perl-devel June 2014

perl-devel@lists.fedoraproject.org

5 participants
367 discussions

[Bug 1110723] New: CVE-2014-0477 perl-Email-Address: Denial-of-Service in Email::Address::parse
by Red Hat Bugzilla 31 Jul '15

31 Jul '15

https://bugzilla.redhat.com/show_bug.cgi?id=1110723 Bug ID: 1110723 Summary: CVE-2014-0477 perl-Email-Address: Denial-of-Service in Email::Address::parse Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: vkaigoro(a)redhat.com CC: perl-devel(a)lists.fedoraproject.org, rob.myers(a)gtri.gatech.edu, tcallawa(a)redhat.com It was discovered [1] that there's a denial of service vulnerability in Email::Address, a Perl module for RFC 2822 address parsing and creation[2]. Email::Address::parse uses significant time on parsing empty quoted string, as allowed by RFC 2822. Suggested fix was applied upstream as [3] contained in a new upstream version 1.905[4] which contain additional commits to avoid slowdowns. External References: [1] http://seclists.org/oss-sec/2014/q2/563 [2] https://metacpan.org/release/Email-Address [3] https://github.com/rjbs/Email-Address/commit/83f8306117115729ac9346523762c0… [4] https://github.com/rjbs/Email-Address/blob/master/Changes -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=O6OgIb7i9P&a=cc_unsubscribe

1 16

[Bug 750805] New: Fails to build on ARM, needs to use default setjmp not ucontext
by Red Hat Bugzilla 13 Jul '15

13 Jul '15

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: Fails to build on ARM, needs to use default setjmp not ucontext https://bugzilla.redhat.com/show_bug.cgi?id=750805 Summary: Fails to build on ARM, needs to use default setjmp not ucontext Product: Fedora Version: 15 Platform: Unspecified OS/Version: Unspecified Status: NEW Severity: unspecified Priority: unspecified Component: perl-Coro AssignedTo: ppisar(a)redhat.com ReportedBy: henrik(a)henriknordstrom.net QAContact: extras-qa(a)fedoraproject.org CC: fedora-perl-devel-list(a)redhat.com, mmaslano(a)redhat.com, kwizart(a)gmail.com, bochecha(a)fedoraproject.org, ppisar(a)redhat.com Classification: Fedora Story Points: --- Type: --- Description of problem: ARM do not implement the needed ucontext functions, and need to use the default setjmp method. This is normally the default, except that fedora patches it to hardwire ucontext as default method.. Version-Release number of selected component (if applicable): perl-Coro-5.372-3.fc15 How reproducible: always Steps to Reproduce: 1. Try to rebuild perl-Coro on arm 2. 3. Actual results: failed build, crashing in testsuite Expected results: successful build Additional info: Trivial spec file patch attached. Please apply patch and sumbit a F15 koji build from which arm can pull the srpm. update request is not stricty needed if the only change relative to current F15 build is this patch. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 18

[Bug 1068706] New: Password prompt matching requires colon, which may be missing
by Red Hat Bugzilla 30 Jun '15

