perl-devel February 2022

perl-devel@lists.fedoraproject.org

5 participants
295 discussions

[Bug 2035273] New: CVE-2020-16156 perl-CPAN: allows Signature Verification Bypass
by bugzilla＠redhat.com 03 Jun '25

03 Jun '25

https://bugzilla.redhat.com/show_bug.cgi?id=2035273 Bug ID: 2035273 Summary: CVE-2020-16156 perl-CPAN: allows Signature Verification Bypass Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mrehak(a)redhat.com CC: caswilli(a)redhat.com, hhorak(a)redhat.com, jorton(a)redhat.com, jplesnik(a)redhat.com, kaycoth(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, perl-maint-list(a)redhat.com, ppisar(a)redhat.com Target Milestone: --- Classification: Other It was found that cpan and cpanm are vulnerable to a signature verification bypass. Additionally, CPAN::Checksums (used by PAUSE) does not uniquely identify packages in the signed CHECKSUMS file, enabling a supply chain attack. Reference: https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2035273

1 16

[Bug 1666098] New: Overspecification in perl -MExtUtils::Embed -e ldopts
by bugzilla＠redhat.com 25 Apr '25

25 Apr '25

https://bugzilla.redhat.com/show_bug.cgi?id=1666098 Bug ID: 1666098 Summary: Overspecification in perl -MExtUtils::Embed -e ldopts Product: Fedora Version: rawhide Status: NEW Component: perl Assignee: jplesnik(a)redhat.com Reporter: bugs.michael(a)gmx.net QA Contact: extras-qa(a)fedoraproject.org CC: caillon+fedoraproject(a)gmail.com, iarnell(a)gmail.com, jplesnik(a)redhat.com, kasal(a)ucw.cz, mbarnes(a)fastmail.com, mmaslano(a)redhat.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com, psabata(a)redhat.com, rhughes(a)redhat.com, sandmann(a)redhat.com, tcallawa(a)redhat.com Target Milestone: --- Classification: Fedora The following command is supposed to return the ldflags that are needed to link with libperl. Instead, it returns everything that has been specified when building libperl itself. Not limited to Fedora's global flags and several libraries that aren't needed when linking shared. As a result, programs relink also with those libs instead of just libperl. $ perl -MExtUtils::Embed -e ldopts -Wl,--enable-new-dtags -Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -fstack-protector-strong -L/usr/local/lib -L/usr/lib64/perl5/CORE -lperl -lpthread -lresolv -ldl -lm -lcrypt -lutil -lc Please clean up the flags and return only -L/usr/lib64/perl5/CORE -lperl. -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 1765886] New: Please provide EPEL8 package
by bugzilla＠redhat.com 08 Feb '25

08 Feb '25

https://bugzilla.redhat.com/show_bug.cgi?id=1765886 Bug ID: 1765886 Summary: Please provide EPEL8 package Product: Fedora EPEL Version: epel8 Status: NEW Component: perl-LockFile-Simple Assignee: andreas(a)bawue.net Reporter: sergio(a)serjux.com QA Contact: extras-qa(a)fedoraproject.org CC: andreas(a)bawue.net, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora We need for some packages debmirror is the first [1] Thanks [1] https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-196c55d9bd -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1877444] New: perl-dbi: DBD::File drivers open files from folders other than specifically passed
by bugzilla＠redhat.com 06 Feb '25

06 Feb '25

https://bugzilla.redhat.com/show_bug.cgi?id=1877444 Bug ID: 1877444 Summary: perl-dbi: DBD::File drivers open files from folders other than specifically passed Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: psampaio(a)redhat.com CC: caillon+fedoraproject(a)gmail.com, hhorak(a)redhat.com, john.j5live(a)gmail.com, jorton(a)redhat.com, jplesnik(a)redhat.com, kasal(a)ucw.cz, perl-devel(a)lists.fedoraproject.org, perl-maint-list(a)redhat.com, ppisar(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com Target Milestone: --- Classification: Other -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 2053941] New: The Fedora BuildRequires is missing an the license files are listed as %doc
by bugzilla＠redhat.com 05 Dec '24

05 Dec '24

https://bugzilla.redhat.com/show_bug.cgi?id=2053941 Bug ID: 2053941 Summary: The Fedora BuildRequires is missing an the license files are listed as %doc Product: Fedora Version: 34 Status: NEW Component: cpanspec Assignee: psabata(a)redhat.com Reporter: bugzilla(a)terrortux.de QA Contact: extras-qa(a)fedoraproject.org CC: ktdreyer(a)ktdreyer.com, perl-devel(a)lists.fedoraproject.org, psabata(a)redhat.com, steve(a)silug.org, strobert(a)strobe.net Target Milestone: --- Classification: Fedora Description of problem: In the generated spec file, this line is missing: # needes by all perl packages BuildRequires: perl-generators perl-interpreter perl-devel perl And the license files of the generated spec file are marked as %doc instant of %license Version-Release number of selected component (if applicable): cpanspec-1.78-39.fc34.noarch How reproducible: Every time Steps to Reproduce: 1. Call cpanspec Sort::Versions for example Actual results: See above Expected results: Correct spec file Additional info: Also the old %setup macro is used. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2053941

