https://bugzilla.redhat.com/show_bug.cgi?id=1335443
Bug ID: 1335443
Summary: Net::SSLeay produces a warning on EOF
Product: Fedora
Version: 22
Component: perl-Net-SSLeay
Severity: low
Assignee: paul(a)city-fan.org
Reporter: lav(a)yars.free.net
QA Contact: extras-qa(a)fedoraproject.org
CC: jose.p.oliveira.oss(a)gmail.com, kasal(a)ucw.cz,
paul(a)city-fan.org, perl-devel(a)lists.fedoraproject.org
Created attachment 1156525
--> https://bugzilla.redhat.com/attachment.cgi?id=1156525&action=edit
proposed fix
Description of problem:
I repeatedly get this warning from Net::SSLeay:
Use of uninitialized value $got in string eq at blib/lib/Net/SSLeay.pm
(autosplit into blib/lib/auto/Net/SSLeay/ssl_read_all.al) line 549.
Version-Release number of selected component (if applicable):
perl-Net-SSLeay-1.68-1.fc22.x86_64
Expected results:
no warnings
Additional info:
a patch is attached.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1336403
Bug ID: 1336403
Summary: perl-Email-Abstract-3.008-4.fc25 FTBS:
t/abstractions.t test fails: Failed test 'correct
stringification of Mail::Internet; same as reference
object'
Product: Fedora
Version: rawhide
Component: perl-Email-Abstract
Assignee: tcallawa(a)redhat.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
tcallawa(a)redhat.com
perl-Email-Abstract-3.008-4.fc25 fails to build in F25 because tests fail:
/00-report-prereqs.t .. ok
# testing Email::MIME with 1.937
# testing Email::Simple with 2.210
# testing MIME::Entity with 5.507
# testing Mail::Internet with 2.17
# Failed test 'correct stringification of Mail::Internet; same as reference
object'
# at t/lib/Test/EmailAbstract.pm line 74.
# got: ''
# expected: 'Joanna, All
#
# Thanks. I got the following response from Fred Tydeman.
#
# On Nov 13, 9:56am in "Re: Defect in XBD lr", Joanna Farley wrote:
# > Sun's expert in this area after some discussions with a colleague
# > outside of Sun concluded that for lround, to align with both C99 and SUS
# > changes of the following form were necessary:
# > this line of text is really long and no one need worry about it but why was
such a long text chosen to begin with i mean really??
#
# -----
# Andrew Josey The Open Group
# Austin Group Chair Apex Plaza,Forbury Road,
# Email: a.josey(a)opengroup.org Reading,Berks.RG1 1AX,England
# Tel: +44 118 9508311 ext 2250 Fax: +44 118 9500110'
# Failed test 'correct body length for Mail::Internet'
# at t/lib/Test/EmailAbstract.pm line 80.
# got: '0'
# expected: '749'
# Failed test 'correct stringification of Mail::Internet; same as reference
object'
# at t/lib/Test/EmailAbstract.pm line 74.
# got: ''
# expected: 'Joanna, All
#
# Thanks. I got the following response from Fred Tydeman.
#
# On Nov 13, 9:56am in "Re: Defect in XBD lr", Joanna Farley wrote:
# > Sun's expert in this area after some discussions with a colleague
# > outside of Sun concluded that for lround, to align with both C99 and SUS
# > changes of the following form were necessary:
# > this line of text is really long and no one need worry about it but why was
such a long text chosen to begin with i mean really??
#
# -----
# Andrew Josey The Open Group
# Austin Group Chair Apex Plaza,Forbury Road,
# Email: a.josey(a)opengroup.org Reading,Berks.RG1 1AX,England
# Tel: +44 118 9508311 ext 2250 Fax: +44 118 9500110'
# Failed test 'correct body length for Mail::Internet'
# at t/lib/Test/EmailAbstract.pm line 80.
# got: '0'
# expected: '749'
# Failed test 'correct stringification of Mail::Internet; same as reference
object'
# at t/lib/Test/EmailAbstract.pm line 74.
# got: ''
# expected: 'Joanna, All
#
# Thanks. I got the following response from Fred Tydeman.
#
# On Nov 13, 9:56am in "Re: Defect in XBD lr", Joanna Farley wrote:
# > Sun's expert in this area after some discussions with a colleague
# > outside of Sun concluded that for lround, to align with both C99 and SUS
# > changes of the following form were necessary:
# > this line of text is really long and no one need worry about it but why was
such a long text chosen to begin with i mean really??
