perl-devel January 2024

perl-devel@lists.fedoraproject.org

4 participants
197 discussions

[Bug 2035273] New: CVE-2020-16156 perl-CPAN: allows Signature Verification Bypass
by bugzilla＠redhat.com 03 Jun '25

03 Jun '25

https://bugzilla.redhat.com/show_bug.cgi?id=2035273 Bug ID: 2035273 Summary: CVE-2020-16156 perl-CPAN: allows Signature Verification Bypass Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mrehak(a)redhat.com CC: caswilli(a)redhat.com, hhorak(a)redhat.com, jorton(a)redhat.com, jplesnik(a)redhat.com, kaycoth(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, perl-maint-list(a)redhat.com, ppisar(a)redhat.com Target Milestone: --- Classification: Other It was found that cpan and cpanm are vulnerable to a signature verification bypass. Additionally, CPAN::Checksums (used by PAUSE) does not uniquely identify packages in the signed CHECKSUMS file, enabling a supply chain attack. Reference: https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2035273

1 16

[Bug 2261445] New: perl-Authen-Krb5-Admin: FTBFS in Fedora rawhide/f40
by bugzilla＠redhat.com 16 May '25

16 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2261445 Bug ID: 2261445 Summary: perl-Authen-Krb5-Admin: FTBFS in Fedora rawhide/f40 Product: Fedora Version: rawhide Status: NEW Component: perl-Authen-Krb5-Admin Assignee: chkr(a)plauener.de Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: chkr(a)plauener.de, perl-devel(a)lists.fedoraproject.org Blocks: 2231791 (F40FTBFS) Target Milestone: --- Classification: Fedora perl-Authen-Krb5-Admin failed to build from source in Fedora rawhide/f40 https://koji.fedoraproject.org/koji/taskinfo?taskID=112340152 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild Please fix perl-Authen-Krb5-Admin at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, perl-Authen-Krb5-Admin will be orphaned. Before branching of Fedora 41, perl-Authen-Krb5-Admin will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails… Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2231791 [Bug 2231791] Fedora 40 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2261445 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 9

[Bug 2259166] New: perl-PDF-Haru-1.00-42.fc40 FTBFS: Haru.xs:1195:44: error: passing argument 2 of ‘HPDF_Page_SetDash’ from incompatible pointer type
by bugzilla＠redhat.com 16 May '25

16 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2259166 Bug ID: 2259166 Summary: perl-PDF-Haru-1.00-42.fc40 FTBFS: Haru.xs:1195:44: error: passing argument 2 of ‘HPDF_Page_SetDash’ from incompatible pointer type Product: Fedora Version: rawhide URL: https://koschei.fedoraproject.org/package/perl-PDF-Har u Status: NEW Component: perl-PDF-Haru Assignee: robinlee.sysu(a)gmail.com Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, robinlee.sysu(a)gmail.com Blocks: 2231791 (F40FTBFS,RAWHIDEFTBFS) Target Milestone: --- Classification: Fedora perl-PDF-Haru-1.00-42.fc40 fails to build in Fedora 40: gcc -c -I. -D_REENTRANT -D_GNU_SOURCE -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -fwrapv -fno-strict-aliasing -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -DVERSION=\"1.00\" -DXS_VERSION=\"1.00\" -fPIC "-I/usr/lib64/perl5/CORE" Haru.c Haru.xs: In function ‘XS_PDF__Haru__Page_SetDash’: Haru.xs:1195:44: error: passing argument 2 of ‘HPDF_Page_SetDash’ from incompatible pointer type [-Wincompatible-pointer-types] 1195 | RETVAL = HPDF_Page_SetDash (page, ptn, num_elem + 1, phase); | ^~~ | | | HPDF_UINT16 * {aka short unsigned int *} In file included from Haru.xs:5: /usr/include/hpdf.h:1192:39: note: expected ‘const HPDF_REAL *’ {aka ‘const float *’} but argument is of type ‘HPDF_UINT16 *’ {aka ‘short unsigned int *’} 1192 | const HPDF_REAL *dash_ptn, | ~~~~~~~~~~~~~~~~~~^~~~~~~~ A difference between passing and failing build roots is at <https://koschei.fedoraproject.org/build/17079758>. This failure is probably triggered by upgrading gcc from 13.2.1-6.fc40 to 14.0.1-0.1.fc40. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2231791 [Bug 2231791] Fedora 40 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2259166 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

[Bug 2257106] New: F40FailsToInstall: perl-WWW-Google-Contacts
by bugzilla＠redhat.com 16 May '25

