[Bug 1074722] New: CVE-2014-2277 perltidy: insecure temporary file creation [epel-5]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1074722
Bug ID: 1074722
Summary: CVE-2014-2277 perltidy: insecure temporary file
creation [epel-5]
Product: Fedora EPEL
Version: el5
Component: perltidy
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: lxtnow(a)gmail.com
Reporter: mmcallis(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: lxtnow(a)gmail.com, perl-devel(a)lists.fedoraproject.org
Blocks: 1074720 (CVE-2014-2277)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
epel-5 tracking bug for perltidy: see blocks bug list for full details of the
security issue(s).
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1074720
[Bug 1074720] CVE-2014-2277 perltidy: insecure temporary file creation
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=jITR4XkK9W&a=cc_unsubscribe
9Â years, 5Â months
[Bug 1168861] New: perl-Catalyst-Runtime-5.90019-6.fc22 FTBFS: Class::MOP::load_class is deprecated
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1168861
Bug ID: 1168861
Summary: perl-Catalyst-Runtime-5.90019-6.fc22 FTBFS:
Class::MOP::load_class is deprecated
Product: Fedora
Version: rawhide
Component: perl-Catalyst-Runtime
Assignee: emmanuel(a)seyman.fr
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: emmanuel(a)seyman.fr, iarnell(a)gmail.com,
mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
perl-Catalyst-Runtime-5.90019-6.fc22 fails to build because warnings are
produces and they are prohibited by a test:
+ export TEST_LIGHTTPD=1
+ TEST_LIGHTTPD=1
+ export TEST_HTTP=1
+ TEST_HTTP=1
+ export TEST_POD=1
+ TEST_POD=1
+ export TEST_STRESS=1
+ TEST_STRESS=1
+ make test
PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness"
"-e" "undef *Test::Harness::Switches; test_harness(0, 'inc', 'blib/lib',
'blib/arch')" t/*.t t/aggregate/*.t
t/01use.t ............................................................. ok
t/aggregate.t .........................................................
skipped: No test aggregation requested
Class::MOP::load_class is deprecated at
/usr/lib64/perl5/vendor_perl/Class/MOP.pm line 68.
Class::MOP::load_class() called at
/builddir/build/BUILD/Catalyst-Runtime-5.90019/blib/lib/Catalyst.pm line 2987
Catalyst::setup_plugins() called at
/builddir/build/BUILD/Catalyst-Runtime-5.90019/blib/lib/Catalyst.pm line 1109
Catalyst::setup() called at t/aggregate/c3_appclass_bug.t line 26
Test::Exception::lives_ok() called at t/aggregate/c3_appclass_bug.t line 27
[...]
