https://bugzilla.redhat.com/show_bug.cgi?id=1029710
Bug ID: 1029710
Summary: Amavisd fails to identify attached zipped files with
.exe extensions
Product: Fedora EPEL
Version: el6
Component: amavisd-new
Severity: medium
Assignee: steve(a)silug.org
Reporter: s10dal(a)elrepo.org
QA Contact: extras-qa(a)fedoraproject.org
CC: janfrode(a)tanso.net, kanarip(a)kanarip.com,
perl-devel(a)lists.fedoraproject.org, steve(a)silug.org
Description of problem:
Mail attachments containing zipped files with .exe extensions are not properly
identified due to a failure of 7za (p7zip) as called by amavisd to correctly
list the contents of the zipped file. Based on maillog errors, the failure
appears to be due to an improperly composed 7za option, specifically -w not
being separated from the target by a separator (e.g., space character).
Manually executing 7za using the options noted in the maillog error (see below)
demonstrates the need to insert a separator between the -w option and the
target.
Fails: $ 7za l -slt -w./contains_exe.zip
Works: $ 7za l -slt -w ./contains_exe.zip
Also, this issue may be specific to EL6. This issue came to my attention
because an EL6 mail server acting as a Backup MX for an EL5 mail server was
forwarding zipped exe attachments, which were correctly identified and
quarantined on the EL5 system.
Version-Release number of selected component (if applicable):
# uname -rpmi
2.6.32-358.23.2.el6.i686 i686 i686 i386
# rpm -q amavisd-new p7zip
amavisd-new-2.8.0-4.el6.noarch
p7zip-9.20.1-2.el6.i686
How reproducible:
Very. Observed on 3 EL6 mail servers.
Steps to Reproduce:
1. Install/configure postfix, amavisd-new, clam\*, etc.
2. Create a test attachment:
$ touch test.exe
$ 7za a -tzip test_exe.zip test.exe
3. Send a mail with test_exe.zip attached
4. Check /var/log/maillog for the specific error
Actual results:
From /var/log/maillog:
Nov 12 17:17:46 Mail amavis[1568]: (28807-12) (!)run_command: child process
[1568]: run_command: failed to exec /usr/bin/7za l -slt
-w/var/spool/amavisd/tmp/amavis-20131112T051218-28807-HPbWePoN/parts --
/var/spool/amavisd/tmp/amavis-20131112T051218-28807-HPbWePoN/parts/p002: 13 at
/usr/sbin/amavisd line 4062.
Nov 12 17:17:46 Mail amavis[28807]: (28807-12) (!)Decoding of p002 (Zip archive
data, at least v1.0 to extract) failed, leaving it unpacked: do_7zip: can't get
a list of archive members: exit 6; at (eval 117) line 781.
Expected results:
Identify zipped exe file as such.
Additional info:
It may not be relevant to the observed error, but 8 months ago, amavisd-new and
clam\* were converted from RepoForge/RPMforge versions to EPEL versions. Except
for a few initial hiccups, the mail servers have been running without apparent
issues until the current 7za issue was observed.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=KMKdGzsZdn&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1242769
Bug ID: 1242769
Summary: perl-Algorithm-CurveFit-1.05-14.fc23 FTBFS: Failed
test at t/02bad_deriv.t line 50
Product: Fedora
Version: rawhide
Component: perl-Algorithm-CurveFit
Assignee: jplesnik(a)redhat.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
perl-Algorithm-CurveFit-1.05-14.fc23 fails to build in F23 because tests fail:
t/01basic.t ...... ok
# Failed test at t/02bad_deriv.t line 50.
# Looks like you failed 1 test of 13.
t/02bad_deriv.t ..
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/13 subtests
Verbose test output:
$ prove -b -v t/02bad_deriv.t
t/02bad_deriv.t ..
