Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=877015
--- Comment #10 from Fedora Update System <updates(a)fedoraproject.org> ---
perl-CGI-3.51-7.fc17 has been pushed to the Fedora 17 stable repository. If
problems still persist, please make note of it in this bug report.
--
You are receiving this mail because:
You are on the CC list for the bug.
Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=877015
Bug 877015 depends on bug 876974, which changed state.
Bug 876974 Summary: CVE-2012-5526 perl-CGI: Newline injection due to improper CRLF escaping in Set-Cookie and P3P headers [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=876974
What |Removed |Added
----------------------------------------------------------------------------
Status|ON_QA |CLOSED
Resolution|--- |CURRENTRELEASE
--
You are receiving this mail because:
You are on the CC list for the bug.
Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=880329
Jan Lieskovsky <jlieskov(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|perl-Dancer: Newline |CVE-2012-5572 perl-Dancer:
|injection due to improper |Newline injection due to
|CRLF escaping in cookie() |improper CRLF escaping in
|and cookies() methods |cookie() and cookies()
| |methods
Alias| |CVE-2012-5572
--- Comment #4 from Jan Lieskovsky <jlieskov(a)redhat.com> ---
The CVE identifier of CVE-2012-5572 has been assigned to this issue:
http://www.openwall.com/lists/oss-security/2012/11/26/10
--
You are receiving this mail because:
You are on the CC list for the bug.
Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=880329
Petr Pisar <ppisar(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
URL| |https://github.com/sukria/D
| |ancer/issues/859
CC| |ppisar(a)redhat.com
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=874701
Bug ID: 874701
QA Contact: extras-qa(a)fedoraproject.org
Severity: unspecified
Version: 17
Priority: unspecified
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz, lkundrak(a)v3.sk,
mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
tcallawa(a)redhat.com
Assignee: mmaslano(a)redhat.com
Summary: Fedora 16's perl is greater than Fedora 17
Regression: ---
Story Points: ---
Classification: Fedora
OS: Unspecified
Reporter: rc040203(a)freenet.de
Type: Bug
Documentation: ---
Hardware: Unspecified
Mount Type: ---
Status: NEW
Component: perl
Product: Fedora
Description of problem:
The version of perl as currently being shipped with
Fedora-16 is NEVR-wise is greater than the version in Fedora-17:
updates/17/i386/perl-5.14.2-215.fc17.i686.rpm
updates/17/x86_64/perl-5.14.2-215.fc17.x86_64.rpm
updates/17/SRPMS/perl-5.14.2-215.fc17.src.rpm
updates/16/i386/perl-5.14.3-202.fc16.i686.rpm
updates/16/x86_64/perl-5.14.3-202.fc16.x86_64.rpm
updates/16/SRPMS/perl-5.14.3-202.fc16.src.rpm
This is not allowed in Fedora, because it breaks yum-updates and therefore is
prohibited by the FPG.
Expected results:
The versions of a package in Fedora(N+1) must be greater or equal to the
version in Fedora(N).
--
You are receiving this mail because:
You are on the CC list for the bug.
Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=878787
Bug ID: 878787
Summary: perl-Text-CSV_XS-0.93 is available
Product: Fedora
Version: rawhide
Component: perl-Text-CSV_XS
Keywords: FutureFeature, Triaged
Severity: unspecified
Priority: unspecified
Reporter: upstream-release-monitoring(a)fedoraproject.org
Latest upstream release: 0.93
Current version in Fedora Rawhide: 0.92
URL: http://search.cpan.org/dist/Text-CSV_XS/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
--
You are receiving this mail because:
You are on the CC list for the bug.