: always Steps to Reproduce: 1. Try to rebuild perl-Coro on arm 2. 3. Actual results: failed build, crashing in testsuite Expected results: successful build Additional info: Trivial spec file patch attached. Please apply patch and sumbit a F15 koji build from which arm can pull the srpm. update request is not stricty needed if the only change relative to current F15 build is this patch. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

8 years, 9 months

1
18
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel March 2015