perl-devel November 2016

perl-devel@lists.fedoraproject.org

6 participants
1515 discussions

[Bug 1267962] New: perl-IPTables-Parse: Use of predictable names for temporary files
by Red Hat Bugzilla 06 Apr '17

06 Apr '17

https://bugzilla.redhat.com/show_bug.cgi?id=1267962 Bug ID: 1267962 Summary: perl-IPTables-Parse: Use of predictable names for temporary files Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: mitr(a)redhat.com, perl-devel(a)lists.fedoraproject.org, tremble(a)tremble.org.uk A vulnerability in perl-IPTables-Parse was found, when using predictable file names for its temporary files. This vulnerability allows attacker on a multi-user system to set up symlinks to overwrite any file the current user has write access to. Note that perl-IPTables-Parse is also used by fwsnort and perl-IPTables-ChainMgr, which is used by psad. Upstream patch: https://github.com/mtrmac/IPTables-Parse/commit/b400b976d81140f6971132e94eb… -- You are receiving this mail because: You are on the CC list for the bug.

2 11

[Bug 1267964] New: perl-IPTables-Parse: Use of predictable names for temporary files [epel-5]
by Red Hat Bugzilla 06 Apr '17

06 Apr '17

https://bugzilla.redhat.com/show_bug.cgi?id=1267964 Bug ID: 1267964 Summary: perl-IPTables-Parse: Use of predictable names for temporary files [epel-5] Product: Fedora EPEL Version: el5 Component: perl-IPTables-Parse Keywords: Security, SecurityTracking Severity: low Priority: low Assignee: tremble(a)tremble.org.uk Reporter: amaris(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, tremble(a)tremble.org.uk Blocks: 1267962 This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora EPEL. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. epel-5 tracking bug for perl-IPTables-Parse: see blocks bug list for full details of the security issue(s). This bug is never intended to be made public, please put any public notes in the blocked bugs. [bug automatically created by: add-tracking-bugs] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1267962 [Bug 1267962] perl-IPTables-Parse: Use of predictable names for temporary files -- You are receiving this mail because: You are on the CC list for the bug.

2 3

[Bug 570321] New: Missing Dependencies postgresql-plperl and perl-BDB-Pg > 2.0
by Red Hat Bugzilla 06 Apr '17

06 Apr '17

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: Missing Dependencies postgresql-plperl and perl-BDB-Pg > 2.0 https://bugzilla.redhat.com/show_bug.cgi?id=570321 Summary: Missing Dependencies postgresql-plperl and perl-BDB-Pg > 2.0 Product: Fedora EPEL Version: el5 Platform: All OS/Version: Linux Status: NEW Severity: medium Priority: low Component: bucardo AssignedTo: itamar(a)ispbrasil.com.br ReportedBy: james.t.saint-rossy(a)nasa.gov QAContact: extras-qa(a)fedoraproject.org CC: fedora-perl-devel-list(a)redhat.com, itamar(a)ispbrasil.com.br Classification: Fedora Description of problem: Installing bucardo-4.4.0-2.el5 fails with missing dependencies. postgresql-plperl and perl-bdb-pg >= 2.0 do not exist in either the default or epel repositories. Version-Release number of selected component (if applicable): bucardo-4.4.0-2.el5 How reproducible: Always Steps to Reproduce: 1. yum install bucardo Actual results: Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * addons: mirror.skiplink.com * base: mirror.cogentco.com * epel: mirrors.tummy.com * extras: mirrors.serveraxis.net * updates: mirror.san.fastserv.com addons | 951 B 00:00 base | 2.1 kB 00:00 epel | 3.4 kB 00:00 extras | 2.1 kB 00:00 updates | 1.9 kB 00:00 Setting up Install Process Resolving Dependencies --> Running transaction check ---> Package bucardo.noarch 0:4.4.0-2.el5 set to be updated --> Processing Dependency: perl(DBD::Pg) >= 2.0 for package: bucardo --> Processing Dependency: postgresql-plperl for package: bucardo --> Processing Dependency: perl(DBD::Pg) for package: bucardo --> Processing Dependency: perl(DBIx::Safe) for package: bucardo --> Running transaction check ---> Package bucardo.noarch 0:4.4.0-2.el5 set to be updated --> Processing Dependency: perl(DBD::Pg) >= 2.0 for package: bucardo --> Processing Dependency: postgresql-plperl for package: bucardo ---> Package perl-DBD-Pg.i386 0:1.49-2.el5_3.1 set to be updated ---> Package perl-DBIx-Safe.noarch 0:1.2.5-6.el5 set to be updated --> Finished Dependency Resolution bucardo-4.4.0-2.el5.noarch from epel has depsolving problems --> Missing Dependency: postgresql-plperl is needed by package bucardo-4.4.0-2.el5.noarch (epel) bucardo-4.4.0-2.el5.noarch from epel has depsolving problems --> Missing Dependency: perl(DBD::Pg) >= 2.0 is needed by package bucardo-4.4.0-2.el5.noarch (epel) Error: Missing Dependency: postgresql-plperl is needed by package bucardo-4.4.0-2.el5.noarch (epel) Error: Missing Dependency: perl(DBD::Pg) >= 2.0 is needed by package bucardo-4.4.0-2.el5.noarch (epel) You could try using --skip-broken to work around the problem You could try running: package-cleanup --problems package-cleanup --dupes rpm -Va --nofiles --nodigest Expected results: Package successfully installs Additional info: Tested on Centos 5.4 and RHEL 5.4 -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

