[Bug 828517] New: CVE-2011-5092 rt3: remote arbitrary code execution and privilege elevation flaw [epel-6]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=828517
Bug ID: 828517
Keywords: Security, SecurityTracking
Blocks: 828512
QA Contact: extras-qa(a)fedoraproject.org
Severity: high
Version: el6
Priority: high
CC: mmahut(a)redhat.com, perl-devel(a)lists.fedoraproject.org,
tremble(a)tremble.org.uk, xavier(a)bachelot.org
Assignee: xavier(a)bachelot.org
Summary: CVE-2011-5092 rt3: remote arbitrary code execution and
privilege elevation flaw [epel-6]
Regression: ---
Story Points: ---
Classification: Fedora
OS: Linux
Reporter: vdanen(a)redhat.com
Type: ---
Documentation: ---
Hardware: All
Mount Type: ---
Status: NEW
Component: rt3
Product: Fedora EPEL
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=828512
epel-6 tracking bug for rt3: see blocks bug list for full details of the
security issue(s).
[bug automatically created by: add-tracking-bugs]
--
You are receiving this mail because:
You are on the CC list for the bug.
9 years, 8 months
[Bug 647783] New: perl-Mail-Box shouldn't force spamassassin to be installed
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: perl-Mail-Box shouldn't force spamassassin to be installed
https://bugzilla.redhat.com/show_bug.cgi?id=647783
Summary: perl-Mail-Box shouldn't force spamassassin to be
installed
Product: Fedora
Version: rawhide
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: medium
Priority: low
Component: perl-Mail-Box
AssignedTo: tcallawa(a)redhat.com
ReportedBy: jik(a)kamens.brookline.ma.us
QAContact: extras-qa(a)fedoraproject.org
CC: tcallawa(a)redhat.com, fedora-perl-devel-list(a)redhat.com
Classification: Fedora
People who aren't planning on using spamassassin shouldn't be forced to install
it just to be able to use the modules in perl-Mail-Box, most of which are
totally independent of spamassassin.
One fix would be to remove the dependency on Mail::SpamAssassin completely from
the perl-Mail-Box RPM, in which case, people who try to use spamassassin
functionality in perl-Mail-Box will simply get an error because of the missing
module and know they need to install spamassassin.
Another fix would be to split the perl modules in spamassassin into a separate
RPM, e.g., spamassassin-perl, so they can be installed without the rest of
spamassassin.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
9 years, 8 months
[Bug 456357] New: rpm: perl.prov fails to detect $VERSION correctly on multiple assignments
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
https://bugzilla.redhat.com/show_bug.cgi?id=456357
Summary: rpm: perl.prov fails to detect $VERSION correctly on
multiple assignments
Product: Fedora
Version: 9
Platform: All
OS/Version: Linux
Status: NEW
Severity: low
Priority: low
Component: rpm
AssignedTo: pmatilai(a)redhat.com
ReportedBy: cweyl(a)alumni.drew.edu
QAContact: extras-qa(a)fedoraproject.org
CC: fedora-perl-devel-
list@redhat.com,jnovy@redhat.com,pauln(a)truemesh.com
Description of problem:
When $VERSION is set twice inside the same package, the latest definition prevails.
Version-Release number of selected component (if applicable):
rpm-4.4.2.3-2.fc9.x86_64
How reproducible:
Package DateTime-Format-DBI :) (see bug 455788)
Lines 10 and 11 of lib/DateTime/Format/DBI.pm are:
$VERSION = '0.031';
$VERSION = $VERSION + 0.0;
Note that perl.prov finds the version as "0.0".
Actual results:
====> provides for perl-DateTime-Format-DBI-0.031-1.fc9.noarch.rpm
perl(DateTime::Format::DBI) = 0.0
perl-DateTime-Format-DBI = 0.031-1.fc9
Expected results:
====> provides for perl-DateTime-Format-DBI-0.031-1.fc9.noarch.rpm
perl(DateTime::Format::DBI) = 0.031
perl-DateTime-Format-DBI = 0.031-1.fc9
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
9 years, 10 months
[Bug 803340] New: RFE: update to at least 1.40
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: RFE: update to at least 1.40
https://bugzilla.redhat.com/show_bug.cgi?id=803340
Summary: RFE: update to at least 1.40
Product: Fedora EPEL
Version: el5
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: perl-YAML-Tiny
AssignedTo: steve(a)silug.org
ReportedBy: paul(a)city-fan.org
QAContact: extras-qa(a)fedoraproject.org
CC: steve(a)silug.org, fedora-perl-devel-list(a)redhat.com
Classification: Fedora
Story Points: ---
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
I need YAML::Tiny ≥ 1.40 for Test::MinimumVersion.
The changes between the current EPEL-5 version (1.04) and 1.40 (the version in
EL-6 by the way) appear to be bugfixes and enhancements, with no compatibility
issues.
I (pghmcfc) would be happy to co-maintain this package and do the update myself
if you're too busy.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
10 years
[Bug 239333] New: Branch perl-Net-Server for EPEL
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=239333
Summary: Branch perl-Net-Server for EPEL
Product: Fedora Extras
Version: devel
Platform: All
OS/Version: Linux
Status: NEW
Severity: medium
Priority: medium
Component: perl-Net-Server
AssignedTo: nicolas.mailhot(a)laposte.net
ReportedBy: kevin(a)tummy.com
QAContact: extras-qa(a)fedoraproject.org
CC: fedora-perl-devel-list(a)redhat.com
perl-Net-Server was imported long ago from fedora.us, so there is no review
ticket. I am thus filing this to request a EPEL branch for it.
