perl-devel December 2017

perl-devel@lists.fedoraproject.org

3 participants
262 discussions

[Bug 1467600] New: CVE-2017-10788 perl-DBD-MySQL: Use-after-free when calling mysql_stmt_error() after mysql_stmt_close()
by bugzilla＠redhat.com 17 Jul '18

17 Jul '18

https://bugzilla.redhat.com/show_bug.cgi?id=1467600 Bug ID: 1467600 Summary: CVE-2017-10788 perl-DBD-MySQL: Use-after-free when calling mysql_stmt_error() after mysql_stmt_close() Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: hhorak(a)redhat.com, jorton(a)redhat.com, jplesnik(a)redhat.com, perl-devel(a)lists.fedoraproject.org, perl-maint-list(a)redhat.com, ppisar(a)redhat.com, psabata(a)redhat.com The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering (1) certain error responses from a MySQL server or (2) a loss of a network connection to a MySQL server. The use-after-free defect was introduced by relying on incorrect Oracle mysql_stmt_close documentation and code examples. Upstream bug: https://github.com/perl5-dbi/DBD-mysql/issues/120 References: http://seclists.org/oss-sec/2017/q2/443 -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1467608] New: CVE-2017-10788 CVE-2017-10789 perl-DBD-MySQL: various flaws [fedora-all]
by bugzilla＠redhat.com 17 Jul '18

17 Jul '18

https://bugzilla.redhat.com/show_bug.cgi?id=1467608 Bug ID: 1467608 Summary: CVE-2017-10788 CVE-2017-10789 perl-DBD-MySQL: various flaws [fedora-all] Product: Fedora Version: 25 Component: perl-DBD-MySQL Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: jplesnik(a)redhat.com Reporter: amaris(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, perl-devel(a)lists.fedoraproject.org This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug.

1 16

[Bug 1529797] New: fusioninventory-agent-2.4 is available
by bugzilla＠redhat.com 16 Jul '18

16 Jul '18

https://bugzilla.redhat.com/show_bug.cgi?id=1529797 Bug ID: 1529797 Summary: fusioninventory-agent-2.4 is available Product: Fedora Version: rawhide Component: fusioninventory-agent Keywords: FutureFeature, Triaged Assignee: marianne(a)tuxette.fr Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: johan(a)x-tnd.be, marianne(a)tuxette.fr, perl-devel(a)lists.fedoraproject.org Latest upstream release: 2.4 Current version/release in rawhide: 2.3.21-3.fc28 URL: http://www.fusioninventory.org/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/5671/ -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1526063] New: perl stops working after upgrade F26 -> F27
by bugzilla＠redhat.com 15 Jun '18

15 Jun '18

https://bugzilla.redhat.com/show_bug.cgi?id=1526063 Bug ID: 1526063 Summary: perl stops working after upgrade F26 -> F27 Product: Fedora Version: 27 Component: perl Severity: urgent Assignee: jplesnik(a)redhat.com Reporter: mutiny.mutiny(a)rediffmail.com QA Contact: extras-qa(a)fedoraproject.org CC: alexl(a)redhat.com, caillon+fedoraproject(a)gmail.com, iarnell(a)gmail.com, jplesnik(a)redhat.com, kasal(a)ucw.cz, mbarnes(a)fastmail.com, mmaslano(a)redhat.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com, psabata(a)redhat.com, rhughes(a)redhat.com, sandmann(a)redhat.com, tcallawa(a)redhat.com Description of problem: I can'r run my perl scripts because of module errors. To solve them I tried to re-run my perl cpan script - which fails. Version-Release number of selected component (if applicable): perl5 (revision 5 version 26 subversion 1) How reproducible: Invoking cpan Steps to Reproduce: 1. Invoking cpan via command line 2. result: 3. Actual results: Attempt to reload Scalar/Util.pm aborted. Compilation failed in require at /usr/share/perl5/Safe.pm line 4. BEGIN failed--compilation aborted at /usr/share/perl5/Safe.pm line 4. Compilation failed in require at /usr/share/perl5/vendor_perl/CPAN.pm line 57. BEGIN failed--compilation aborted at /usr/share/perl5/vendor_perl/CPAN.pm line 57. Compilation failed in require at /usr/share/perl5/vendor_perl/App/Cpan.pm line 288. BEGIN failed--compilation aborted at /usr/share/perl5/vendor_perl/App/Cpan.pm line 288. Compilation failed in require at /usr/bin/cpan line 7. BEGIN failed--compilation aborted at /usr/bin/cpan line 7. Expected results: no error message. Additional info: invokib cowsay causes: Can't load '/usr/local/lib64/perl5/auto/Encode/Encode.so' for module Encode: libperl.so.5.24: cannot open shared object file: No such file or directory at /usr/share/perl5/XSLoader.pm line 96. at /usr/local/lib64/perl5/Encode.pm line 10. Compilation failed in require at /usr/bin/cowsay line 18. -- You are receiving this mail because: You are on the CC list for the bug.

