perl-devel June 2017

perl-devel@lists.fedoraproject.org

12 participants
4146 discussions

[Bug 1456770] New: CVE-2017-0373 perl-Config-Model: gen_class_pod implementation has dangerous "use lib" line
by bugzilla＠redhat.com 14 Aug '18

14 Aug '18

https://bugzilla.redhat.com/show_bug.cgi?id=1456770 Bug ID: 1456770 Summary: CVE-2017-0373 perl-Config-Model: gen_class_pod implementation has dangerous "use lib" line Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: david.hannequin(a)gmail.com, perl-devel(a)lists.fedoraproject.org The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file. Debian patch: https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1329059] New: Don't produce terminal control sequences in perldoc
by Red Hat Bugzilla 10 Aug '18

10 Aug '18

https://bugzilla.redhat.com/show_bug.cgi?id=1329059 Bug ID: 1329059 Summary: Don't produce terminal control sequences in perldoc Product: Fedora Version: rawhide Component: perl-Pod-Perldoc Keywords: FutureFeature, Reopened Assignee: ppisar(a)redhat.com Reporter: praiskup(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: extras-qa(a)fedoraproject.org, hhorak(a)redhat.com, jmlich83(a)gmail.com, mmaslano(a)redhat.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com, ToddAndMargo(a)zoho.com Depends On: 1258741 +++ This bug was initially created as a clone of Bug #1258741 +++ Short summary, command 'PAGER=less perldoc perlreref' behaves oddly. The issue is that perldoc *always* produces some terminal (color?) sequences, and less (by default) is careful to escape terminal sequences rather then printing them in a raw form. This bug is here to ask whether it is possible (or makes sense) to not produce terminal sequences in perldoc output. Or simply request for brainstorm. See the original bug report for more info. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1258741 [Bug 1258741] "PAGER=less perldoc perlreref" escapes color sequences, drop them or interpret them -- You are receiving this mail because: You are on the CC list for the bug.

2 6

[Bug 1376845] New: The license tag should mention GPL+ or Artistic
by Red Hat Bugzilla 09 Aug '18

09 Aug '18

https://bugzilla.redhat.com/show_bug.cgi?id=1376845 Bug ID: 1376845 Summary: The license tag should mention GPL+ or Artistic Product: Fedora Version: rawhide Component: perl-Params-Validate Assignee: rc040203(a)freenet.de Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: lxtnow(a)gmail.com, perl-devel(a)lists.fedoraproject.org, rc040203(a)freenet.de Params-Validate-1.24/c/ppport.h contains license declaration: This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. The file is included into compilation unit when compiling lib/Params/Validate/XS.c into XS.so. Thus I think the spec file should mention "GPL+ or Artistic" in the License tag. Now it declares "Artistic 2.0" only. -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 1406558] New: build for EPEL7
by Red Hat Bugzilla 27 Jul '18

27 Jul '18

https://bugzilla.redhat.com/show_bug.cgi?id=1406558 Bug ID: 1406558 Summary: build for EPEL7 Product: Fedora EPEL Version: epel7 Component: perl-Coro Assignee: emmanuel(a)seyman.fr Reporter: carl.george(a)rackspace.com QA Contact: extras-qa(a)fedoraproject.org CC: emmanuel(a)seyman.fr, perl-devel(a)lists.fedoraproject.org I'm a co-maintainer of uwsgi in Fedora and EPEL. Uwsgi has a subpackage for a coroae plugin, but it is disabled on EPEL7 because it needs this package. Please consider adding an EPEL7 branch for perl-Coro so that I can enable the uwsgi-plugin-coroae subpackage for EPEL7. -- You are receiving this mail because: You are on the CC list for the bug.

2 20

[Bug 1098012] New: autoclass has been replaced by Class-AutoClass
by Red Hat Bugzilla 14 Jun '18

14 Jun '18

https://bugzilla.redhat.com/show_bug.cgi?id=1098012 Bug ID: 1098012 Summary: autoclass has been replaced by Class-AutoClass Product: Fedora Version: rawhide Component: perl-AutoClass Assignee: alexl(a)users.sourceforge.net Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: alexl(a)users.sourceforge.net, perl-devel(a)lists.fedoraproject.org The autoclass-v1.01 CPAN distribution in Fedora is old. Upstream has been replaces by Class-AutoClass CPAN distribution. Please package perl-Class-AutoClass and obsolete this perl-autoclass package. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=VmbYCqw8qI&a=cc_unsubscribe

2 6

[Bug 1410774] New: perl-PDL-Graphics-PLplot-0.71-3.fc26 FTBFS
by Red Hat Bugzilla 29 May '18

29 May '18

https://bugzilla.redhat.com/show_bug.cgi?id=1410774 Bug ID: 1410774 Summary: perl-PDL-Graphics-PLplot-0.71-3.fc26 FTBFS Product: Fedora Version: rawhide Component: perl-PDL-Graphics-PLplot Assignee: ppisar(a)redhat.com Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: i(a)cicku.me, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com perl-PDL-Graphics-PLplot-0.71-3.fc26 fails to build in F26 because tests fail on 64-bit PowerPC: t/plplot.t ................ All 15 subtests passed sh: line 1: 28335 Segmentation fault (core dumped) perl -Mblib ./t/x09.pl -dev svg -o x09p.svg -fam > /dev/null 2>&1 # Failed test 'Script ./t/x09.pl ran successfully' # at t/plplot_library_tests.t line 68. # Failed test 'Output file x09p.svg.2 matches C output' # at t/plplot_library_tests.t line 74. sh: line 1: 28730 Segmentation fault (core dumped) perl -Mblib ./t/x22.pl -dev svg -o x22p.svg -fam > /dev/null 2>&1 # Failed test 'Script ./t/x22.pl ran successfully' # at t/plplot_library_tests.t line 68. # Failed test 'Output file x22p.svg.1 matches C output' # at t/plplot_library_tests.t line 74. # Looks like you failed 4 tests of 221. t/plplot_library_tests.t .. Dubious, test returned 4 (wstat 1024, 0x400) Failed 4/221 subtests Test Summary Report ------------------- t/plplot.t (Wstat: 139 Tests: 15 Failed: 0) Non-zero wait status: 139 Parse errors: No plan found in TAP output t/plplot_library_tests.t (Wstat: 1024 Tests: 221 Failed: 4) Failed tests: 67, 69, 122-123 Non-zero exit status: 4 Files=2, Tests=236, 41 wallclock secs ( 0.05 usr 0.01 sys + 13.73 cusr 1.06 csys = 14.85 CPU) Result: FAIL -- You are receiving this mail because: You are on the CC list for the bug.