1..13
ok 1
ok 2
not ok 3
# Failed test at t/02bad_deriv.t line 50.
ok 4
ok 5
ok 6
ok 7
ok 8
ok 9
ok 10
ok 11
ok 12
ok 13
# Looks like you failed 1 test of 13.
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/13 subtests
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1238804
Bug ID: 1238804
Summary: /usr/bin/perl is not linked with -z now
Product: Fedora
Version: rawhide
Component: perl
Assignee: jplesnik(a)redhat.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
tcallawa(a)redhat.com
/usr/bin/perl is not linked with -z now. The -z now is defined by
-specs=/usr/lib/rpm/redhat/redhat-hardened-ld:
gcc -o libperl.so -shared -O2 -g -pipe -Wall -Werror=format-security
-Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong
--param=ssp-buffer-size=4 -grecord-gcc-switches
-specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic -Wl,-z,relro
-specs=/usr/lib/rpm/redhat/redhat-hardened-ld -L/usr/local/lib -Wl,-soname
-Wl,libperl.so.5.22 op.o perl.o gv.o toke.o perly.o pad.o regcomp.o dump.o
util.o mg.o reentr.o mro_core.o keywords.o hv.o av.o run.o pp_hot.o sv.o pp.o
scope.o pp_ctl.o pp_sys.o doop.o doio.o regexec.o utf8.o taint.o deb.o
universal.o globals.o perlio.o perlapi.o numeric.o mathoms.o locale.o pp_pack.o
pp_sort.o caretx.o perldtrace.o DynaLoader.o -lpthread -lresolv -lnsl -ldl -lm
-lcrypt -lutil -lc
Processing extracted/DCombiningClass.txt
Processing extracted/DNumType.txt
gcc -o perl -fstack-protector-strong -L/usr/local/lib -Wl,--enable-new-dtags
perlmain.o libperl.so `cat ext.libs` -lpthread -lresolv -lnsl -ldl -lm -lcrypt
-lutil -lc
The reason is we configure perl as:
/bin/sh Configure -des -Doptimize="$RPM_OPT_FLAGS" \
-Dccdlflags="-Wl,--enable-new-dtags" \
-Dlddlflags="-shared $RPM_OPT_FLAGS $RPM_LD_FLAGS" \
The $RPM_LD_FLAGS should go into ccdlflags too. ccdlflags is for linking
programs dynamycally, lddlflags if for linking libraries dynamically.
Configure supports ldflags, but I worry this is has to be actively used by
Makefile.PLs, so it is not much helpful.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1224294
Bug ID: 1224294
Summary: perl-OpenGL-0.6702-4.fc23 FTBFS: undefined symbol:
glWindowPos4dMESA
Product: Fedora
Version: rawhide
Component: perl-OpenGL
Assignee: lkundrak(a)v3.sk
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: filip(a)andresovi.net, lkundrak(a)v3.sk,
perl-devel(a)lists.fedoraproject.org, scenek(a)gmail.com
perl-OpenGL-0.6702-4.fc23 fails to build in F23 because tests fail on linking
with Mesa OpenGL library:
+ make test
"/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef
*Test::Harness::Switches; test_harness(0, 'blib/lib', 'blib/arch')" t/*.t
# Failed test 'require OpenGL;'
# at t/00_require.t line 3.
# Tried to require 'OpenGL'.
# Error: Can't load
'/builddir/build/BUILD/OpenGL-0.6702/blib/arch/auto/OpenGL/OpenGL.so' for
module OpenGL:
/builddir/build/BUILD/OpenGL-0.6702/blib/arch/auto/OpenGL/OpenGL.so: undefined
symbol: glWindowPos4dMESA at /usr/lib64/perl5/DynaLoader.pm line 193.
# at (eval 4) line 2.
# Compilation failed in require at (eval 4) line 2.
# Looks like you failed 1 test of 1.
t/00_require.t .......
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests
This is caused by upgrading mesa-libGL-devel from 10.6.0-0.devel.5.51e3453 to
10.6.0-0.devel.6.5a55f68.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=984185
Bug ID: 984185
Summary: perl should be a hardened build
Product: Fedora
Version: 18
Component: perl
Severity: unspecified
Priority: unspecified
Assignee: mmaslano(a)redhat.com
Reporter: h.reindl(a)thelounge.net
QA Contact: extras-qa(a)fedoraproject.org
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
tcallawa(a)redhat.com
perl is often used for long running services (mailgraph, smokeping, postgrey..)
as well as called from webservers with untrusted input
so it should be "Full RELRO" and PIE
http://fedoraproject.org/wiki/Packaging:Guidelines#PIE
______________________________________________________
If your package meets any of the following criteria you MUST enable the PIE
compiler flags:
Your package is long running. This means it's likely to be started and keep
running until the machine is rebooted, not start on demand and quit on idle.
Your package has suid binaries, or binaries with capabilities.
Your package runs as root.
If your package meets the following criteria you should consider enabling the
PIE compiler flags:
Your package accepts/processes untrusted input.
______________________________________________________
[root@srv-rhsoft:~]$ checksec --file /usr/bin/perl
RELRO STACK CANARY NX PIE RPATH
RUNPATH FILE
Partial RELRO Canary found NX enabled No PIE RPATH
RUNPATH /usr/bin/perl
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=YABEZK214w&a=cc_unsubscribe
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: Missing Dependencies postgresql-plperl and perl-BDB-Pg > 2.0
https://bugzilla.redhat.com/show_bug.cgi?id=570321
Summary: Missing Dependencies postgresql-plperl and perl-BDB-Pg
> 2.0
Product: Fedora EPEL
Version: el5
Platform: All
OS/Version: Linux
Status: NEW
Severity: medium
Priority: low
Component: bucardo
AssignedTo: itamar(a)ispbrasil.com.br
ReportedBy: james.t.saint-rossy(a)nasa.gov
QAContact: extras-qa(a)fedoraproject.org
CC: fedora-perl-devel-list(a)redhat.com,
itamar(a)ispbrasil.com.br
Classification: Fedora
Description of problem:
Installing bucardo-4.4.0-2.el5 fails with missing dependencies.
postgresql-plperl and perl-bdb-pg >= 2.0 do not exist in either the default or
epel repositories.