2 8

[Bug 783468] New: missing dependancy on perl-Email-Simple-Creator
by Red Hat Bugzilla 06 Apr '17

06 Apr '17

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: missing dependancy on perl-Email-Simple-Creator https://bugzilla.redhat.com/show_bug.cgi?id=783468 Summary: missing dependancy on perl-Email-Simple-Creator Product: Fedora EPEL Version: el5 Platform: Unspecified OS/Version: Unspecified Status: NEW Severity: unspecified Priority: unspecified Component: perl-Email-MIME-Creator AssignedTo: tcallawa(a)redhat.com ReportedBy: carl.johnstone(a)onthebeach.co.uk QAContact: extras-qa(a)fedoraproject.org CC: tcallawa(a)redhat.com, fedora-perl-devel-list(a)redhat.com Classification: Fedora Story Points: --- Type: --- Regression: --- Mount Type: --- Documentation: --- Description of problem: The perl-Email-MIME-Creator package has a missing dependency on Email::Simple::Creator / perl-Email-Simple-Creator Version-Release number of selected component (if applicable): perl-Email-MIME-Creator.noarch 0:1.453-2.el5 -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

2 1

[Bug 706721] New: Missing Requires: perl(Clone)
by Red Hat Bugzilla 06 Apr '17

06 Apr '17

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: Missing Requires: perl(Clone) https://bugzilla.redhat.com/show_bug.cgi?id=706721 Summary: Missing Requires: perl(Clone) Product: Fedora EPEL Version: el5 Platform: Unspecified OS/Version: Unspecified Status: NEW Severity: unspecified Priority: unspecified Component: perl-Hash-Merge AssignedTo: tcallawa(a)redhat.com ReportedBy: redhat-bugzilla(a)camperquake.de QAContact: extras-qa(a)fedoraproject.org CC: tcallawa(a)redhat.com, iarnell(a)gmail.com, fedora-perl-devel-list(a)redhat.com Classification: Fedora Story Points: --- Description of problem: perl-Hash-Merge requires perl(Clone), but the spec does not reflect this. Version-Release number of selected component (if applicable): perl-Hash-Merge-0.11-2.el5 How reproducible: Look at /usr/lib/perl5/vendor_perl/5.8.8/Hash/Merge.pm, line 231 Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

2 1

[Bug 703101] New: [PATCH] DateTime should be rebuilt on tzdata updates
by Red Hat Bugzilla 06 Apr '17

06 Apr '17

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: [PATCH] DateTime should be rebuilt on tzdata updates https://bugzilla.redhat.com/show_bug.cgi?id=703101 Summary: [PATCH] DateTime should be rebuilt on tzdata updates Product: Fedora EPEL Version: el5 Platform: Unspecified OS/Version: Unspecified Status: NEW Severity: unspecified Priority: unspecified Component: perl-DateTime AssignedTo: tremble(a)tremble.org.uk ReportedBy: lkundrak(a)v3.sk QAContact: extras-qa(a)fedoraproject.org CC: fedora-perl-devel-list(a)redhat.com, tremble(a)tremble.org.uk Classification: Fedora Story Points: --- Description of problem: tzdata package updates and new time zones are added from time to time (such as Asia/Kolkata). As DateTime contains files generated from it, it should be rebuilt on each such update. The patch attached adds an explicit dependency on specific version of tzdata, so that it would disallow updates in case of tzdata rebuild w/o DateTime rebuilt, so that it would no go unnoticed. Additional info: At the very least, even if the patch is rejected, please trigger a DateTime rebuild. Maybe coordinate with tzdata maintainer on future updates. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