30 Jun '15

https://bugzilla.redhat.com/show_bug.cgi?id=1068706 Bug ID: 1068706 Summary: Password prompt matching requires colon, which may be missing Product: Fedora Version: 20 Component: perl-Net-SFTP-Foreign Severity: low Assignee: fedorapkg(a)rule.lv Reporter: ejtr(a)layer3.co.uk QA Contact: extras-qa(a)fedoraproject.org CC: fedorapkg(a)rule.lv, perl-devel(a)lists.fedoraproject.org Description of problem: Net::SFTP::Foreign's password prompt matching code goes into a permanent loop when the remote server supplies a prompt without a trailing colon. Version-Release number of selected component (if applicable): perl-Net-SFTP-Foreign-1.75-3.fc20.noarch.rpm How reproducible: When testing Net::SFTP::Foreign against an "unusual" host which supported keyboard-interactive authentication, and thus generated a server-supplied password prompt, it was found that the host in question had a prompt of the form "username's password", rather than the more usual "username@host's password: " as seen from OpenSSH client code supporting the password authentication mode. As a consequence, the Net::SFTP::Foreign module simply sulked waiting for a colon. Looking at the relevant /usr/share/perl5/vendor_perl/Net/SFTP/Foreign/Backend/Unix.pm code file, we find the following code fragment: ..... debug and $debug & 65536 and _debug "looking for user/password prompt"; my $re = ( defined $password_prompt ? $password_prompt : qr/(user|name|login)?[:?]\s*$/i ); $debug and $debug & 65536 and _debug "matching against $re"; if (substr($buffer, $at) =~ $re) { if ($ask_for_username_at_login and ($ask_for_username_at_login ne 'auto' or defined $1)) { $debug and $debug & 65536 and _debug "sending username"; print $pty "$user\n"; undef $ask_for_username_at_login; } else { $debug and $debug & 65536 and _debug "sending password"; print $pty "$pass\n"; $password_sent = 1; } $at = length $buffer; } ..... In the absence of the $password_prompt setting, $re only matches a password prompt containing the string "password" if it contains a colon or question-mark after the word "password". The code is also questionable in being capable of sending a password in response to a prompt which contains only a colon followed by whitespace; I feel it ought to at least see the word "password" or "passphrase". The code also uses the $password_prompt variable to match against a potential username prompt, which is questionable. I believe it would be better to more completely separate the user and password prompt matching with different Regex's, and avoid being able to match against the short ":" string alone, and cope with the unusual condition of a missing colon. This recoding of the relevant block is a potential solution: ..... $debug and $debug & 65536 and _debug "looking for user/password prompt"; my $reuser = qr/(user|name|login)([:?])?\s*$/i; my $repass = ( defined $password_prompt ? $password_prompt : qr/(password|passphrase)([:?])?\s*$/i ); if (substr($buffer, $at) =~ $reuser) { $debug and $debug & 65536 and _debug "matched against $reuser"; if ($ask_for_username_at_login and ($ask_for_username_at_login ne 'auto' or defined $1)) { $debug and $debug & 65536 and _debug "sending username"; print $pty "$user\n"; undef $ask_for_username_at_login; } $at = length $buffer; } elsif (substr($buffer, $at) =~ $repass) { $debug and $debug & 65536 and _debug "matched against $repass"; $debug and $debug & 65536 and _debug "sending password"; print $pty "$pass\n"; $password_sent = 1; $at = length $buffer; } .... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=SXtN9EENTL&a=cc_unsubscribe

1 4

[Bug 1085704] New: tests failing on big endians
by Red Hat Bugzilla 29 Jun '15

29 Jun '15

https://bugzilla.redhat.com/show_bug.cgi?id=1085704 Bug ID: 1085704 Summary: tests failing on big endians Product: Fedora Version: 20 Component: slic3r Assignee: mhroncok(a)redhat.com Reporter: dan(a)danny.cz QA Contact: extras-qa(a)fedoraproject.org CC: mhroncok(a)redhat.com, perl-devel(a)lists.fedoraproject.org Blocks: 467765 (ZedoraTracker), 1071880 (PPCTracker) A test is failing in big endian arches like s390(x) and ppc/ppc64 from build.log: ... + cd - /builddir/build/BUILD/Slic3r-1.0.0 + SLIC3R_NO_AUTO=1 + perl Build.PL installdirs=vendor t/angles.t ........... ok t/arcs.t ............. skipped: arcs are currently disabled t/clean_polylines.t .. ok t/clipper.t .......... ok t/collinear.t ........ ok t/combineinfill.t .... ok t/cooling.t .......... ok t/custom_gcode.t ..... ok t/dynamic.t .......... skipped: variable-width paths are currently disabled # Failed test 'no missing parts in solid shell when fill_density is 0' # at t/fill.t line 252. # got: '12' # expected: '0' # Looks like you failed 1 test of 42. t/fill.t ............. Dubious, test returned 1 (wstat 256, 0x100) Failed 1/42 subtests t/gcode.t ............ ok t/geometry.t ......... ok t/layers.t ........... ok t/loops.t ............ skipped: temporarily disabled t/multi.t ............ ok t/perimeters.t ....... ok t/polyclip.t ......... ok t/print.t ............ ok t/retraction.t ....... ok t/shells.t ........... ok t/skirt_brim.t ....... ok t/slice.t ............ skipped: temporarily disabled t/support.t .......... ok t/svg.t .............. ok t/thin.t ............. ok t/threads.t .......... ok t/vibrationlimit.t ... ok Test Summary Report ------------------- t/fill.t (Wstat: 256 Tests: 42 Failed: 1) Failed test: 42 Non-zero exit status: 1 Files=27, Tests=241, 55 wallclock secs ( 0.09 usr 0.03 sys + 55.73 cusr 0.67 csys = 56.52 CPU) Result: FAIL Some tests failed. Please report the failure to the author! error: Bad exit status from /var/tmp/rpm-tmp.4roGD8 (%check) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.4roGD8 (%check) Child return code was: 1 for full logs please see http://s390.koji.fedoraproject.org/koji/taskinfo?taskID=1374201 http://ppc.koji.fedoraproject.org/koji/taskinfo?taskID=1767561 Version-Release number of selected component (if applicable): slic3r-1.0.0-0.3.RC2.fc21 is OK slic3r-1.0.0-0.4.RC3.fc21 is BROKEN, newer are broken too Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=467765 [Bug 467765] Fedora for System z (s390): Bug Tracker https://bugzilla.redhat.com/show_bug.cgi?id=1071880 [Bug 1071880] (PPCTracker) Fedora for PowerPC architectures (ppc,ppc64): Bug Tracker -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=9rKa2d72oi&a=cc_unsubscribe