Version-Release number of selected component (if applicable):
bucardo-4.4.0-2.el5
How reproducible:
Always
Steps to Reproduce:
1. yum install bucardo
Actual results:
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* addons: mirror.skiplink.com
* base: mirror.cogentco.com
* epel: mirrors.tummy.com
* extras: mirrors.serveraxis.net
* updates: mirror.san.fastserv.com
addons | 951 B 00:00
base | 2.1 kB 00:00
epel | 3.4 kB 00:00
extras | 2.1 kB 00:00
updates | 1.9 kB 00:00
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package bucardo.noarch 0:4.4.0-2.el5 set to be updated
--> Processing Dependency: perl(DBD::Pg) >= 2.0 for package: bucardo
--> Processing Dependency: postgresql-plperl for package: bucardo
--> Processing Dependency: perl(DBD::Pg) for package: bucardo
--> Processing Dependency: perl(DBIx::Safe) for package: bucardo
--> Running transaction check
---> Package bucardo.noarch 0:4.4.0-2.el5 set to be updated
--> Processing Dependency: perl(DBD::Pg) >= 2.0 for package: bucardo
--> Processing Dependency: postgresql-plperl for package: bucardo
---> Package perl-DBD-Pg.i386 0:1.49-2.el5_3.1 set to be updated
---> Package perl-DBIx-Safe.noarch 0:1.2.5-6.el5 set to be updated
--> Finished Dependency Resolution
bucardo-4.4.0-2.el5.noarch from epel has depsolving problems
--> Missing Dependency: postgresql-plperl is needed by package
bucardo-4.4.0-2.el5.noarch (epel)
bucardo-4.4.0-2.el5.noarch from epel has depsolving problems
--> Missing Dependency: perl(DBD::Pg) >= 2.0 is needed by package
bucardo-4.4.0-2.el5.noarch (epel)
Error: Missing Dependency: postgresql-plperl is needed by package
bucardo-4.4.0-2.el5.noarch (epel)
Error: Missing Dependency: perl(DBD::Pg) >= 2.0 is needed by package
bucardo-4.4.0-2.el5.noarch (epel)
You could try using --skip-broken to work around the problem
You could try running: package-cleanup --problems
package-cleanup --dupes
rpm -Va --nofiles --nodigest
Expected results:
Package successfully installs
Additional info:
Tested on Centos 5.4 and RHEL 5.4
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: missing dependancy on perl-Email-Simple-Creator
https://bugzilla.redhat.com/show_bug.cgi?id=783468
Summary: missing dependancy on perl-Email-Simple-Creator
Product: Fedora EPEL
Version: el5
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: perl-Email-MIME-Creator
AssignedTo: tcallawa(a)redhat.com
ReportedBy: carl.johnstone(a)onthebeach.co.uk
QAContact: extras-qa(a)fedoraproject.org
CC: tcallawa(a)redhat.com, fedora-perl-devel-list(a)redhat.com
Classification: Fedora
Story Points: ---
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Description of problem:
The perl-Email-MIME-Creator package has a missing dependency on
Email::Simple::Creator / perl-Email-Simple-Creator
Version-Release number of selected component (if applicable):
perl-Email-MIME-Creator.noarch 0:1.453-2.el5
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: Missing Requires: perl(Clone)
https://bugzilla.redhat.com/show_bug.cgi?id=706721
Summary: Missing Requires: perl(Clone)
Product: Fedora EPEL
Version: el5
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: perl-Hash-Merge
AssignedTo: tcallawa(a)redhat.com
ReportedBy: redhat-bugzilla(a)camperquake.de
QAContact: extras-qa(a)fedoraproject.org
CC: tcallawa(a)redhat.com, iarnell(a)gmail.com,
fedora-perl-devel-list(a)redhat.com
Classification: Fedora
Story Points: ---
Description of problem:
perl-Hash-Merge requires perl(Clone), but the spec does not reflect this.
Version-Release number of selected component (if applicable):
perl-Hash-Merge-0.11-2.el5
How reproducible:
Look at /usr/lib/perl5/vendor_perl/5.8.8/Hash/Merge.pm, line 231
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.