2 4

[Bug 757089] New: cpanspec error: Dest dir longer than base dir is not supported
by Red Hat Bugzilla 04 Apr '17

04 Apr '17

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: cpanspec error: Dest dir longer than base dir is not supported https://bugzilla.redhat.com/show_bug.cgi?id=757089 Summary: cpanspec error: Dest dir longer than base dir is not supported Product: Fedora Version: 16 Platform: Unspecified OS/Version: Unspecified Status: NEW Severity: unspecified Priority: unspecified Component: cpanspec AssignedTo: steve(a)silug.org ReportedBy: kas(a)fi.muni.cz QAContact: extras-qa(a)fedoraproject.org CC: steve(a)silug.org, fedora-perl-devel-list(a)redhat.com Classification: Fedora Story Points: --- Type: --- Description of problem: I am trying to build some CPAN modules as RPMs (namely Env::C and IO::Socket::Multicast), but the build fails with the following error: [...] extracting debug info from /root/rpmbuild/BUILDROOT/perl-Env-C-0.08-1.fc16.x86_64/usr/lib64/perl5/vendor_perl/auto/Env/C/C.so Dest dir longer than base dir is not supported error: Bad exit status from /var/tmp/rpm-tmp.LI9AHv (%install) I am not sure why the length of both paths should matter at all, but the cause of the problem is that cpanspec sets up too long buildroot. Taking the generated spec file, shortening the buildroot path, and rebuilding the package using the modified spec file works for me Before: BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) After: BuildRoot: %{_tmppath}/%{name} Version-Release number of selected component (if applicable): cpanspec-1.78-9.fc16.noarch How reproducible: 100 % Steps to Reproduce: 1. cpanspec --build Env::C Actual results: build fails with the above error message Expected results: perl-Env-C binary and source RPMs should be built -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

2 10

[Bug 1307195] New: perl-IPC-Cmd-0.94 is available
by Red Hat Bugzilla 29 Mar '17

29 Mar '17

https://bugzilla.redhat.com/show_bug.cgi?id=1307195 Bug ID: 1307195 Summary: perl-IPC-Cmd-0.94 is available Product: Fedora Version: rawhide Component: perl-IPC-Cmd Keywords: FutureFeature, Triaged Assignee: ppisar(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: paul(a)city-fan.org, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com, psabata(a)redhat.com Latest upstream release: 0.94 Current version/release in rawhide: 0.92-347.fc24 URL: http://search.cpan.org/dist/IPC-Cmd/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. -- You are receiving this mail because: You are on the CC list for the bug.

2 21

[Bug 1332336] New: perl-Inline-Struct-0.21 is available
by Red Hat Bugzilla 29 Mar '17

29 Mar '17

https://bugzilla.redhat.com/show_bug.cgi?id=1332336 Bug ID: 1332336 Summary: perl-Inline-Struct-0.21 is available Product: Fedora Version: rawhide Component: perl-Inline-Struct Keywords: FutureFeature, Triaged Assignee: ppisar(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com, psabata(a)redhat.com Latest upstream release: 0.21 Current version/release in rawhide: 0.18-4.fc24 URL: http://search.cpan.org/dist/Inline-Struct/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/2988/ -- You are receiving this mail because: You are on the CC list for the bug.

2 14

[Bug 1272796] New: ctstream-24 is available
by Red Hat Bugzilla 29 Mar '17

29 Mar '17

https://bugzilla.redhat.com/show_bug.cgi?id=1272796 Bug ID: 1272796 Summary: ctstream-24 is available Product: Fedora Version: rawhide Component: ctstream Keywords: FutureFeature, Triaged Assignee: ppisar(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com Latest upstream release: 24 Current version/release in rawhide: 23-2.fc23 URL: http://xpisar.wz.cz/ctstream/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. -- You are receiving this mail because: You are on the CC list for the bug.

2 19

← Newer
1
...
5
6
7
8
9
10
11
...
152
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel November 2016