1 13

[Bug 1098012] New: autoclass has been replaced by Class-AutoClass
by Red Hat Bugzilla 14 Jun '18

14 Jun '18

https://bugzilla.redhat.com/show_bug.cgi?id=1098012 Bug ID: 1098012 Summary: autoclass has been replaced by Class-AutoClass Product: Fedora Version: rawhide Component: perl-AutoClass Assignee: alexl(a)users.sourceforge.net Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: alexl(a)users.sourceforge.net, perl-devel(a)lists.fedoraproject.org The autoclass-v1.01 CPAN distribution in Fedora is old. Upstream has been replaces by Class-AutoClass CPAN distribution. Please package perl-Class-AutoClass and obsolete this perl-autoclass package. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=VmbYCqw8qI&a=cc_unsubscribe

2 6

[Bug 1499505] New: perl XS files including /usr/include/gtk-2.0/gtk/ gtk.h fail with ATK_MINOR_VERSION redefined
by bugzilla＠redhat.com 29 May '18

29 May '18

https://bugzilla.redhat.com/show_bug.cgi?id=1499505 Bug ID: 1499505 Summary: perl XS files including /usr/include/gtk-2.0/gtk/gtk.h fail with ATK_MINOR_VERSION redefined Product: Fedora Version: 26 Component: perl-Gtk2 Severity: medium Assignee: tcallawa(a)redhat.com Reporter: trevor(a)tecnopolis.ca QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, tcallawa(a)redhat.com Description of problem: I have a perl script that has an XS component and it calls: #include <gtk/gtk.h> and that fails on cpan make with a version mismatch (see error at bottom). So it looks like Fedora has moved to version 22 but the perl cpan module included with Fedora is stuck at the old version. I checked and it seems upstream is still the old version too. Should I take this upstream with the cpan author? I'm not sure why the module is even defining this constant at all, but it worked fine in older Fedoras. Version-Release number of selected component (if applicable): atk-devel-2.24.0-1.fc26.x86_64 perl-Gtk2-1.2499-2.fc26.x86_64 How reproducible: always Steps to Reproduce: 1. Have a perl XS file that has the line: #include <gtk/gtk.h> 2. have that script run 3. (I use Gtk2::CV to reproduce this bug if you use cpan to install/build that you'll see the problem) Actual results: In file included from /usr/lib64/perl5/vendor_perl/Gtk2/Install/gtk2perl.h:31:0, from CV.xs:17: /usr/lib64/perl5/vendor_perl/Gtk2/Install/gtk2perl-versions.h:2:0: warning: "ATK_MINOR_VERSION" redefined #define ATK_MINOR_VERSION (22) In file included from /usr/include/atk-1.0/atk/atkobject.h:29:0, from /usr/include/atk-1.0/atk/atk.h:25, from /usr/include/gtk-2.0/gtk/gtkwidget.h:40, from /usr/include/gtk-2.0/gtk/gtkcontainer.h:35, from /usr/include/gtk-2.0/gtk/gtkbin.h:35, from /usr/include/gtk-2.0/gtk/gtkwindow.h:36, from /usr/include/gtk-2.0/gtk/gtkdialog.h:35, from /usr/include/gtk-2.0/gtk/gtkaboutdialog.h:32, from /usr/include/gtk-2.0/gtk/gtk.h:33, from CV.xs:13: /usr/include/atk-1.0/atk/atkversion.h:53:0: note: this is the location of the previous definition #define ATK_MINOR_VERSION (24) Expected results: no error, file compiles in cpan Additional info: Worked fine in Fedora 24 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1410774] New: perl-PDL-Graphics-PLplot-0.71-3.fc26 FTBFS
by Red Hat Bugzilla 29 May '18

