March 2022 - perl-devel - Fedora Mailing-Lists

[Bug 1860591] New: perl-mime-construct missing in EPEL 8

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1860591 Bug ID: 1860591 Summary: perl-mime-construct missing in EPEL 8 Product: Fedora EPEL Version: epel8 Status: NEW Component: perl-mime-construct Assignee: mrunge(a)redhat.com Reporter: necci(a)dia.uniroma3.it QA Contact: extras-qa(a)fedoraproject.org CC: emmanuel(a)seyman.fr, mrunge(a)redhat.com, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Description of problem: perl-mime-construct is missing in EPEL 8, may someone provide it? -- You are receiving this mail because: You are on the CC list for the bug.

6 months, 4 weeks

1
8
0 / 0

[Bug 1860592] New: perl-Proc-WaitStat missing in EPEL 8

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1860592 Bug ID: 1860592 Summary: perl-Proc-WaitStat missing in EPEL 8 Product: Fedora EPEL Version: epel8 Status: NEW Component: perl-Proc-WaitStat Assignee: mrunge(a)redhat.com Reporter: necci(a)dia.uniroma3.it QA Contact: extras-qa(a)fedoraproject.org CC: emmanuel(a)seyman.fr, mrunge(a)redhat.com, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Description of problem: perl-Proc-WaitStat is missing in EPEL 8, may someone provide it? -- You are receiving this mail because: You are on the CC list for the bug.

7 months, 1 week

1
11
0 / 0

[Bug 1860590] New: perl-IPC-Signal missing in EPEL 8

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1860590 Bug ID: 1860590 Summary: perl-IPC-Signal missing in EPEL 8 Product: Fedora EPEL Version: epel8 Status: NEW Component: perl-IPC-Signal Assignee: mrunge(a)redhat.com Reporter: necci(a)dia.uniroma3.it QA Contact: extras-qa(a)fedoraproject.org CC: emmanuel(a)seyman.fr, mrunge(a)redhat.com, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Description of problem: perl-IPC-Signal is missing in EPEL 8, may someone provide it? -- You are receiving this mail because: You are on the CC list for the bug.

7 months, 1 week

1
8
0 / 0

[Bug 1835353] New: rubygem-mail: Out of memory issue through nested MIME parts

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1835353 Bug ID: 1835353 Summary: rubygem-mail: Out of memory issue through nested MIME parts Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: psampaio(a)redhat.com CC: akarol(a)redhat.com, alexl(a)redhat.com, bbuckingham(a)redhat.com, bcourt(a)redhat.com, bkearney(a)redhat.com, btotty(a)redhat.com, caillon+fedoraproject(a)gmail.com, caolanm(a)redhat.com, dmetzger(a)redhat.com, gmccullo(a)redhat.com, gnome-sig(a)lists.fedoraproject.org, gtanzill(a)redhat.com, hhudgeon(a)redhat.com, jfrey(a)redhat.com, jhardy(a)redhat.com, john.j5live(a)gmail.com, jose.p.oliveira.oss(a)gmail.com, lzap(a)redhat.com, mclasen(a)redhat.com, mmccune(a)redhat.com, nmoumoul(a)redhat.com, obarenbo(a)redhat.com, paul(a)city-fan.org, perl-devel(a)lists.fedoraproject.org, rchan(a)redhat.com, rhughes(a)redhat.com, rjerrido(a)redhat.com, rob.myers(a)gtri.gatech.edu, roliveri(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com, simaishi(a)redhat.com, smallamp(a)redhat.com, sokeeffe(a)redhat.com, tbrisker(a)redhat.com, tcallawa(a)redhat.com, vondruch(a)redhat.com, walter.pete(a)yandex.com, xavier(a)bachelot.org Target Milestone: --- Classification: Other A possible DoS issue may affect several MIME parsers. Messages with too many tiny nested MIME parts can lead to memory exhaustion on split(). References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960064 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960062 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960159 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960158 -- You are receiving this mail because: You are on the CC list for the bug.

9 months, 4 weeks

1
11
0 / 0

[Bug 1835360] New: perl-Email-MIME: rubygem-mail: Out of memory issue through nested MIME parts [epel-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1835360 Bug ID: 1835360 Summary: perl-Email-MIME: rubygem-mail: Out of memory issue through nested MIME parts [epel-all] Product: Fedora EPEL Version: epel7 Status: NEW Component: perl-Email-MIME Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: tcallawa(a)redhat.com Reporter: psampaio(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jose.p.oliveira.oss(a)gmail.com, paul(a)city-fan.org, perl-devel(a)lists.fedoraproject.org, rob.myers(a)gtri.gatech.edu, tcallawa(a)redhat.com, xavier(a)bachelot.org Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of epel-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug.

9 months, 4 weeks

1
7
0 / 0

[Bug 1937653] New: Upgrade perl-HTTP-OAI to 4.11

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1937653 Bug ID: 1937653 Summary: Upgrade perl-HTTP-OAI to 4.11 Product: Fedora Version: rawhide Status: NEW Component: perl-HTTP-OAI Assignee: vanoudt(a)gmail.com Reporter: jplesnik(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, vanoudt(a)gmail.com Target Milestone: --- Classification: Fedora Latest Fedora delivers 4.10 version. Upstream released 4.11. When you have free time, please upgrade it. -- You are receiving this mail because: You are on the CC list for the bug.

