[Bug 751887] New: CVE-2011-4115 perl-Parallel-ForkManager: insecure temporary file usage [fedora-all]
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: CVE-2011-4115 perl-Parallel-ForkManager: insecure temporary file usage [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=751887
Summary: CVE-2011-4115 perl-Parallel-ForkManager: insecure
temporary file usage [fedora-all]
Product: Fedora
Version: 15
Platform: All
OS/Version: Linux
Status: NEW
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Component: perl-Parallel-ForkManager
AssignedTo: tibbs(a)math.uh.edu
ReportedBy: vdanen(a)redhat.com
QAContact: extras-qa(a)fedoraproject.org
CC: tibbs(a)math.uh.edu, fedora-perl-devel-list(a)redhat.com
Blocks: 751886
Classification: Fedora
Story Points: ---
Type: ---
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=751886
Please note: this issue affects multiple supported versions of Fedora.
Only one tracking bug has been filed; please ensure that it is only closed
when all affected versions are fixed.
[bug automatically created by: add-tracking-bugs]
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
9 years, 7 months
[Bug 1078083] CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1078083
Marianne Feifer <mfeifer(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC|mfeifer(a)redhat.com |
Kurt Seifried <kseifried(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|40327,reported=20140318,sou |40327,reported=20140318,sou
|rce=distros,cvss2=6.8/AV:N/ |rce=distros,cvss2=6.8/AV:N/
|AC:M/Au:N/C:P/I:P/A:P,rhel- |AC:M/Au:N/C:P/I:P/A:P,rhel-
|6/libyaml=affected,rhel-7/l |6/libyaml=affected,rhel-7/l
|ibyaml=affected,rhscl-1/rub |ibyaml=affected,rhscl-1/rub
|y193-libyaml=affected,rhscl |y193-libyaml=affected,rhscl
|-1/libyaml=affected,mrg-1/l |-1/libyaml=affected,mrg-1/l
|ibyaml=wontfix,mrg-2/libyam |ibyaml=wontfix,mrg-2/libyam
|l=wontfix,rhn_satellite_5.3 |l=wontfix,rhn_satellite_5.3
|/libyaml=affected,rhn_satel |/libyaml=affected,rhn_satel
|lite_5.4/libyaml=affected,r |lite_5.4/libyaml=affected,r
|hn_satellite_5.5/libyaml=af |hn_satellite_5.5/libyaml=af
|fected,rhn_satellite_5.6/li |fected,rhn_satellite_5.6/li
|byaml=affected,rhn_satellit |byaml=affected,rhn_satellit
|e_6/libyaml=affected,rhui-2 |e_6/libyaml=affected,rhui-2
|/libyaml=wontfix,sam-1/liby |/libyaml=wontfix,sam-1/liby
|aml=defer,cfme-5/mingw-liby |aml=defer,cfme-5/mingw-liby
|aml=defer,cfme-5/ruby193-li |aml=wontfix,cfme-5/ruby193-
|byaml=defer,openstack-3/lib |libyaml=affected,openstack-
|yaml=affected,openstack-3/r |3/libyaml=affected,openstac
|uby193-libyaml=affected,ope |k-3/ruby193-libyaml=affecte
|nstack-4/libyaml=affected,o |d,openstack-4/libyaml=affec
|penshift-enterprise-1/ruby1 |ted,openshift-enterprise-1/
|93-libyaml=wontfix,openshif |ruby193-libyaml=wontfix,ope
|t-1/ruby193-libyaml=affecte |nshift-1/ruby193-libyaml=af
|d,fedora-all/libyaml=affect |fected,fedora-all/libyaml=a
|ed,epel-all/libyaml=affecte |ffected,epel-all/libyaml=af
|d,fedora-all/perl-YAML-LibY |fected,fedora-all/perl-YAML
|AML=affected,epel-6/perl-YA |-LibYAML=affected,epel-6/pe
|ML-LibYAML=affected |rl-YAML-LibYAML=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=F5MTEYZhwy&a=cc_unsubscribe
9 years, 7 months
[perl-qpid/f20] (15 commits) ...Rebased on Qpid 0.30 rebased.