29 May '18

https://bugzilla.redhat.com/show_bug.cgi?id=1410774 Bug ID: 1410774 Summary: perl-PDL-Graphics-PLplot-0.71-3.fc26 FTBFS Product: Fedora Version: rawhide Component: perl-PDL-Graphics-PLplot Assignee: ppisar(a)redhat.com Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: i(a)cicku.me, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com perl-PDL-Graphics-PLplot-0.71-3.fc26 fails to build in F26 because tests fail on 64-bit PowerPC: t/plplot.t ................ All 15 subtests passed sh: line 1: 28335 Segmentation fault (core dumped) perl -Mblib ./t/x09.pl -dev svg -o x09p.svg -fam > /dev/null 2>&1 # Failed test 'Script ./t/x09.pl ran successfully' # at t/plplot_library_tests.t line 68. # Failed test 'Output file x09p.svg.2 matches C output' # at t/plplot_library_tests.t line 74. sh: line 1: 28730 Segmentation fault (core dumped) perl -Mblib ./t/x22.pl -dev svg -o x22p.svg -fam > /dev/null 2>&1 # Failed test 'Script ./t/x22.pl ran successfully' # at t/plplot_library_tests.t line 68. # Failed test 'Output file x22p.svg.1 matches C output' # at t/plplot_library_tests.t line 74. # Looks like you failed 4 tests of 221. t/plplot_library_tests.t .. Dubious, test returned 4 (wstat 1024, 0x400) Failed 4/221 subtests Test Summary Report ------------------- t/plplot.t (Wstat: 139 Tests: 15 Failed: 0) Non-zero wait status: 139 Parse errors: No plan found in TAP output t/plplot_library_tests.t (Wstat: 1024 Tests: 221 Failed: 4) Failed tests: 67, 69, 122-123 Non-zero exit status: 4 Files=2, Tests=236, 41 wallclock secs ( 0.05 usr 0.01 sys + 13.73 cusr 1.06 csys = 14.85 CPU) Result: FAIL -- You are receiving this mail because: You are on the CC list for the bug.

2 14

[Bug 1384434] New: perl-Audio-Beep build is interactive
by Red Hat Bugzilla 29 May '18

29 May '18

https://bugzilla.redhat.com/show_bug.cgi?id=1384434 Bug ID: 1384434 Summary: perl-Audio-Beep build is interactive Product: Fedora Version: rawhide Component: perl-Audio-Beep Assignee: jan.klepek(a)gmail.com Reporter: rjones(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jan.klepek(a)gmail.com, perl-devel(a)lists.fedoraproject.org Description of problem: The perl-Audio-Beep package fails to build from source unless stdin is /dev/null. This is because the build interactively asks questions: $ fedpkg local Downloading Audio-Beep-0.11.tar.gz ######################################################################## 100.0% Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.DDaXlx + umask 022 + cd /home/rjones/d/fedora/perl-Audio-Beep/master + cd /home/rjones/d/fedora/perl-Audio-Beep/master + rm -rf Audio-Beep-0.11 + /usr/bin/gzip -dc /home/rjones/d/fedora/perl-Audio-Beep/master/Audio-Beep-0.11.tar.gz + /usr/bin/tar -xof - + STATUS=0 + '[' 0 -ne 0 ']' + cd Audio-Beep-0.11 + /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w . + chmod -x music/beep_player.pl + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.1IrEhL + umask 022 + cd /home/rjones/d/fedora/perl-Audio-Beep/master + cd Audio-Beep-0.11 + /usr/bin/perl Makefile.PL INSTALLDIRS=vendor 'OPTIMIZE=-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic' Would you like to install Japanese documentation? If you enter 'y' then i will try to install Japanese docs alongside English ones. On platforms using 'man' manpages (typically on UN*X) Japanese documentation will be available transparently to users whose locale language is set to Japanese. On other platforms the documentation will be available as Audio::Beep_jp Default is to not install Japanese docs. [N/y] (At this point the build hangs) Version-Release number of selected component (if applicable): perl-Audio-Beep-0.11-17.fc26 How reproducible: 100% Steps to Reproduce: 1. Run 'fedpkg local', 'rpmbuild' etc. -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1414996] New: please stop sending email to root in build tests
by Red Hat Bugzilla 29 May '18