16 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2257106 Bug ID: 2257106 Summary: F40FailsToInstall: perl-WWW-Google-Contacts Product: Fedora Version: rawhide Status: NEW Component: perl-WWW-Google-Contacts Assignee: avibrazil(a)gmail.com Reporter: fti-bugs(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: avibrazil(a)gmail.com, perl-devel(a)lists.fedoraproject.org Blocks: 2231790 (F40FailsToInstall,RAWHIDEFailsToInstall) Target Milestone: --- Classification: Fedora Hello, Please note that this comment was generated automatically by https://pagure.io/releng/blob/main/f/scripts/ftbfs-fti/follow-policy.py If you feel that this output has mistakes, please open an issue at https://pagure.io/releng/ Your package (perl-WWW-Google-Contacts) Fails To Install in Fedora 40: can't install perl-WWW-Google-Contacts: - nothing provides perl(Net::Google::AuthSub) needed by perl-WWW-Google-Contacts-0.39-23.fc39.noarch If you know about this problem and are planning on fixing it, please acknowledge so by setting the bug status to ASSIGNED. If you don't have time to maintain this package, consider orphaning it, so maintainers of dependent packages realize the problem. If you don't react accordingly to the policy for FTBFS/FTI bugs (https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails…) your package may be orphaned in 8+ weeks. P.S. The data was generated solely from koji buildroot, so it might be newer than the latest compose or the content on mirrors. To reproduce, use the koji/local repo only, e.g. in mock: $ mock -r fedora-40-x86_64 --config-opts mirrored=False install perl-WWW-Google-Contacts P.P.S. If this bug has been reported in the middle of upgrading multiple dependent packages, please consider using side tags: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/#updating-inter-d… Thanks! Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2231790 [Bug 2231790] Fedora 40 Fails To install Tracker -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2257106 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 7

[Bug 2230255] New: perl-HTTP-Tiny: a ton of new dependencies all of a sudden?
by bugzilla＠redhat.com 25 Apr '25

25 Apr '25

https://bugzilla.redhat.com/show_bug.cgi?id=2230255 Bug ID: 2230255 Summary: perl-HTTP-Tiny: a ton of new dependencies all of a sudden? Product: Fedora Version: 38 Hardware: All OS: Linux Status: NEW Component: perl-HTTP-Tiny Assignee: jplesnik(a)redhat.com Reporter: aros(a)gmx.com QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com Target Milestone: --- Classification: Fedora Why does a new version of perl-HTTP-Tiny now depend on a ton of new Perl subpackages? Could this please be made optional? # dnf update perl-HTTP-Tiny Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Upgrading: perl-HTTP-Tiny noarch 0.086-2.fc38 updates 55 k Installing dependencies: perl-AutoLoader noarch 5.74-497.fc38 updates 22 k perl-Digest noarch 1.20-490.fc38 fedora 25 k perl-Digest-MD5 x86_64 2.58-490.fc38 fedora 36 k perl-IO-Socket-IP noarch 0.41-492.fc38 fedora 41 k perl-IO-Socket-SSL noarch 2.081-1.fc38 fedora 227 k perl-Mozilla-CA noarch 20221114-2.fc38 fedora 12 k perl-Net-SSLeay x86_64 1.92-5.fc38 fedora 361 k perl-URI noarch 5.17-2.fc38 fedora 120 k perl-base noarch 2.27-497.fc38 updates 17 k perl-libnet noarch 3.15-1.fc38 fedora 128 k Transaction Summary ================================================================================ Install 10 Packages Upgrade 1 Package Total download size: 1.0 M Is this ok [y/N]: Operation aborted. This looks totally excessive and unnecessary. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2230255 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 13

[Bug 2074940] New: Remove usage of gethostbyname() and inet_addr() from perl-FCGI package
by bugzilla＠redhat.com 25 Apr '25

25 Apr '25

https://bugzilla.redhat.com/show_bug.cgi?id=2074940 Bug ID: 2074940 Summary: Remove usage of gethostbyname() and inet_addr() from perl-FCGI package Product: Fedora Version: rawhide Status: NEW Component: perl-FCGI Assignee: emmanuel(a)seyman.fr Reporter: mspacek(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: bstinson(a)redhat.com, emmanuel(a)seyman.fr, iarnell(a)gmail.com, jwboyer(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, perl-maint-list(a)redhat.com, rhel-cs-apps-subsystem-qe(a)redhat.com Depends On: 1979848 Target Milestone: --- Classification: Fedora +++ This bug was initially created as a clone of Bug #1979848 +++ Description of problem: rpminspect is failing in gating Version-Release number of selected component (if applicable): perl-FCGI-0.79-7.el9 Actual results: Forbidden function symbols found: gethostbyname inet_addr Expected results: no forbidden functions Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1979848 [Bug 1979848] Remove usage of gethostbyname() and inet_addr() from perl-FCGI package -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2074940

1 7

[Bug 2063919] New: Packages Perl tests should not generate Provides
by bugzilla＠redhat.com 25 Apr '25