by Darryl L. Pierce
Summary of changes:
85c9d7c... Rebased on Qpid 0.22. (*)
fb3b419... Perl Makefile.PL now generates the Swig bindings source. (*)
e88eed1... Updated build to fix dependency issues on qpid-cpp. (*)
11fcf0d... Rebased on Qpid 0.24. (*)
ab54c51... Merge branch 'master' into f19 (*)
448e6f4... Merge branch 'f20' into f19 (*)
f97686f... Rebase on Qpid 0.28. (*)
f0c7c8f... - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass (*)
2d2a2ed... qpid-cpp now builds on ARM (*)
2a322ac... Updated the virtual package dependencies. (*)
19552ba... Merge branch 'master' into f21 (*)
e55afa6... - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_M (*)
185facd... Fixed a typo in the requires. (*)
92466c1... Perl 5.20 rebuild (*)
14b81f1... Rebased on Qpid 0.30 rebased. (*)
(*) This commit already existed in another branch; no separate mail sent
9 years, 7 months
[perl-Email-Sender/f20] 1.300016 bump
by Jitka Plesnikova
commit 9edf3fb8869d7168e382897a6c2c4e1452147cec
Author: Jitka Plesnikova <jplesnik(a)redhat.com>
Date: Fri Oct 31 16:32:27 2014 +0100
1.300016 bump
.gitignore | 1 +
perl-Email-Sender.spec | 39 ++++++++++++++++++++++++++++-----------
sources | 2 +-
3 files changed, 30 insertions(+), 12 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index a9b9972..fec99a6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@ Email-Sender-0.101760.tar.gz
/Email-Sender-0.110005.tar.gz
/Email-Sender-0.120001.tar.gz
/Email-Sender-0.120002.tar.gz
+/Email-Sender-1.300016.tar.gz
diff --git a/perl-Email-Sender.spec b/perl-Email-Sender.spec
index 4fbce43..df065e6 100644
--- a/perl-Email-Sender.spec
+++ b/perl-Email-Sender.spec
@@ -1,6 +1,6 @@
Name: perl-Email-Sender
-Version: 0.120002
-Release: 4%{?dist}
+Version: 1.300016
+Release: 1%{?dist}
Summary: A library for sending email
License: GPL+ or Artistic
Group: Development/Libraries
@@ -8,35 +8,49 @@ URL: http://search.cpan.org/dist/Email-Sender/
Source0: http://www.cpan.org/authors/id/R/RJ/RJBS/Email-Sender-%{version}.tar.gz
BuildArch: noarch
BuildRequires: perl(Capture::Tiny) >= 0.08
+BuildRequires: perl(Carp)
BuildRequires: perl(Config)
BuildRequires: perl(Cwd)
BuildRequires: perl(Data::Dumper)
-BuildRequires: perl(Email::Abstract) >= 3
+BuildRequires: perl(Email::Abstract) >= 3.006
BuildRequires: perl(Email::Address)
BuildRequires: perl(Email::Simple) >= 1.998
+BuildRequires: perl(Errno)
BuildRequires: perl(Exporter)
-BuildRequires: perl(ExtUtils::MakeMaker) >= 6.11
+BuildRequires: perl(ExtUtils::MakeMaker)
+BuildRequires: perl(Fcntl)
+BuildRequires: perl(File::Basename)
+BuildRequires: perl(File::Path) >= 2.06
+BuildRequires: perl(File::Spec)
BuildRequires: perl(File::Temp)
+BuildRequires: perl(IO::File)
+BuildRequires: perl(IO::Handle)
BuildRequires: perl(JSON)
+BuildRequires: perl(lib)
BuildRequires: perl(List::MoreUtils)
-BuildRequires: perl(Moose) >= 0.70
-BuildRequires: perl(Moose::Role)
+BuildRequires: perl(Module::Runtime)
+BuildRequires: perl(Moo) >= 1.000008
+BuildRequires: perl(Moo::Role)
+BuildRequires: perl(MooX::Types::MooseLike::Base)
BuildRequires: perl(Net::SMTP)
BuildRequires: perl(Net::SMTP::SSL)
BuildRequires: perl(Pod::Coverage::TrustPod)
+BuildRequires: perl(Scalar::Util)
+BuildRequires: perl(strict)
BuildRequires: perl(Sub::Exporter)