1 4

[Bug 1039268] New: png images not displayed
by Red Hat Bugzilla 29 Jun '15

29 Jun '15

https://bugzilla.redhat.com/show_bug.cgi?id=1039268 Bug ID: 1039268 Summary: png images not displayed Product: Fedora Version: 20 Component: perl-Tk Assignee: andreas.bierfert(a)lowlatency.de Reporter: eserte12(a)yahoo.de QA Contact: extras-qa(a)fedoraproject.org CC: andreas.bierfert(a)lowlatency.de, perl-devel(a)lists.fedoraproject.org External Bug ID: CPAN 87016 Description of problem: png images cannot be displayed anymore using perl-Tk's Tk::PNG module. This is probably related to https://rt.cpan.org/Public/Bug/Display.html?id=87016 The problem does not appear anymore with a development release of Perl/Tk, e.g. SREZIC/Tk-804.031_502.tar.gz Version-Release number of selected component (if applicable): perl-Tk-804.031-4.fc20.i686 How reproducible: Steps to Reproduce: 1. Try the following oneliner with a random png image: perl -MTk -MTk::PNG -e '$mw=tkinit;$mw->Label(-image => $mw->Photo(-file => shift))->pack; MainLoop' pngtest.png 2. 3. Actual results: Error message "invalid after png_start_read_image or png_read_update_info at /usr/lib/perl5/vendor_perl/Tk/Image.pm line 21.", no png image is displayed Expected results: png image should be visible in a X11 window, like it's the case with fedora 19. Additional info: -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=AqqyR7Q0Bx&a=cc_unsubscribe

1 4

[Bug 919030] New: perl-Glib-Object-Introspection seems to have a big-endian problem, self tests fail on s390* and ppc*
by Red Hat Bugzilla 29 Jun '15

29 Jun '15

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=919030 Bug ID: 919030 Summary: perl-Glib-Object-Introspection seems to have a big-endian problem, self tests fail on s390* and ppc* Product: Fedora Version: rawhide Component: perl-Glib-Object-Introspection Severity: high Priority: medium Reporter: karsten(a)redhat.com Description of problem: # Failed test at t/00-basic-types.t line 15. # got: '-1' # expected: '-127' # Failed test at t/00-basic-types.t line 16. # got: '0' # expected: '255' # Failed test at t/00-basic-types.t line 17. # got: '-1' # expected: '-32767' # Failed test at t/00-basic-types.t line 18. # got: '0' # expected: '65535' # Looks like you failed 4 tests of 34. t/00-basic-types.t ............ Dubious, test returned 4 (wstat 1024, 0x400) Failed 4/34 subtests # Failed test at t/arg-checks.t line 11. # got: '-1' # expected: '-127' # Failed test at t/arg-checks.t line 21. # got: '0' # expected: '127' # Looks like you failed 2 tests of 5. t/arg-checks.t ................ Dubious, test returned 2 (wstat 512, 0x200) Version-Release number of selected component (if applicable): perl-Glib-Object-Introspection-0.015-1.fc19 How reproducible: always Steps to Reproduce: 1. ppc-koji build --scratch f19 perl-Glib-Object-Introspection-0.015-1.fc19.src.rpm 2. 3. Actual results: http://ppc.koji.fedoraproject.org/koji/taskinfo?taskID=973021 Expected results: Additional info: -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=YIO2oILrQB&a=cc_unsubscribe

