https://bugzilla.redhat.com/show_bug.cgi?id=1230982
Bug ID: 1230982
Summary: perl-DBD-SQLite-1.48 is available
Product: Fedora
Version: rawhide
Component: perl-DBD-SQLite
Keywords: FutureFeature, Triaged
Assignee: jplesnik(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com, mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
steve(a)silug.org
Latest upstream release: 1.48
Current version/release in rawhide: 1.46-3.fc23
URL: http://search.cpan.org/dist/DBD-SQLite/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1290794
Bug ID: 1290794
Summary: Upgrade perl-Config-Model-Itself to 2.002
Product: Fedora
Version: rawhide
Component: perl-Config-Model-Itself
Keywords: FutureFeature
Assignee: david.hannequin(a)gmail.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: david.hannequin(a)gmail.com,
perl-devel(a)lists.fedoraproject.org
Latest Fedora delivers 1.245 version. Upstream released 2.002. Please upgrade
it.
Also please enable release monitoring service to receive future notifications
about new releases.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1216112
Bug ID: 1216112
Summary: perl-XML-LibXML: "expand_entities" option was not
preserved under some circumstances
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: jplesnik(a)redhat.com, mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org,
perl-maint-list(a)redhat.com, ppisar(a)redhat.com,
psabata(a)redhat.com
It was reported that perl-XML-LibXML did ignore "expand_entities" option in
some circumstances, which could lead to sensitive information disclosure.
Original report and CVE request (reprodcuers are also available):
http://seclists.org/oss-sec/2015/q2/280
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1209917
Bug ID: 1209917
Summary: perl-Module-Signature: arbitrary code execution when
verifying module signatures
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: paul(a)city-fan.org, perl-devel(a)lists.fedoraproject.org,
perl-maint-list(a)redhat.com, pertusus(a)free.fr
Module::Signature before version 0.75 used two argument open() calls to read
the files when generating checksums from the signed manifest. This allowed
embedding arbitrary shell commands into the SIGNATURE file that would execute
during the signature verification process.
Upstream fix:
https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5a…
CVE request: http://seclists.org/oss-sec/2015/q2/59
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1209911
Bug ID: 1209911
Summary: perl-Module-Signature: unsigned files interpreted as
signed in some circumstances
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: paul(a)city-fan.org, perl-devel(a)lists.fedoraproject.org,
perl-maint-list(a)redhat.com, pertusus(a)free.fr
Module::Signature before version 0.75 could be tricked into interpreting the
unsigned portion of a SIGNATURE file as the signed portion due to faulty
parsing of the PGP signature boundaries.
Upstream fix:
https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5a…
CVE request: http://seclists.org/oss-sec/2015/q2/59
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1285486
Bug ID: 1285486
Summary: perl-Test-CheckManifest: please build and update epel7
Product: Fedora EPEL
Version: epel7
Component: perl-Test-CheckManifest
Severity: medium
Assignee: jose.p.oliveira.oss(a)gmail.com
Reporter: denis(a)fateyev.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jose.p.oliveira.oss(a)gmail.com,
perl-devel(a)lists.fedoraproject.org
Description of problem:
perl-Test-CheckManifest packages were never build for epel7, although the
branch exists. Please consider update epel7 branch to the recent package
version, then build and push the updates.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1284623
Bug ID: 1284623
Summary: perl-Test-SharedFork: update to 0.29 in epel7
Product: Fedora EPEL
Version: epel7
Component: perl-Test-SharedFork
Assignee: jose.p.oliveira.oss(a)gmail.com
Reporter: denis(a)fateyev.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jose.p.oliveira.oss(a)gmail.com,
perl-devel(a)lists.fedoraproject.org
Description of problem:
Please consider updating perl-Test-SharedFork in epel7 to more recent version.
The thing is that some new/updated packages require some recent versions for
testing intensively.
As I believe, this revision
http://pkgs.fedoraproject.org/cgit/perl-Test-SharedFork.git/tree/perl-Test-…
being merged to epel7 will be fine and shouldn't bring any issues. All
dependencies mentioned are met:
BuildRequires: perl(Config)
BuildRequires: perl(ExtUtils::MakeMaker)
BuildRequires: perl(Fcntl)
BuildRequires: perl(File::Spec::Functions)
BuildRequires: perl(File::Temp)
BuildRequires: perl(IO::Handle)
BuildRequires: perl(Module::Build)
BuildRequires: perl(Storable)
BuildRequires: perl(Test::Builder) >= 0.32
BuildRequires: perl(Test::Builder::Module)
BuildRequires: perl(Test::More) >= 0.88
BuildRequires: perl(Test::Requires)
BuildRequires: perl(Tie::Array)
BuildRequires: perl(Tie::Scalar)
BuildRequires: perl(Time::HiRes)
BuildRequires: perl(base)
BuildRequires: perl(strict)
BuildRequires: perl(warnings)
epel7:
perl(ExtUtils::MakeMaker) = 6.68
perl(Module::Build) = 0.4005
perl(Test::Builder) = 0.98
perl(Test::Builder::Module) = 0.98
perl(Test::More) = 0.98
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1294485
Bug ID: 1294485
Summary: perl-Net-GitHub-0.81 is available
Product: Fedora
Version: rawhide
Component: perl-Net-GitHub
Keywords: FutureFeature, Triaged
Assignee: psabata(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, psabata(a)redhat.com
Latest upstream release: 0.81
Current version/release in rawhide: 0.80-1.fc24
URL: http://search.cpan.org/dist/Net-GitHub/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1281323
Bug ID: 1281323
Summary: Upgrade perl-Unicode-LineBreak to 2015.11
Product: Fedora
Version: rawhide
Component: perl-Unicode-LineBreak
Keywords: FutureFeature
Assignee: xavier(a)bachelot.org
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
xavier(a)bachelot.org
Latest Fedora delivers 2015.07.16 version. Upstream released 2015.11. Please
upgrade.
Also please enable release monitoring service to receive notification about
future releases.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1293183
Bug ID: 1293183
Summary: perl-Wx-0.9928 is available
Product: Fedora
Version: rawhide
Component: perl-Wx
Keywords: FutureFeature, Triaged
Assignee: tcallawa(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
tcallawa(a)redhat.com
Latest upstream release: 0.9928
Current version/release in rawhide: 0.9927-4.fc23
URL: http://search.cpan.org/dist/Wx/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
--
You are receiving this mail because:
You are on the CC list for the bug.