10 months, 1 week

1
10
0 / 0

[Bug 2058821] New: perl-Crypt-OpenSSL-X509-1.913 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2058821 Bug ID: 2058821 Summary: perl-Crypt-OpenSSL-X509-1.913 is available Product: Fedora Version: rawhide Status: NEW Component: perl-Crypt-OpenSSL-X509 Keywords: FutureFeature, Triaged Assignee: wjhns174(a)hardakers.net Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, wjhns174(a)hardakers.net, xavier(a)bachelot.org Target Milestone: --- Classification: Fedora Latest upstream release: 1.913 Current version/release in rawhide: 1.912-1.fc37 URL: http://search.cpan.org/dist/Crypt-OpenSSL-X509/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/2749/ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2058821

10 months, 2 weeks

1
7
0 / 0

[Bug 2041430] New: [RFC] Drop support for mod_perl in F36+/EL9+

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2041430 Bug ID: 2041430 Summary: [RFC] Drop support for mod_perl in F36+/EL9+ Product: Fedora Version: rawhide Status: NEW Component: perl-Plack Assignee: rc040203(a)freenet.de Reporter: xavier(a)bachelot.org QA Contact: extras-qa(a)fedoraproject.org CC: emmanuel(a)seyman.fr, jose.p.oliveira.oss(a)gmail.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com, rc040203(a)freenet.de, xavier(a)bachelot.org Target Milestone: --- Classification: Fedora Hi Ralf, As you know, I'll take care of building perl-Plack in EPEL 9. One of the dependency is mod_perl, which won't make it to EPEL 9 and is marked as abandoned/unsupported for Fedora in the specfile. I'd like to suggest the following tuning to the rawhide branch specfile. It disables mod_perl support for both el9+, but I thought it might make sense to also disable it in F36+. I'd like to get this or a variation of this in rawhide so one can keep a non-diverging history in the epel9 branch. I'll submit a proper PR once you gave me your thoughts on this approach. """ # Build with mod_perl support for Apache HTTP server version 2. # Abandoned/Unsupported in Fedora. +%if 0%{?rhel} >= 9 || 0%{?fedora} >= 36 +%bcond_with perl_Plack_enables_httpd2 +%else %bcond_without perl_Plack_enables_httpd2 +%endif # Recommends IPv6 support to HTTP::Server::PSGI embedded web server %bcond_without perl_Plack_enables_ipv6 """ Regards, Xavier -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2041430

10 months, 4 weeks

1
8
0 / 0

[Bug 1975700] New: start_server (or Server::Starter) should depend on Net::Server::SS::PreFork

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1975700 Bug ID: 1975700 Summary: start_server (or Server::Starter) should depend on Net::Server::SS::PreFork Product: Fedora Version: 34 Status: NEW Component: perl-Server-Starter Severity: low Assignee: rc040203(a)freenet.de Reporter: kas(a)fi.muni.cz QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, rc040203(a)freenet.de Target Milestone: --- Classification: Fedora Description of problem: The start_server script uses Net::Server::SS::PreFork personality of Net::Server, so it should explicitly depend on it. Version-Release number of selected component (if applicable): perl-Server-Starter-0.35-5.fc34.noarch perl-Server-Starter-start_server-0.35-5.fc34.noarch How reproducible: Steps to Reproduce: 1. yum -y install perl-Server-Starter-start_server perl-Starman 2. cat > app.psgi <<'EOF' #!/usr/bin/perl use strict; my $app = sub { my $env = shift; return [ '200', [ 'Content-Type' => 'text/plain' ], [ "Hello World\n" ], # or IO::Handle-like object ]; }; EOF 3. start_server --port 0.0.0.0:5000 -- starman --workers 4 app.psgi Actual results: start_server (pid:5091) starting now... starting new worker 5092 Can't locate Net/Server/SS/PreFork.pm in @INC (you may need to install the Net::Server::SS::PreFork module) (@INC contains: /usr/local/lib64/perl5/5.32 /usr/local/share/perl5/5.32 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at /usr/share/perl5/vendor_perl/Plack/Handler/Starman.pm line 14. new worker 5092 seems to have failed to start, exit status:512 Expected results: starman should be up and running Additional info: The dependency on Net::Server::SS::PreFork is described here: https://metacpan.org/pod/Server::Starter -- You are receiving this mail because: You are on the CC list for the bug.

10 months, 4 weeks

1
4
0 / 0

[Bug 2064174] New: CVE-2021-44962 slic3r: specially crafted stl file could lead to information disclosure

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2064174 Bug ID: 2064174 Summary: CVE-2021-44962 slic3r: specially crafted stl file could lead to information disclosure Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mrehak(a)redhat.com CC: mhroncok(a)redhat.com, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Other An out-of-bounds read vulnerability exists in the GCode::extrude() functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially crafted stl file could lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability. Reference: https://hackmd.io/KSI1bwGfSyO7T8UCf0HeTw -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2064174

11 months

1
5
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel March 2022