2 14

[Bug 1384434] New: perl-Audio-Beep build is interactive
by Red Hat Bugzilla 29 May '18

29 May '18

https://bugzilla.redhat.com/show_bug.cgi?id=1384434 Bug ID: 1384434 Summary: perl-Audio-Beep build is interactive Product: Fedora Version: rawhide Component: perl-Audio-Beep Assignee: jan.klepek(a)gmail.com Reporter: rjones(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jan.klepek(a)gmail.com, perl-devel(a)lists.fedoraproject.org Description of problem: The perl-Audio-Beep package fails to build from source unless stdin is /dev/null. This is because the build interactively asks questions: $ fedpkg local Downloading Audio-Beep-0.11.tar.gz ######################################################################## 100.0% Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.DDaXlx + umask 022 + cd /home/rjones/d/fedora/perl-Audio-Beep/master + cd /home/rjones/d/fedora/perl-Audio-Beep/master + rm -rf Audio-Beep-0.11 + /usr/bin/gzip -dc /home/rjones/d/fedora/perl-Audio-Beep/master/Audio-Beep-0.11.tar.gz + /usr/bin/tar -xof - + STATUS=0 + '[' 0 -ne 0 ']' + cd Audio-Beep-0.11 + /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w . + chmod -x music/beep_player.pl + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.1IrEhL + umask 022 + cd /home/rjones/d/fedora/perl-Audio-Beep/master + cd Audio-Beep-0.11 + /usr/bin/perl Makefile.PL INSTALLDIRS=vendor 'OPTIMIZE=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic' Would you like to install Japanese documentation? If you enter 'y' then i will try to install Japanese docs alongside English ones. On platforms using 'man' manpages (typically on UN*X) Japanese documentation will be available transparently to users whose locale language is set to Japanese. On other platforms the documentation will be available as Audio::Beep_jp Default is to not install Japanese docs. [N/y] (At this point the build hangs) Version-Release number of selected component (if applicable): perl-Audio-Beep-0.11-17.fc26 How reproducible: 100% Steps to Reproduce: 1. Run 'fedpkg local', 'rpmbuild' etc. -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1414996] New: please stop sending email to root in build tests
by Red Hat Bugzilla 29 May '18

29 May '18

https://bugzilla.redhat.com/show_bug.cgi?id=1414996 Bug ID: 1414996 Summary: please stop sending email to root in build tests Product: Fedora Version: rawhide Component: perl-Log-Dispatch Assignee: tcallawa(a)redhat.com Reporter: kevin(a)scrye.com QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, rc040203(a)freenet.de, tcallawa(a)redhat.com In tests perl-Log-Dispatch seems to send an email to root(a)localhost.localdomain saying something a test passing. It's from "LogDispatch(a)foo.bar" to "root(a)localhost.localdomain" Due to our setup this email tries to bound, but foo.bar isn't found so it just gets dropped. It would be nice to not send it at all. :) -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1210614] New: Shell command injection in c2ph tool
by Red Hat Bugzilla 03 May '18

03 May '18

https://bugzilla.redhat.com/show_bug.cgi?id=1210614 Bug ID: 1210614 Summary: Shell command injection in c2ph tool Product: Fedora Version: 21 Component: perl Assignee: jplesnik(a)redhat.com Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com, jplesnik(a)redhat.com, kasal(a)ucw.cz, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com, psabata(a)redhat.com, rc040203(a)freenet.de, tcallawa(a)redhat.com The c2ph suffers from shell command injection: $ c2ph -n '; id; x.c' cc: fatal error: no input files compilation terminated. uid=500(petr) gid=500(petr) groups=500(petr),63(audio),100(users),478(mock) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 sh: x.c: command not found Tested with perl-5.18.4-308.fc21.x86_64. Reported to upstream <https://rt.perl.org/Ticket/Display.html?id=124275>. -- You are receiving this mail because: You are on the CC list for the bug.

2 12

[Bug 1081559] New: perl-YAML-LibYAML bundler yaml-1.0.4
by Red Hat Bugzilla 03 May '18

03 May '18

https://bugzilla.redhat.com/show_bug.cgi?id=1081559 Bug ID: 1081559 Summary: perl-YAML-LibYAML bundler yaml-1.0.4 Product: Fedora Version: rawhide Component: perl-YAML-LibYAML Severity: high Assignee: jplesnik(a)redhat.com Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, paul(a)city-fan.org, perl-devel(a)lists.fedoraproject.org perl-YAML-LibYAML bundles yaml sources. yaml-1.0.4 with two small modifications in emmiter.c and scanner.c. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=NQ1kUHtESn&a=cc_unsubscribe

2 14

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel June 2017