BuildRequires: perl(Sub::Exporter::Util)
BuildRequires: perl(Sub::Override)
+BuildRequires: perl(Sys::Hostname)
BuildRequires: perl(Test::MinimumVersion)
BuildRequires: perl(Test::MockObject)
BuildRequires: perl(Test::More) >= 0.96
-BuildRequires: perl(Test::Pod)
-BuildRequires: perl(Test::Pod::Coverage)
-BuildRequires: perl(Throwable::Error) >= 0.100090
+BuildRequires: perl(Test::Pod) >= 1.41
+BuildRequires: perl(Throwable::Error) >= 0.200003
BuildRequires: perl(Try::Tiny)
-Requires: perl(Email::Abstract) >= 3
+BuildRequires: perl(warnings)
+Requires: perl(Email::Abstract) >= 3.006
Requires: perl(Net::SMTP::SSL)
-Requires: perl(Throwable::Error) >= 0.100090
+Requires: perl(Throwable::Error) >= 0.200003
Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
%{?perl_default_filter}
@@ -72,6 +86,9 @@ RELEASE_TESTING=1 make test
%{_mandir}/man3/*
%changelog
+* Fri Oct 31 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.300016-1
+- 1.300016 bump
+
* Mon Aug 05 2013 Petr Pisar <ppisar(a)redhat.com> - 0.120002-4
- Perl 5.18 rebuild
diff --git a/sources b/sources
index f5cf315..a1e465e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-8671410f17dc316d925bbcdeb97af9c6 Email-Sender-0.120002.tar.gz
+758b2dcb2ca1dfb6f9c94ddf94aa0a57 Email-Sender-1.300016.tar.gz
9 years, 7 months
[perl-Net-DNS-SEC/el6] - Updated to 0.21, restores canonicalization of a RRSIG’s Signer Name
by Paul Wouters
commit 9945af6cd0dba15e41455f4b872ed07404d07cf1
Author: Paul Wouters <pwouters(a)redhat.com>
Date: Fri Oct 31 11:13:53 2014 -0400
- Updated to 0.21, restores canonicalization of a RRSIG’s Signer Name
.gitignore | 1 +
perl-Net-DNS-SEC.spec | 5 ++++-
sources | 2 +-
3 files changed, 6 insertions(+), 2 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index aa5af1c..fdbe9d3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@ Net-DNS-SEC-0.14.tar.gz
/Net-DNS-SEC-0.17.tar.gz
/Net-DNS-SEC-0.18.tar.gz
/Net-DNS-SEC-0.20.tar.gz
+/Net-DNS-SEC-0.21.tar.gz
diff --git a/perl-Net-DNS-SEC.spec b/perl-Net-DNS-SEC.spec
index fb0d8da..5947016 100644
--- a/perl-Net-DNS-SEC.spec
+++ b/perl-Net-DNS-SEC.spec
@@ -1,5 +1,5 @@
Name: perl-Net-DNS-SEC
-Version: 0.20
+Version: 0.21
Release: 1%{?dist}
Summary: DNSSEC modules for Perl
License: GPL+ or Artistic
@@ -61,6 +61,9 @@ make test
%{_mandir}/man3/*
%changelog
+* Fri Oct 31 2014 Paul Wouters <pwouters(a)redhat.com> - 0.21-1
+- Updated to 0.21, restores canonicalization of a RRSIG’s Signer Name
+
* Sat Aug 16 2014 Paul Wouters <pwouters(a)redhat.com> - 0.20-1
- Updated to 0.20, fixes "-" (zero) salt fields in NSEC3 representation
- Remove inappropriate deprecation warning in DNSKEY.pm (0.19 upstream)
diff --git a/sources b/sources
index ffa1467..3214f15 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-8f376c0e2473744689457efa642f75bf Net-DNS-SEC-0.20.tar.gz
+4cd803cf77f853b3079fdf539aa92749 Net-DNS-SEC-0.21.tar.gz
9 years, 7 months
[perl-Net-DNS-SEC/f20: 3/3] Merge branch 'master' into f20
by Paul Wouters
commit ffebbcb585f9c27052f6abbd5dc23365449694e3
Merge: 75f20d1 8f8d1c6
Author: Paul Wouters <pwouters(a)redhat.com>
Date: Fri Oct 31 11:10:07 2014 -0400
Merge branch 'master' into f20
.gitignore | 1 +
perl-Net-DNS-SEC.spec | 8 +++++++-
sources | 2 +-
3 files changed, 9 insertions(+), 2 deletions(-)
---
9 years, 7 months