1 12

[rpms/perl-NetAddr-IP] PR #1: Spec file cleanups: Use make_build and make_install macros
by Tom Stellard 04 Oct '24

04 Oct '24

tstellar opened a new pull-request against the project: `perl-NetAddr-IP` that you are following: `` Spec file cleanups: Use make_build and make_install macros `` To reply, visit the link below https://src.fedoraproject.org/rpms/perl-NetAddr-IP/pull-request/1

2 4

[Bug 1803973] New: CGI::Session is missing in epel8
by bugzilla＠redhat.com 19 Sep '24

19 Sep '24

https://bugzilla.redhat.com/show_bug.cgi?id=1803973 Bug ID: 1803973 Summary: CGI::Session is missing in epel8 Product: Fedora EPEL Version: epel8 Status: NEW Component: perl-CGI-Session Assignee: andreas(a)bawue.net Reporter: netwiz(a)crc.id.au QA Contact: extras-qa(a)fedoraproject.org CC: andreas(a)bawue.net, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora The perl-CGI-Session package is not available for EPEL8. Please import & build for EPEL8. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 2028353] New: Request to update perl-CDB_File to 1.03 (or newer)
by bugzilla＠redhat.com 16 Aug '24

16 Aug '24

https://bugzilla.redhat.com/show_bug.cgi?id=2028353 Bug ID: 2028353 Summary: Request to update perl-CDB_File to 1.03 (or newer) Product: Fedora EPEL Version: epel8 Hardware: All OS: Linux Status: NEW Component: perl-CDB_File Severity: high Assignee: mmckinst(a)umich.edu Reporter: fhirtz(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: mmckinst(a)umich.edu, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Description of problem: Good morning, I'm working with someone who's running into a significant issue with an automation system that they use (quattor.org) due to a bug in the version of perl-CDB_File that's currently available in EPEL. The bug in question is: https://github.com/toddr/CDB_File/commit/9147df2c426b6ef8530fbc501e030168e1… This was addressed in version 1.03 and we were seeing if it might be possible to either include the patch as a backport, or more likely rebase to 1.03 (or newer)? Thank you! Version-Release number of selected component (if applicable): perl-CDB_File-1.02 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2028353

1 3

[Bug 2037860] New: Please branch and build perl-HTML-Element-Extended for EPEL 9
by bugzilla＠redhat.com 06 Aug '24

06 Aug '24

https://bugzilla.redhat.com/show_bug.cgi?id=2037860 Bug ID: 2037860 Summary: Please branch and build perl-HTML-Element-Extended for EPEL 9 Product: Fedora EPEL Version: epel9 Status: NEW Component: perl-HTML-Element-Extended Assignee: notting(a)splat.cc Reporter: paul(a)city-fan.org QA Contact: extras-qa(a)fedoraproject.org CC: emmanuel(a)seyman.fr, notting(a)splat.cc, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Could you please branch and build perl-HTML-Element-Extended for EPEL 9 ? If you like you could add me (FAS: pghmcfc) as a committer to the package and I'll do it myself. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2037860

1 7

[Bug 1835353] New: rubygem-mail: Out of memory issue through nested MIME parts
by bugzilla＠redhat.com 09 Jul '24

09 Jul '24

https://bugzilla.redhat.com/show_bug.cgi?id=1835353 Bug ID: 1835353 Summary: rubygem-mail: Out of memory issue through nested MIME parts Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: psampaio(a)redhat.com CC: akarol(a)redhat.com, alexl(a)redhat.com, bbuckingham(a)redhat.com, bcourt(a)redhat.com, bkearney(a)redhat.com, btotty(a)redhat.com, caillon+fedoraproject(a)gmail.com, caolanm(a)redhat.com, dmetzger(a)redhat.com, gmccullo(a)redhat.com, gnome-sig(a)lists.fedoraproject.org, gtanzill(a)redhat.com, hhudgeon(a)redhat.com, jfrey(a)redhat.com, jhardy(a)redhat.com, john.j5live(a)gmail.com, jose.p.oliveira.oss(a)gmail.com, lzap(a)redhat.com, mclasen(a)redhat.com, mmccune(a)redhat.com, nmoumoul(a)redhat.com, obarenbo(a)redhat.com, paul(a)city-fan.org, perl-devel(a)lists.fedoraproject.org, rchan(a)redhat.com, rhughes(a)redhat.com, rjerrido(a)redhat.com, rob.myers(a)gtri.gatech.edu, roliveri(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com, simaishi(a)redhat.com, smallamp(a)redhat.com, sokeeffe(a)redhat.com, tbrisker(a)redhat.com, tcallawa(a)redhat.com, vondruch(a)redhat.com, walter.pete(a)yandex.com, xavier(a)bachelot.org Target Milestone: --- Classification: Other A possible DoS issue may affect several MIME parsers. Messages with too many tiny nested MIME parts can lead to memory exhaustion on split(). References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960064 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960062 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960159 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960158 -- You are receiving this mail because: You are on the CC list for the bug.

1 14

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel February 2022