# Failed test 'no warnings emitted'
# at t/unit_utils_load_class.t line 29.
# got: '2'
# expected: '0'
# Looks like you failed 1 test of 18.
Difference between working and failed build root is:
Removed packages:
audit-libs-2.4.1
basesystem-10.0
bash-4.3.30
binutils-2.24
bzip2-1.0.6
bzip2-libs-1.0.6
ca-certificates-2014.2.1
chkconfig-1.3.62
coreutils-8.23
cpio-2.11
cpp-4.9.2
cracklib-2.9.1
cracklib-dicts-2.9.1
crypto-policies-20140905
curl-7.38.0
cyrus-sasl-lib-2.1.26
device-mapper-1.02.90
device-mapper-libs-1.02.90
diffutils-3.3
dwz-0.11
elfutils-0.160
elfutils-libelf-0.160
elfutils-libs-0.160
expat-2.1.0
fedora-logos-httpd-21.0.4
fedora-release-22
fedora-release-cloud-22
fedora-repos-22
fedora-repos-rawhide-22
file-5.20
file-libs-5.20
filesystem-3.2
findutils-4.5.14
gawk-4.1.1
gcc-4.9.2
gcc-c++-4.9.2
gdbm-1.11
ghc-srpm-macros-1.3
glib2-2.43.0
gmp-6.0.0
gnat-srpm-macros-1
gnupg2-2.0.25
grep-2.20
groff-1.22.2
groff-base-1.22.2
gzip-1.6
info-5.2
keyutils-libs-1.5.9
kmod-18
kmod-libs-18
krb5-libs-1.13
libacl-2.2.52
libarchive-3.1.2
libassuan-2.1.2
libattr-2.4.47
libbabeltrace-1.2.1
libblkid-2.25.2
libcap-2.24
libcap-ng-0.7.4
libcom_err-1.42.12
libcurl-7.38.0
libdb-5.3.28
libdb-utils-5.3.28
libffi-3.1
libgcc-4.9.2
libgcrypt-1.6.1
libgomp-4.9.2
libgpg-error-1.16
libidn-1.29
libmetalink-0.1.2
libmount-2.25.2
libmpc-1.0.2
libpwquality-1.2.4
libselinux-2.3
libsemanage-2.3
libsepol-2.3
libsmartcols-2.25.2
libssh2-1.4.3
libstdc++-4.9.2
libstdc++-devel-4.9.2
libtasn1-4.2
libuser-0.60
libutempter-1.1.6
libuuid-2.25.2
libverto-0.2.6
libxml2-2.9.2
lua-5.2.2
lzo-2.08
make-4.0
mpfr-3.1.2
ncurses-5.9
ncurses-base-5.9
ncurses-libs-5.9
nspr-4.10.7
nss-3.17.2
nss-softokn-3.17.2
nss-softokn-freebl-3.17.2
nss-sysinit-3.17.2
nss-tools-3.17.2
nss-util-3.17.2
ocaml-srpm-macros-2
openldap-2.4.40
openssl-libs-1.0.1j
p11-kit-0.22.1
p11-kit-trust-0.22.1
pam-1.1.8
patch-2.7.1
pcre-8.36
perl-CPAN-Meta-2.142060
perl-CPAN-Meta-Requirements-2.128
perl-Devel-PartialDump-0.15
perl-Devel-StackTrace-1.34
perl-Encode-2.63
perl-Eval-Closure-0.08
perl-ExtUtils-CBuilder-0.280219
perl-ExtUtils-MakeMaker-7.00
perl-ExtUtils-Manifest-1.68
perl-File-Modified-0.07
perl-generators-1.00
perl-HTTP-Tiny-0.050
perl-IO-Socket-SSL-2.002
perl-Moose-2.1005
perl-MooseX-Getopt-0.63
perl-MooseX-MethodAttributes-0.28
perl-MooseX-Role-WithOverloading-0.15
perl-Path-Tiny-0.059
perl-Role-Tiny-1.003003
perl-Scalar-List-Utils-1.38
perl-srpm-macros-1
perl-String-RewritePrefix-0.006
perl-Test-Harness-3.33
perl-Test-Simple-1.001008
perl-Tree-Simple-VisitorFactory-0.10
perl-URI-1.64
pinentry-0.8.3
pkgconfig-0.28
popt-1.16
pth-2.0.7
python-libs-2.7.8
readline-6.3
redhat-rpm-config-26
rpm-4.12.0.1
rpm-build-4.12.0.1
rpm-build-libs-4.12.0.1
rpm-libs-4.12.0.1
rpm-plugin-selinux-4.12.0.1
sed-4.2.2
setup-2.9.2
shadow-utils-4.1.5.1
shared-mime-info-1.3
sqlite-3.8.7
systemd-libs-217
