https://bugzilla.redhat.com/show_bug.cgi?id=1570874
Bug ID: 1570874
Summary: Installing perl-PAR-Packer causes perl DOWNGRADE
Product: Fedora
Version: 27
Component: perl-PAR-Packer
Severity: high
Assignee: jplesnik(a)redhat.com
Reporter: jvromans(a)squirrel.nl
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com, mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
Description of problem:
Upgrading (or installing) perl-PAR-Packer causes a downgrade of perl and all
associated modules.
Version-Release number of selected component (if applicable):
perl-PAR-Packer 1.041
How reproducible:
Always.
Steps to Reproduce:
# dnf install perl-PAR-Packer
Last metadata expiration check: 2:31:58 ago on Mon 23 Apr 2018 14:28:43 CEST.
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
perl-PAR-Packer x86_64 1.041-1.fc27 updates 2.2 M
Downgrading:
perl x86_64 4:5.26.1-401.fc27 fedora 67 k
perl-Attribute-Handlers noarch 0.99-401.fc27 fedora 83 k
perl-Devel-Peek x86_64 1.26-401.fc27 fedora 87 k
perl-Devel-SelfStubber noarch 1.06-401.fc27 fedora 70 k
perl-Errno x86_64 1.28-401.fc27 fedora 71 k
...
perl-utils noarch 5.26.1-401.fc27 fedora 123 k
Transaction Summary
================================================================================
Install 1 Package
Downgrade 24 Packages
Additional info:
# rpm -qa | grep perl-5
perl-5.26.2-404.fc27.x86_64
perl-PAR-Packer relies on the installed perl binary and must be rebuilt with
every upgrade of the perl package. Current perl is 5.26.2, but perl-PAR-Packer
1.041-1 is built against perl 5.26.1.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1563022
Bug ID: 1563022
Summary: perl-CPAN-Perl-Releases-3.52 is available
Product: Fedora
Version: rawhide
Component: perl-CPAN-Perl-Releases
Keywords: FutureFeature, Triaged
Assignee: jplesnik(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: iarnell(a)gmail.com, jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
Latest upstream release: 3.52
Current version/release in rawhide: 3.50-1.fc29
URL: http://search.cpan.org/dist/CPAN-Perl-Releases/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/5881/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1570225
Bug ID: 1570225
Summary: perl-Module-CoreList-5.20180420 is available
Product: Fedora
Version: rawhide
Component: perl-Module-CoreList
Keywords: FutureFeature, Triaged
Assignee: ppisar(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: jose.p.oliveira.oss(a)gmail.com, jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
steve(a)silug.org, tcallawa(a)redhat.com
Latest upstream release: 5.20180420
Current version/release in rawhide: 5.20180415-1.fc29
URL: http://search.cpan.org/dist/Module-CoreList/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/3080/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1569995
Bug ID: 1569995
Summary: perl-Module-CoreList-5.20180415 is available
Product: Fedora
Version: rawhide
Component: perl-Module-CoreList
Keywords: FutureFeature, Triaged
Assignee: ppisar(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: jose.p.oliveira.oss(a)gmail.com, jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
steve(a)silug.org, tcallawa(a)redhat.com
Latest upstream release: 5.20180415
Current version/release in rawhide: 5.20180414-1.fc29
URL: http://search.cpan.org/dist/Module-CoreList/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/3080/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1567568
Bug ID: 1567568
Summary: perl-Module-CoreList-5.20180414 is available
Product: Fedora
Version: rawhide
Component: perl-Module-CoreList
Keywords: FutureFeature, Triaged
Assignee: ppisar(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: jose.p.oliveira.oss(a)gmail.com, jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
steve(a)silug.org, tcallawa(a)redhat.com
Latest upstream release: 5.20180414
Current version/release in rawhide: 5.20180414-0.1.RC1.fc29
URL: http://search.cpan.org/dist/Module-CoreList/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/3080/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1456771
Bug ID: 1456771
Summary: CVE-2017-0374 perl-Config-Model: Local privilege
escalation via crafted model
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: david.hannequin(a)gmail.com,
perl-devel(a)lists.fedoraproject.org
lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102
allows local users to gain privileges via a crafted model in the current
working directory, related to use of . with the INC array.
Debian patch:
https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/…
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1456770
Bug ID: 1456770
Summary: CVE-2017-0373 perl-Config-Model: gen_class_pod
implementation has dangerous "use lib" line
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: david.hannequin(a)gmail.com,
perl-devel(a)lists.fedoraproject.org
The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in
Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib"
line, which allows remote attackers to have an unspecified impact via a crafted
Debian package file.
Debian patch:
https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/…
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1329059
Bug ID: 1329059
Summary: Don't produce terminal control sequences in perldoc
Product: Fedora
Version: rawhide
Component: perl-Pod-Perldoc
Keywords: FutureFeature, Reopened
Assignee: ppisar(a)redhat.com
Reporter: praiskup(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: extras-qa(a)fedoraproject.org, hhorak(a)redhat.com,
jmlich83(a)gmail.com, mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
ToddAndMargo(a)zoho.com
Depends On: 1258741
+++ This bug was initially created as a clone of Bug #1258741 +++
Short summary, command 'PAGER=less perldoc perlreref' behaves oddly.
The issue is that perldoc *always* produces some terminal (color?) sequences,
and less (by default) is careful to escape terminal sequences rather then
printing them in a raw form.
This bug is here to ask whether it is possible (or makes sense) to not produce
terminal sequences in perldoc output. Or simply request for brainstorm.
See the original bug report for more info.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1258741
[Bug 1258741] "PAGER=less perldoc perlreref" escapes color sequences, drop
them or interpret them
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1376845
Bug ID: 1376845
Summary: The license tag should mention GPL+ or Artistic
Product: Fedora
Version: rawhide
Component: perl-Params-Validate
Assignee: rc040203(a)freenet.de
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: lxtnow(a)gmail.com, perl-devel(a)lists.fedoraproject.org,
rc040203(a)freenet.de
Params-Validate-1.24/c/ppport.h contains license declaration:
This program is free software; you can redistribute it and/or
modify it under the same terms as Perl itself.
The file is included into compilation unit when compiling
lib/Params/Validate/XS.c into XS.so. Thus I think the spec file should mention
"GPL+ or Artistic" in the License tag. Now it declares "Artistic 2.0" only.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1406558
Bug ID: 1406558
Summary: build for EPEL7
Product: Fedora EPEL
Version: epel7
Component: perl-Coro
Assignee: emmanuel(a)seyman.fr
Reporter: carl.george(a)rackspace.com
QA Contact: extras-qa(a)fedoraproject.org
CC: emmanuel(a)seyman.fr, perl-devel(a)lists.fedoraproject.org
I'm a co-maintainer of uwsgi in Fedora and EPEL. Uwsgi has a subpackage for a
coroae plugin, but it is disabled on EPEL7 because it needs this package.
Please consider adding an EPEL7 branch for perl-Coro so that I can enable the
uwsgi-plugin-coroae subpackage for EPEL7.
--
You are receiving this mail because:
You are on the CC list for the bug.