The current Fedora maintainer has no interest in maintaining for EPEL, so I will
do so.
Package Change Request
======================
Package Name: perl-Net-Server
New Branches: EL-4 EL-5
Updated EPEL Owners: kevin(a)tummy.com
--
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
10 years, 1 month
[Bug 660652] New: broken dependencies in EPEL6beta
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: broken dependencies in EPEL6beta
https://bugzilla.redhat.com/show_bug.cgi?id=660652
Summary: broken dependencies in EPEL6beta
Product: Fedora EPEL
Version: el6
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: medium
Priority: low
Component: perl-DateTime
AssignedTo: tremble(a)tremble.org.uk
ReportedBy: tlestach(a)redhat.com
QAContact: extras-qa(a)fedoraproject.org
CC: fedora-perl-devel-list(a)redhat.com,
tremble(a)tremble.org.uk
Classification: Fedora
Target Release: ---
Description of problem:
Missing dependencies in EPEL6beta
Version-Release number of selected component (if applicable):
1:perl-DateTime-0.5300-4.el6.x86_64
How reproducible:
always
Steps to Reproduce:
1. rpm -Uvh
http://download.fedora.redhat.com/pub/epel/beta/6/x86_64/epel-release-6-5...
2. yum install perl-DateTime.x86_64
Actual results:
# yum install perl-DateTime.x86_64
Loaded plugins: rhnplugin
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package perl-DateTime.x86_64 1:0.5300-4.el6 set to be updated
--> Processing Dependency: perl(Class::Singleton) >= 1.03 for package:
1:perl-DateTime-0.5300-4.el6.x86_64
--> Processing Dependency: perl(Params::Validate) >= 0.91 for package:
1:perl-DateTime-0.5300-4.el6.x86_64
--> Processing Dependency: perl(List::MoreUtils) for package:
1:perl-DateTime-0.5300-4.el6.x86_64
--> Processing Dependency: perl(Class::Singleton) for package:
1:perl-DateTime-0.5300-4.el6.x86_64
--> Processing Dependency: perl(Params::Validate) for package:
1:perl-DateTime-0.5300-4.el6.x86_64
--> Finished Dependency Resolution
Error: Package: 1:perl-DateTime-0.5300-4.el6.x86_64 (epel)
Requires: perl(List::MoreUtils)
Error: Package: 1:perl-DateTime-0.5300-4.el6.x86_64 (epel)
Requires: perl(Class::Singleton)
Error: Package: 1:perl-DateTime-0.5300-4.el6.x86_64 (epel)
Requires: perl(Class::Singleton) >= 1.03
Error: Package: 1:perl-DateTime-0.5300-4.el6.x86_64 (epel)
Requires: perl(Params::Validate) >= 0.91
Error: Package: 1:perl-DateTime-0.5300-4.el6.x86_64 (epel)
Requires: perl(Params::Validate)
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest
Expected results:
all dependencies shall be either in RHEL6 or in EPEL6beta
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
10 years, 3 months
[Bug 849703] New: Regular Expression matching in signal handler causes side-effects
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=849703
Bug ID: 849703
QA Contact: extras-qa(a)fedoraproject.org
Severity: unspecified
Version: 16
Priority: unspecified
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz, lkundrak(a)v3.sk,
mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
tcallawa(a)redhat.com
Assignee: mmaslano(a)redhat.com
Summary: Regular Expression matching in signal handler causes
side-effects
Regression: ---
Story Points: ---
Classification: Fedora
OS: Unspecified
Reporter: tim(a)electronghost.co.uk
Type: Bug
Documentation: ---
Hardware: Unspecified
Mount Type: ---
Status: NEW
Component: perl
Product: Fedora
Description of problem:
Executing an RE inside a PERL deferred signal handler causes an unwanted side
effect on RE-execution in the code that was being executed when the signal
arrived.
Version-Release number of selected component (if applicable):
"This is perl 5, version 14, subversion 2 (v5.14.2) built for
x86_64-linux-thread-multi"
How reproducible:
Always
Steps to Reproduce:
Here is a test case:
====== CUT HERE ======
#!/usr/bin/env perl
sub sighup {
my $bar="This-Has-Dashes-HUP";
$bar=~s/.*-//;
print "$bar\n";
}
$SIG{'HUP'}=\&sighup;
while (1) {
my $foo="This:Has:Colons";
$foo=~s/.*://;
if ($foo=~m/:/) {
print "BUG!!: $foo\n";
}
}
====== CUT HERE ======
Run this endless loop and arrange to send it a SIGHUP once per second.
Actual results:
You will see output like the following:
bash$ perl ./t.pl
HUP
HUP
HUP
HUP
BUG!!: This:Has:Colons
HUP
HUP
BUG!!: This:Has:Colons
HUP
BUG!!: This:Has:Colons
HUP
BUG!!: This:Has:Colons
HUP
HUP
BUG!!: This:Has:Colons
HUP
BUG!!: This:Has:Colons
HUP
HUP
BUG!!: This:Has:Colons
HUP
HUP
HUP
BUG!!: This:Has:Colons
Expected results:
You should get output like this (observed on "This is perl 5, version 12,
subversion 4 (v5.12.4) built for x86_64-linux-thread-multi" from Fedora 15):
bash$ perl ./t.pl
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
HUP
Additional info:
This is not a crash, like 809796, though they are very likely related or the
same problem.
--
You are receiving this mail because:
You are on the CC list for the bug.
10 years, 3 months