1 9

[Bug 656553] New: Please Update Spec File to use %ghost on files in /var/run and /var/lock
by Red Hat Bugzilla 29 Jun '15

29 Jun '15

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: Please Update Spec File to use %ghost on files in /var/run and /var/lock https://bugzilla.redhat.com/show_bug.cgi?id=656553 Summary: Please Update Spec File to use %ghost on files in /var/run and /var/lock Product: Fedora Version: rawhide Platform: All URL: http://lists.fedoraproject.org/pipermail/devel-announc e/2010-November/000726.html OS/Version: Linux Status: NEW Severity: medium Priority: medium Component: bucardo AssignedTo: itamar(a)ispbrasil.com.br ReportedBy: lpoetter(a)redhat.com QAContact: extras-qa(a)fedoraproject.org CC: fedora-perl-devel-list(a)redhat.com, itamar(a)ispbrasil.com.br Classification: Fedora Target Release: --- Your package bucardo appears to include a file in /var/run or /var/lock. With an upcoming change in Rawhide these directories will now be mounted as tmpfs. For details about this change please consult http://lists.fedoraproject.org/pipermail/devel-announce/2010-November/00072… For your package this means that you need add %ghost to all files that are placed in either of these two directories. Please make sure to make this change in time for the F15 cycle. For details about %ghost see http://www.rpm.org/max-rpm-snapshot/s1-rpm-inside-files-list-directives.htm… , for more information on the F15 feature see the feature page https://fedoraproject.org/wiki/Features/var-run-tmpfs . If your package already uses %ghost on these files, feel free to close this bug report right-away. Sorry for this mass bug filing, and if you have any further questions, don't hesitate to ask on fedora-devel or ask me personally. Thank you, Lennart -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 5

[Bug 1100706] New: perl-Glib-Object-Introspection-0.023 is available
by Red Hat Bugzilla 25 Jun '15

25 Jun '15

https://bugzilla.redhat.com/show_bug.cgi?id=1100706 Bug ID: 1100706 Summary: perl-Glib-Object-Introspection-0.023 is available Product: Fedora Version: rawhide Component: perl-Glib-Object-Introspection Keywords: FutureFeature, Triaged Assignee: berrange(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: berrange(a)redhat.com, perl-devel(a)lists.fedoraproject.org Latest upstream release: 0.023 Current version/release in Fedora Rawhide: 0.022-1.fc21 URL: http://search.cpan.org/dist/Glib-Object-Introspection/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=JsKu6193L4&a=cc_unsubscribe

1 12

[Bug 1039717] New: perl-Net-Amazon-EC2-0.24 is available
by Red Hat Bugzilla 24 Jun '15

24 Jun '15

https://bugzilla.redhat.com/show_bug.cgi?id=1039717 Bug ID: 1039717 Summary: perl-Net-Amazon-EC2-0.24 is available Product: Fedora Version: rawhide Component: perl-Net-Amazon-EC2 Keywords: FutureFeature, Triaged Assignee: lkundrak(a)v3.sk Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: lkundrak(a)v3.sk, perl-devel(a)lists.fedoraproject.org Latest upstream release: 0.24 Current version/release in Fedora Rawhide: 0.23-1.fc21 URL: http://search.cpan.org/dist/Net-Amazon-EC2/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=eRgTP5YZVs&a=cc_unsubscribe

1 9

[Bug 789557] New: perl-Bio-Graphics-2.26 is available
by Red Hat Bugzilla 19 Jun '15

19 Jun '15

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: perl-Bio-Graphics-2.26 is available https://bugzilla.redhat.com/show_bug.cgi?id=789557 Summary: perl-Bio-Graphics-2.26 is available Product: Fedora Version: rawhide Platform: Unspecified OS/Version: Unspecified Status: NEW Keywords: FutureFeature, Triaged Severity: unspecified Priority: unspecified Component: perl-Bio-Graphics AssignedTo: alexl(a)users.sourceforge.net ReportedBy: upstream-release-monitoring(a)fedoraproject.org QAContact: extras-qa(a)fedoraproject.org CC: alexl(a)users.sourceforge.net, fedora-perl-devel-list(a)redhat.com Classification: Fedora Story Points: --- Type: --- Regression: --- Mount Type: --- Documentation: --- Latest upstream release: 2.26 Current version in Fedora Rawhide: 2.25 URL: http://search.cpan.org/dist/Bio-Graphics/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 8

← Newer
1
2
3
4
5
6
7
8
9
...
37
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel June 2014