tar-1.28
tzdata-2014i
unzip-6.0
ustr-1.0.4
util-linux-2.25.2
which-2.20
xz-5.1.2
xz-libs-5.1.2
zip-3.0
zlib-1.2.8
Added packages:
device-mapper-1.02.91
device-mapper-libs-1.02.91
fedora-logos-httpd-21.0.5
groff-1.22.3
kmod-19
kmod-libs-19
perl-CPAN-Meta-2.143240
perl-CPAN-Meta-Requirements-2.130
perl-Devel-Caller-2.06
perl-Devel-LexAlias-0.05
perl-Devel-OverloadInfo-0.002
perl-Devel-PartialDump-0.17
perl-Devel-StackTrace-2.00
perl-Encode-2.64
perl-Eval-Closure-0.11
perl-ExtUtils-CBuilder-0.280220
perl-ExtUtils-Command-1.18
perl-ExtUtils-MakeMaker-7.02
perl-ExtUtils-Manifest-1.69
perl-File-Modified-0.09
perl-Filter-Simple-0.91
perl-generators-1.01
perl-HTTP-Tiny-0.051
perl-IO-Socket-SSL-2.006
perl-Moose-2.1402
perl-MooseX-Getopt-0.65
perl-MooseX-MethodAttributes-0.29
perl-MooseX-Role-WithOverloading-0.16
perl-PadWalker-1.99
perl-Path-Tiny-0.061
perl-Pod-Usage-1.64
perl-Role-Tiny-1.003004
perl-Scalar-List-Utils-1.41
perl-String-RewritePrefix-0.007
perl-Test-Harness-3.34
perl-Test-Simple-1.001009
perl-Tree-Simple-VisitorFactory-0.12
perl-URI-1.65
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=XDpZgpKvTR&a=cc_unsubscribe
9Â years, 5Â months
[Bug 1051110] New: perl-PlRPC: weak crypto [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1051110
Bug ID: 1051110
Summary: perl-PlRPC: weak crypto [fedora-all]
Product: Fedora
Version: 20
Component: perl-PlRPC
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: ppisar(a)redhat.com
Reporter: ratulg(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com
Blocks: 1051106
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue affects multiple supported versions of Fedora.
Only one tracking bug has been filed; please ensure that it is only closed
when all affected versions are fixed.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1051106
[Bug 1051106] perl-PlRPC: weak crypto
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ezmRo1eO9S&a=cc_unsubscribe
9Â years, 5Â months
[Bug 1168879] New: perl-ZeroMQ-0.23-8.fc22 FTBFS: too few arguments to function 'zmq_recv'
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1168879
Bug ID: 1168879
Summary: perl-ZeroMQ-0.23-8.fc22 FTBFS: too few arguments to
function 'zmq_recv'
Product: Fedora
Version: rawhide
Component: perl-ZeroMQ
Assignee: jose.p.oliveira.oss(a)gmail.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jose.p.oliveira.oss(a)gmail.com,
perl-devel(a)lists.fedoraproject.org
perl-ZeroMQ fails to build in F22:
gcc -c "-I." "-Ixs" "-I." -D_REENTRANT -D_GNU_SOURCE -fwrapv
-fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include
-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -Wall -Wextra
-Wdeclaration-after-statement -Wc++-compat -O2 -g -pipe -Wall
-Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions
-fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64