#
# -----
# Andrew Josey The Open Group
# Austin Group Chair Apex Plaza,Forbury Road,
# Email: a.josey(a)opengroup.org Reading,Berks.RG1 1AX,England
# Tel: +44 118 9508311 ext 2250 Fax: +44 118 9500110'
# Failed test 'correct body length for Mail::Internet'
# at t/lib/Test/EmailAbstract.pm line 80.
# got: '0'
# expected: '749'
# testing Mail::Message with 2.118
# testing MIME::Entity with 5.507
# testing Email::MIME with 1.937
# Looks like you failed 6 tests of 165.
t/abstractions.t .......
Dubious, test returned 6 (wstat 1536, 0x600)
Failed 6/165 subtests
This is caused by upgrading perl-MailTools from 2.16-1.fc25 to 2.17-1.fc25.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1242769
Bug ID: 1242769
Summary: perl-Algorithm-CurveFit-1.05-14.fc23 FTBFS: Failed
test at t/02bad_deriv.t line 50
Product: Fedora
Version: rawhide
Component: perl-Algorithm-CurveFit
Assignee: jplesnik(a)redhat.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
perl-Algorithm-CurveFit-1.05-14.fc23 fails to build in F23 because tests fail:
t/01basic.t ...... ok
# Failed test at t/02bad_deriv.t line 50.
# Looks like you failed 1 test of 13.
t/02bad_deriv.t ..
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/13 subtests
Verbose test output:
$ prove -b -v t/02bad_deriv.t
t/02bad_deriv.t ..
1..13
ok 1
ok 2
not ok 3
# Failed test at t/02bad_deriv.t line 50.
ok 4
ok 5
ok 6
ok 7
ok 8
ok 9
ok 10
ok 11
ok 12
ok 13
# Looks like you failed 1 test of 13.
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/13 subtests
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1326387
Bug ID: 1326387
Summary: EPEL7 branch request for perl-Data-HexDump
Product: Fedora
Version: rawhide
Component: perl-Data-HexDump
Assignee: andreas(a)bawue.net
Reporter: esandeen(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: andreas(a)bawue.net, perl-devel(a)lists.fedoraproject.org
Hi, I'd like to look into packaging ncid for EPEL7; there is one tool in the
package which requires perl-Data-HexDump. If you'd be willing to create an
EPEL7 branch for perl-Data-HexDump, that would be great.
If not, I'd be happy to own that branch, or simply remove the one tool from the
ncid package which requires it.
Thanks,
-Eric
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1288914
Bug ID: 1288914
Summary: RT package is missing database schemas
Product: Fedora
Version: rawhide
Component: rt
Assignee: rc040203(a)freenet.de
Reporter: lars(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
rc040203(a)freenet.de, tibbs(a)math.uh.edu
Description of problem:
I was trying to install RT on Fedora using a Postgres database, only to
discover that the package only includes the MySQL schema files and explicitly
excludes the schema files for Postgres, Oracle, and SQLite.
Unless there is a good reason to exclude some or all of the schema files (e.g.,
"they are unmaintained and known to be broken" would be a good reason) could we
please include *all* the schema files in the rt package?
Version-Release number of selected component (if applicable):
rt-4.2.12
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1260609
Bug ID: 1260609
Summary: bucardo-4.5.0-11.fc24 FTBFS randomly: Bucardo did not
start, but we waited!
Product: Fedora
Version: rawhide
Component: bucardo
Assignee: itamar(a)ispbrasil.com.br
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: bazanluis20(a)gmail.com, itamar(a)ispbrasil.com.br,
perl-devel(a)lists.fedoraproject.org,
puiterwijk(a)redhat.com
bucardo-4.5.0-11.fc24 fails to build in F24 sometimes:
+ make test
cp bucardo_ctl blib/script/bucardo_ctl
"/usr/bin/perl" -MExtUtils::MY -e 'MY->fixin(shift)' -- blib/script/bucardo_ctl
PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness"
"-e" "undef *Test::Harness::Switches; test_harness(0, 'blib/lib', 'blib/arch')"
t/*.t
t/00-release.t ........... skipped: Test skipped unless environment variable
RELEASE_TESTING is set
t/01-basic.t ............. ok
Bucardo did not start, but we waited!