29 May '18

https://bugzilla.redhat.com/show_bug.cgi?id=1414996 Bug ID: 1414996 Summary: please stop sending email to root in build tests Product: Fedora Version: rawhide Component: perl-Log-Dispatch Assignee: tcallawa(a)redhat.com Reporter: kevin(a)scrye.com QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, rc040203(a)freenet.de, tcallawa(a)redhat.com In tests perl-Log-Dispatch seems to send an email to root(a)localhost.localdomain saying something a test passing. It's from "LogDispatch(a)foo.bar" to "root(a)localhost.localdomain" Due to our setup this email tries to bound, but foo.bar isn't found so it just gets dropped. It would be nice to not send it at all. :) -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1517572] New: Please add unar dependency/ configuration for *.rar and comment *.lrz support
by bugzilla＠redhat.com 16 May '18

16 May '18

https://bugzilla.redhat.com/show_bug.cgi?id=1517572 Bug ID: 1517572 Summary: Please add unar dependency/configuration for *.rar and comment *.lrz support Product: Fedora EPEL Version: epel7 Component: amavisd-new Severity: high Assignee: j.orti.alcaine(a)gmail.com Reporter: redhat-bugzilla(a)linuxnetz.de QA Contact: extras-qa(a)fedoraproject.org CC: janfrode(a)tanso.net, j.orti.alcaine(a)gmail.com, perl-devel(a)lists.fedoraproject.org, steve(a)silug.org, vanmeeuwen+fedora(a)kolabsys.com Description of problem: Please add unar dependency/configuration for *.rar and comment *.lrz support. Version-Release number of selected component (if applicable): amavisd-new-2.11.0-1.el7 unar-1.10.1-1.el7 Expected results: --- snipp --- --- amavisd-new-2.11.0/amavisd.conf 2016-04-26 21:24:26.000000000 +0200 +++ amavisd-new-2.11.0/amavisd.conf.rsc 2017-11-27 00:24:38.000000000 +0100 @@ -326,8 +326,8 @@ ['lzma', \&do_uncompress, ['lzmadec', 'xz -dc --format=lzma', 'lzma -dc', 'unlzma -c', 'lzcat', 'lzmadec'] ], - ['lrz', \&do_uncompress, - ['lrzip -q -k -d -o -', 'lrzcat -q -k'] ], +# ['lrz', \&do_uncompress, +# ['lrzip -q -k -d -o -', 'lrzcat -q -k'] ], ['lzo', \&do_uncompress, 'lzop -d'], ['lz4', \&do_uncompress, ['lz4c -d'] ], ['rpm', \&do_uncompress, ['rpm2cpio.pl', 'rpm2cpio'] ], @@ -335,7 +335,7 @@ # ['/usr/local/heirloom/usr/5bin/pax', 'pax', 'gcpio', 'cpio'] ['deb', \&do_ar, 'ar'], # ['a', \&do_ar, 'ar'], # unpacking .a seems an overkill - ['rar', \&do_unrar, ['unrar', 'rar'] ], + ['rar', \&do_unrar, ['unrar', 'rar', 'unar'] ], ['arj', \&do_unarj, ['unarj', 'arj'] ], ['arc', \&do_arc, ['nomarch', 'arc'] ], ['zoo', \&do_zoo, ['zoo', 'unzoo'] ], --- snapp --- --- snipp --- --- a/amavisd-new.spec +++ b/amavisd-new.spec @@ -47,6 +47,7 @@ Requires: nomarch Requires: p7zip, p7zip-plugins Requires: tar Requires: unzoo +Requires: unar # We probably should parse the fetch_modules() code in amavisd for this list. # These are just the dependencies that don't get picked up otherwise. Requires: perl(Archive::Tar) --- snapp --- -- You are receiving this mail because: You are on the CC list for the bug.

1 17

← Newer
1
2
3
4
5
6
7
...
27
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel December 2017