-mtune=generic -DVERSION=\"0.23\" -DXS_VERSION=\"0.23\" -o xs/perl_zeromq.o
-fPIC "-I/usr/lib64/perl5/CORE" -DUSE_PPPORT xs/perl_zeromq.c
xs/perl_zeromq.xs: In function 'XS_ZeroMQ__Raw_zmq_recv':
xs/perl_zeromq.xs:492:14: error: too few arguments to function 'zmq_recv'
rv = zmq_recv(socket->socket, &msg, flags);
Difference between working and failing build root:
Removed packages:
audit-libs-2.4.1
basesystem-10.0
bash-4.3.30
binutils-2.24
bzip2-1.0.6
bzip2-libs-1.0.6
ca-certificates-2014.2.1
chkconfig-1.3.63
coreutils-8.23
cpio-2.11
cpp-4.9.2
cracklib-2.9.1
cracklib-dicts-2.9.1
crypto-policies-20140905
curl-7.39.0
cyrus-sasl-lib-2.1.26
diffutils-3.3
dwz-0.11
elfutils-0.160
elfutils-libelf-0.160
elfutils-libs-0.160
expat-2.1.0
fedora-release-22
fedora-release-cloud-22
fedora-repos-22
fedora-repos-rawhide-22
file-5.20
file-libs-5.20
filesystem-3.2
findutils-4.5.14
gawk-4.1.1
gcc-4.9.2
gcc-c++-4.9.2
gdbm-1.11
ghc-srpm-macros-1.3
glib2-2.43.0
glibc-2.20.90
glibc-common-2.20.90
glibc-devel-2.20.90
glibc-headers-2.20.90
gmp-6.0.0
gnat-srpm-macros-1
gnupg2-2.0.25
grep-2.20
groff-base-1.22.3
gzip-1.6
info-5.2
kernel-headers-3.18.0
keyutils-libs-1.5.9
krb5-libs-1.13
libacl-2.2.52
libarchive-3.1.2
libassuan-2.1.2
libattr-2.4.47
libbabeltrace-1.2.1
libblkid-2.25.2
libcap-2.24
libcap-ng-0.7.4
libcom_err-1.42.12
libcurl-7.39.0
libdb-5.3.28
libdb-utils-5.3.28
libffi-3.1
libgcc-4.9.2
libgcrypt-1.6.1
libgomp-4.9.2
libgpg-error-1.16
libidn-1.29
libmetalink-0.1.2
libmount-2.25.2
libmpc-1.0.2
libpwquality-1.2.4
libselinux-2.3
libsemanage-2.3
libsepol-2.3
libsmartcols-2.25.2
libssh2-1.4.3
libstdc++-4.9.2
libstdc++-devel-4.9.2
libtasn1-4.2
libuser-0.60
libutempter-1.1.6
libuuid-2.25.2
libverto-0.2.6
libxml2-2.9.2
lua-5.2.2
lzo-2.08
make-4.0
mpfr-3.1.2
ncurses-5.9
ncurses-base-5.9
ncurses-libs-5.9
nspr-4.10.7
nss-3.17.2
nss-softokn-3.17.2
nss-softokn-freebl-3.17.2
nss-sysinit-3.17.2
nss-tools-3.17.2
nss-util-3.17.2
ocaml-srpm-macros-2
openldap-2.4.40
openssl-libs-1.0.1j
p11-kit-0.22.1
p11-kit-trust-0.22.1
pam-1.1.8
patch-2.7.1
pcre-8.36
perl-ExtUtils-Manifest-1.68
perl-File-HomeDir-1.00
perl-File-Which-1.09
perl-HTTP-Tiny-0.050
perl-Scalar-List-Utils-1.38
perl-srpm-macros-1
pinentry-0.9.0
pkgconfig-0.28
popt-1.16
pth-2.0.7
python-libs-2.7.8
readline-6.3
redhat-rpm-config-26
rpm-4.12.0.1
rpm-build-4.12.0.1
rpm-build-libs-4.12.0.1
rpm-libs-4.12.0.1
rpm-plugin-selinux-4.12.0.1
sed-4.2.2
setup-2.9.2
shadow-utils-4.1.5.1
shared-mime-info-1.3
sqlite-3.8.7
systemd-libs-217
tar-1.28
tzdata-2014i
unzip-6.0
ustr-1.0.4
util-linux-2.25.2
which-2.20
xz-5.1.2
xz-libs-5.1.2
zeromq-2.2.0
zeromq-devel-2.2.0
zip-3.0
zlib-1.2.8
Added packages:
perl-ExtUtils-Manifest-1.69
perl-HTTP-Tiny-0.051
perl-Scalar-List-Utils-1.41
zeromq-4.0.5
zeromq-devel-4.0.5
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=TaBUTJg0bg&a=cc_unsubscribe
9Â years, 5Â months