# Looks like you planned 14 tests but ran 9.
t/09-uniqueconstraint.t ..
Dubious, test returned 255 (wstat 65280, 0xff00)
Failed 5/14 subtests
t/98-cleanup.t ........... ok
t/99-signature.t ......... skipped: Test skipped unless environment variable
RELEASE_TESTING is set
Test Summary Report
-------------------
t/09-uniqueconstraint.t (Wstat: 65280 Tests: 9 Failed: 0)
Non-zero exit status: 255
Parse errors: Bad plan. You planned 14 tests but ran 9.
Files=5, Tests=15, 60 wallclock secs ( 0.04 usr 0.01 sys + 5.72 cusr 1.46
csys = 7.23 CPU)
Result: FAIL
Failed 1/5 test programs. 0/15 subtests failed.
This looks like a race condition in the tests.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1238804
Bug ID: 1238804
Summary: /usr/bin/perl is not linked with -z now
Product: Fedora
Version: rawhide
Component: perl
Assignee: jplesnik(a)redhat.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
tcallawa(a)redhat.com
/usr/bin/perl is not linked with -z now. The -z now is defined by
-specs=/usr/lib/rpm/redhat/redhat-hardened-ld:
gcc -o libperl.so -shared -O2 -g -pipe -Wall -Werror=format-security
-Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong
--param=ssp-buffer-size=4 -grecord-gcc-switches
-specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic -Wl,-z,relro
-specs=/usr/lib/rpm/redhat/redhat-hardened-ld -L/usr/local/lib -Wl,-soname
-Wl,libperl.so.5.22 op.o perl.o gv.o toke.o perly.o pad.o regcomp.o dump.o
util.o mg.o reentr.o mro_core.o keywords.o hv.o av.o run.o pp_hot.o sv.o pp.o
scope.o pp_ctl.o pp_sys.o doop.o doio.o regexec.o utf8.o taint.o deb.o
universal.o globals.o perlio.o perlapi.o numeric.o mathoms.o locale.o pp_pack.o
pp_sort.o caretx.o perldtrace.o DynaLoader.o -lpthread -lresolv -lnsl -ldl -lm
-lcrypt -lutil -lc
Processing extracted/DCombiningClass.txt
Processing extracted/DNumType.txt
gcc -o perl -fstack-protector-strong -L/usr/local/lib -Wl,--enable-new-dtags
perlmain.o libperl.so `cat ext.libs` -lpthread -lresolv -lnsl -ldl -lm -lcrypt
-lutil -lc
The reason is we configure perl as:
/bin/sh Configure -des -Doptimize="$RPM_OPT_FLAGS" \
-Dccdlflags="-Wl,--enable-new-dtags" \
-Dlddlflags="-shared $RPM_OPT_FLAGS $RPM_LD_FLAGS" \
The $RPM_LD_FLAGS should go into ccdlflags too. ccdlflags is for linking
programs dynamycally, lddlflags if for linking libraries dynamically.
Configure supports ldflags, but I worry this is has to be actively used by
Makefile.PLs, so it is not much helpful.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1354386
Bug ID: 1354386
Summary: CVE-2016-6185 perl: XSLoader loads relative paths not
included in @INC
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: cweyl(a)alumni.drew.edu, hhorak(a)redhat.com,
iarnell(a)gmail.com, jorton(a)redhat.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
perl-devel(a)lists.fedoraproject.org,
perl-maint-list(a)redhat.com, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
rmeggins(a)redhat.com, tcallawa(a)redhat.com
An arbitrary code execution can be achieved if loading code from untrusted
current working directory despite the '.' is removed from @INC. Vulnerability
is in XSLoader that uses caller() information to locate .so file to load. If
malicious attacker creates directory named `(eval 1)` with malicious binary
file in it, it will be loaded if the package calling XSLoader is in parent
directory.
CVE assignment:
http://seclists.org/oss-sec/2016/q3/28
Upstream bug:
https://rt.cpan.org/Public/Bug/Display.html?id=115808
Upstream patch:
http://perl5.git.perl.org/perl.git/commitdiff/08e3451d7
--
You are receiving this mail because:
You are on the CC list for the bug.