25 Apr '25

https://bugzilla.redhat.com/show_bug.cgi?id=2063919 Bug ID: 2063919 Summary: Packages Perl tests should not generate Provides Product: Fedora Version: rawhide Status: NEW Component: perl-generators Assignee: jplesnik(a)redhat.com Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com Target Milestone: --- Classification: Fedora I noticed that packaged tests in /usr/libexec/... generates Provides because they are matched by perllib.attr: $ cat /usr/lib/rpm/fileattrs/perllib.attr %__perllib_provides %{_rpmconfigdir}/perl.prov %__perllib_requires %{_rpmconfigdir}/perl.req %__perllib_magic ^Perl[[:digit:]] module source.* %__perllib_path \\.pm$ %__perllib_flags magic_and_path I think they were meant to be only covered with perltest.attr: # cat /usr/lib/rpm/fileattrs/perltest.attr %__perltest_requires %{_rpmconfigdir}/perl.req %__perltest_magic ^.*[Pp]erl[[:digit:]]* .*$ %__perltest_path /usr/libexec/.*\\.(pl|pm|t)$ %__perltest_flags magic_and_path But perltest.attr is more similar to perl.attr, it's about scripts: $ cat /usr/lib/rpm/fileattrs/perl.attr %__perl_requires %{_rpmconfigdir}/perl.req %__perl_magic ^.*[Pp]erl .*$ %__perl_flags exeonly Would it be possible to change perllib.attr to match only files under /usr/{share,lib,lib64}/perl? Observed with perl-generators-1.13-5.fc36.noarch. (I find out that filtering those Provides with %__exclude_provides is a problem when the tests involve symlinks to modules in the main package. See perl-Module-Install-TestBase-tests-0.86-24.fc36 which erroneously provides perl(Module::Install::TestBase) <https://koji.fedoraproject.org/koji/buildinfo?buildID=1892296>. I will try to work it around on packaged file level in perl-Module-Install-TestBase.) -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2063919

1 4

[Bug 1666098] New: Overspecification in perl -MExtUtils::Embed -e ldopts
by bugzilla＠redhat.com 25 Apr '25

25 Apr '25

https://bugzilla.redhat.com/show_bug.cgi?id=1666098 Bug ID: 1666098 Summary: Overspecification in perl -MExtUtils::Embed -e ldopts Product: Fedora Version: rawhide Status: NEW Component: perl Assignee: jplesnik(a)redhat.com Reporter: bugs.michael(a)gmx.net QA Contact: extras-qa(a)fedoraproject.org CC: caillon+fedoraproject(a)gmail.com, iarnell(a)gmail.com, jplesnik(a)redhat.com, kasal(a)ucw.cz, mbarnes(a)fastmail.com, mmaslano(a)redhat.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com, psabata(a)redhat.com, rhughes(a)redhat.com, sandmann(a)redhat.com, tcallawa(a)redhat.com Target Milestone: --- Classification: Fedora The following command is supposed to return the ldflags that are needed to link with libperl. Instead, it returns everything that has been specified when building libperl itself. Not limited to Fedora's global flags and several libraries that aren't needed when linking shared. As a result, programs relink also with those libs instead of just libperl. $ perl -MExtUtils::Embed -e ldopts -Wl,--enable-new-dtags -Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -fstack-protector-strong -L/usr/local/lib -L/usr/lib64/perl5/CORE -lperl -lpthread -lresolv -ldl -lm -lcrypt -lutil -lc Please clean up the flags and return only -L/usr/lib64/perl5/CORE -lperl. -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 2161639] New: Pregenerated File-RsyncP-0.76/FileList/configure is missing a source
by bugzilla＠redhat.com 25 Feb '25

25 Feb '25

https://bugzilla.redhat.com/show_bug.cgi?id=2161639 Bug ID: 2161639 Summary: Pregenerated File-RsyncP-0.76/FileList/configure is missing a source Product: Fedora Version: rawhide Status: NEW Component: perl-File-RsyncP Assignee: jplesnik(a)redhat.com Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: imlinux+fedora(a)gmail.com, jplesnik(a)redhat.com, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Link ID: Red Hat Bugzilla 199647 Classification: Fedora perl-File-RsyncP-0.76-10.fc38 source package delivers File-RsyncP-0.76/FileList/configure file which itsels was generated with Autoconf, but the original source for Autoconf tool (configure.in according to File-RsyncP-0.76/FileList/Makefile.PL is missing from the source archive and thus from the source package. While the file is licensed as FSFULL which does not require distributing sources, it is deemed to be against Fedora spirit (and Packaging guidelines?) <https://lists.fedoraproject.org/archives/list/packaging@lists.fedoraproject…>. We should either reimplement configure.in or remove this package from a distribution. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2161639

1 4

[Bug 1765886] New: Please provide EPEL8 package
by bugzilla＠redhat.com 08 Feb '25

08 Feb '25

https://bugzilla.redhat.com/show_bug.cgi?id=1765886 Bug ID: 1765886 Summary: Please provide EPEL8 package Product: Fedora EPEL Version: epel8 Status: NEW Component: perl-LockFile-Simple Assignee: andreas(a)bawue.net Reporter: sergio(a)serjux.com QA Contact: extras-qa(a)fedoraproject.org CC: andreas(a)bawue.net, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora We need for some packages debmirror is the first [1] Thanks [1] https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-196c55d9bd -- You are receiving this mail because: You are on the CC list for the bug.

1 4

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel January 2024