perl-devel July 2026

perl-devel@lists.fedoraproject.org

3 participants
198 discussions

[Bug 2506204] New: CVE-2026-57432 perl: Perl: Information disclosure via integer overflow in pack/unpack operations [fedora-all]
by bugzilla＠redhat.com 08 Aug '26

08 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2506204 Bug ID: 2506204 Summary: CVE-2026-57432 perl: Perl: Information disclosure via integer overflow in pack/unpack operations [fedora-all] Product: Fedora Version: rawhide Status: NEW Whiteboard: {"flaws": ["69eea063-736d-4167-8681-0fd8eebcfabd"]} Component: perl Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: jplesnik(a)redhat.com Reporter: tguittet(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com, psabata(a)redhat.com, spotrh(a)gmail.com Blocks: 2499729 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds. A template derived from untrusted input can read heap memory past the buffer and return it to the caller. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2506204 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 8

[Bug 2489785] New: CVE-2026-8376 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds [fedora-all]
by bugzilla＠redhat.com 08 Aug '26

08 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2489785 Bug ID: 2489785 Summary: CVE-2026-8376 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds [fedora-all] Product: Fedora Version: rawhide Status: NEW Whiteboard: {"flaws": ["ae5274a8-dafc-443f-8a72-336264308cb3"]} Component: perl Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: jplesnik(a)redhat.com Reporter: gnaik(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com, psabata(a)redhat.com, spotrh(a)gmail.com Blocks: 2481312 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2489785 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 7

[Bug 2486197] New: perl-HTTP-Tiny-0.096 is available
by bugzilla＠redhat.com 08 Aug '26

08 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2486197 Bug ID: 2486197 Summary: perl-HTTP-Tiny-0.096 is available Product: Fedora Version: rawhide Status: NEW Component: perl-HTTP-Tiny Keywords: FutureFeature, Triaged Assignee: jplesnik(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com Target Milestone: --- Classification: Fedora Releases retrieved: 0.096 Upstream release that is considered latest: 0.096 Current version/release in rawhide: 0.094-1.fc45 URL: https://metacpan.org/dist/HTTP-Tiny/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/2982/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/perl-HTTP-Tiny -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2486197 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 8

[Bug 2507871] New: Add perl-Object-Remote to EPEL 10
by bugzilla＠redhat.com 08 Aug '26

08 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2507871 Bug ID: 2507871 Summary: Add perl-Object-Remote to EPEL 10 Product: Fedora EPEL Version: epel10 Status: NEW Component: perl-Object-Remote Assignee: jplesnik(a)redhat.com Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, perl-devel(a)lists.fedoraproject.org Blocks: 2507463 Target Milestone: --- Classification: Fedora perl-Object-Remote is needed by perl-Net-OpenSSH there. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2507463 [Bug 2507463] Please branch and build perl-Net-OpenSSH in epel10 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2507871 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 15

[Bug 2507463] New: Please branch and build perl-Net-OpenSSH in epel10
by bugzilla＠redhat.com 08 Aug '26

08 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2507463 Bug ID: 2507463 Summary: Please branch and build perl-Net-OpenSSH in epel10 Product: Fedora EPEL Version: epel10 Status: NEW Component: perl-Net-OpenSSH Assignee: steve.traylen(a)cern.ch Reporter: nicola.traber(a)snb.ch QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, steve.traylen(a)cern.ch Target Milestone: --- Classification: Fedora Please branch and build perl-Net-OpenSSH in epel10 / epel10.2. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2507463 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

[Bug 2369964] New: Please branch and build perl-Protocol-WebSocket for EPEL 10
by bugzilla＠redhat.com 07 Aug '26

07 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2369964 Bug ID: 2369964 Summary: Please branch and build perl-Protocol-WebSocket for EPEL 10 Product: Fedora EPEL Version: epel10 Status: NEW Component: perl-Protocol-WebSocket Assignee: mspacek(a)redhat.com Reporter: xavier(a)bachelot.org QA Contact: extras-qa(a)fedoraproject.org CC: mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org Blocks: 2303880 (EPEL10Tracker) Target Milestone: --- Classification: Fedora Hi, Could you please branch and build perl-Protocol-WebSocket for EPEL 10 ? I would need it to build another package. If you don't want or have time to maintain this package in EPEL, I'd be glad to be added to the package so I can take care of it. Indeed, I can help with maintainance in Fedora too. My FAS username is xavierb. Regards, Xavier Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2303880 [Bug 2303880] EPEL 10 Tracker -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2369964 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 11

[Bug 2479778] New: Please branch and build perl-SQL-Abstract in epel10
by bugzilla＠redhat.com 07 Aug '26

07 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2479778 Bug ID: 2479778 Summary: Please branch and build perl-SQL-Abstract in epel10 Product: Fedora EPEL Version: epel10 Status: NEW Component: perl-SQL-Abstract Assignee: spotrh(a)gmail.com Reporter: ioanna.tampareskou(a)cern.ch QA Contact: extras-qa(a)fedoraproject.org CC: igor.raits(a)gmail.com, jplesnik(a)redhat.com, perl-devel(a)lists.fedoraproject.org, spotrh(a)gmail.com Target Milestone: --- Classification: Fedora Created attachment 2141861 --> https://bugzilla.redhat.com/attachment.cgi?id=2141861&action=edit patch file Hello, Could you please create an EPEL 10 branch for perl-SQL-Abstract? The current Rawhide package builds successfully for EPEL 10 with a small patch attached. The patch comments out two BuildRequires that depend on perl(DBIx::Class), which is not yet available in EPEL 10 and fixes RPM warnings caused by macros in comments. These are only used for optional tests and do not affect the runtime functionality of the package. A successful mockbuild against epel-10-x86_64 has been confirmed. Thank you in advance. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2479778 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 7

[Bug 2507841] New: Please branch and build perl-WWW-Curl for EPEL 10
by bugzilla＠redhat.com 07 Aug '26

07 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2507841 Bug ID: 2507841 Summary: Please branch and build perl-WWW-Curl for EPEL 10 Product: Fedora EPEL Version: epel10 Status: NEW Component: perl-WWW-Curl Assignee: emmanuel(a)seyman.fr Reporter: mike.ely(a)sonic.com QA Contact: extras-qa(a)fedoraproject.org CC: emmanuel(a)seyman.fr, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, xavier(a)bachelot.org Target Milestone: --- Classification: Fedora Please branch and build perl-WWW-Curl in epel10. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2507841 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

[rpms/perl-Protocol-WebSocket] PR #4: Import EPEL8 package
by Michal Josef Špaček 06 Aug '26

06 Aug '26

mspacek opened a new pull-request against the project: `perl-Protocol-WebSocket` that you are following: `` Import EPEL8 package `` To reply, visit the link below https://src.fedoraproject.org/rpms/perl-Protocol-WebSocket/pull-request/4

1 3

[rpms/perl-Protocol-WebSocket] PR #3: Import EPEL9 package
by Michal Josef Špaček 06 Aug '26

06 Aug '26

mspacek opened a new pull-request against the project: `perl-Protocol-WebSocket` that you are following: `` Import EPEL9 package `` To reply, visit the link below https://src.fedoraproject.org/rpms/perl-Protocol-WebSocket/pull-request/3

1 6

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel July 2026