https://bugzilla.redhat.com/show_bug.cgi?id=1377997
Bug ID: 1377997
Summary: perl-libxml-perl: Expanding external entities by
default [fedora-all]
Product: Fedora
Version: 24
Component: perl-libxml-perl
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: jplesnik(a)redhat.com
Reporter: amaris(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com
Blocks: 1377996
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1377996
[Bug 1377996] perl-libxml-perl: Expanding external entities by default
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1379554
Bug ID: 1379554
Summary: perl-XML-Twig: expand_external_ents option fails to
work as documented [fedora-all]
Product: Fedora
Version: 24
Component: perl-XML-Twig
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: jplesnik(a)redhat.com
Reporter: dmoppert(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: cweyl(a)alumni.drew.edu, jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com
Blocks: 1379553
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1379553
[Bug 1379553] perl-XML-Twig: expand_external_ents option fails to work as
documented
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1231244
Bug ID: 1231244
Summary: perl-HTTP-Proxy-0.303-2.fc23: FTBFS with Perl 5.22
Product: Fedora
Version: rawhide
Component: perl-HTTP-Proxy
Assignee: tcallawa(a)redhat.com
Reporter: jplesnik(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
tcallawa(a)redhat.com
Created attachment 1038071
--> https://bugzilla.redhat.com/attachment.cgi?id=1038071&action=edit
Build log
The build of perl-HTTP-Proxy failed during Perl 5.22 mass rebuild with
following errors:
# Failed test 'Read some data from the socket'
# at t/23connect.t line 79.
# Failed test 'CONNECTed to the TCP server and got the banner'
# at t/23connect.t line 80.
# got: undef
# expected: 'President_of_Earth Barbarella Professor_Ping Stomoxys Dildano
# '
[Sat Jun 6 13:11:14 2015] (16454) CONNECT: Read undef from server (Bad file
descriptor)
t/23connect.t .............
Failed 2/4 subtests
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1207174
Bug ID: 1207174
Summary: perl-IO-Socket-INET6-2.72-3.fc23 FTBFS sometimes:
Can't use an undefined value as a symbol reference at
t/io_multihomed6.t line 116.
Product: Fedora
Version: rawhide
Component: perl-IO-Socket-INET6
Assignee: wtogami(a)gmail.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
psabata(a)redhat.com, wtogami(a)gmail.com
perl-IO-Socket-INET6-2.72-3.fc23 fails to build in F23 sometimes because
t/io_multihomed6.t test fails from time to time:
$ I=0; while (prove -b t/io_multihomed6.t); do I=$((I+1)); echo $I; done
[...]
206
t/io_multihomed6.t .. ok
All tests successful.
Files=1, Tests=8, 1 wallclock secs ( 0.03 usr 0.01 sys + 0.05 cusr 0.01
csys = 0.10 CPU)
Result: PASS
207
t/io_multihomed6.t .. 1/8 Can't use an undefined value as a symbol reference at
t/io_multihomed6.t line 116.
Can't use an undefined value as a symbol reference at t/io_multihomed6.t line
156.
t/io_multihomed6.t .. Dubious, test returned 98 (wstat 25088, 0x6200)
Failed 7/8 subtests
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1011333
Bug ID: 1011333
Summary: PerlIO::via leaks a foreign memory
Product: Fedora
Version: 18
Component: perl
Assignee: jplesnik(a)redhat.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
tcallawa(a)redhat.com
This simple test:
#!/usr/bin/perl
use strict;
use warnings;
#use utf8;
{
package PerlIO::via::Bug;
sub PUSHED {
return bless {}, $_[0];
}
sub READ {
return $_[2];
}
}
open my $fh, '<:raw:via(Bug)', '/dev/null' or die "Cannot open, $! $?";
read $fh, ( my $buf ), 1024;
print $buf;
accesses foreign data (and puts them into $buf and prints them). All perls are
affected, the specific output depends on perl version and on the "use utf8"
pragma. Valgrinds warns on write(2) with uninitialized memory.
Reported to upstream as
<https://rt.perl.org/rt3//Public/Bug/Display.html?id=119961>.
All Fedoras are affected.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=5fpvmuMaSf&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1007199
Bug ID: 1007199
Summary: perl segfaults when pushing a glob to thread-shared
array
Product: Fedora
Version: 18
Component: perl
Assignee: jplesnik(a)redhat.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
tcallawa(a)redhat.com
$ perl -Mthreads -Mthreads::shared -e 'my @a :shared; push @a, *STDOUT'
Segmentation fault
This crash has been reported to upstream
<https://rt.perl.org/rt3//Public/Bug/Display.html?id=119719>.
All Fedoras are affected. (Tested with perl-libs-5.16.3-265.fc19.x86_64,
perl-threads-1.87-1.fc19.x86_64, perl-threads-shared-1.43-2.fc19.x86_64.)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=VvUjpe7qxd&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=987118
Bug ID: 987118
Summary: perl-5.18: File handles modified with binmode ':unix'
leak
Product: Fedora
Version: rawhide
Component: perl
Assignee: mmaslano(a)redhat.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
tcallawa(a)redhat.com
File handle will leak the close() call if has been modified with binmode to
':unix' layer.
[test@fedora-20 tmp]$ cat test
for my $x (1 .. 10000) {
open my $temp, '>', "/tmp/t" or die "$!";
binmode $temp, ":unix";
close $temp;
}
[test@fedora-20 tmp]$ perl ./test
Too many open files at ./test line 2.
Reported to upstream
<https://rt.perl.org:443/rt3/Ticket/Display.html?id=118957>.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=UDC1hZzy1Y&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1206915
Bug ID: 1206915
Summary: Segfault during upgrade; Segmentation fault
(core dumped) perl -MXML::SAX -e
"XML::SAX->add_parser(q($p))->save_parsers()" 2>
/dev/null
Product: Fedora
Version: 22
Component: perl-XML-SAX
Assignee: jplesnik(a)redhat.com
Reporter: rh(a)treblig.org
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com, mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com
Description of problem:
I'm doing an upgrade from f21 to f22 on my desktop using /usr/bin/python
/bin/yum --releasever=22 distro-sync;
I noticed the following scroll past:
Updating : perl-XML-DOM-1.44-22.fc22.noarch 1086/6554
Updating : perl-XML-SAX-0.99-13.fc22.noarch 1087/6554
/var/tmp/rpm-tmp.snqBZr: line 1: 8137 Segmentation fault (core dumped)
perl -MXML::SAX -e "XML::SAX->add_parser(q($p))->save_parsers()" 2> /dev/null
/var/tmp/rpm-tmp.snqBZr: line 1: 8139 Segmentation fault (core dumped)
perl -MXML::SAX -e "XML::SAX->add_parser(q($p))->save_parsers()" 2> /dev/null
dmesg shows:
[13717.710503] perl[8137]: segfault at 5 ip 00007f577661fe0e sp
00007ffe05f01e40 error 4 in LibXML.so[7f57765dd000+69000]
[13717.814099] perl[8139]: segfault at 5 ip 00007f773b509e0e sp
00007ffdadceee30 error 4 in LibXML.so[7f773b4c7000+69000]
Version-Release number of selected component (if applicable):
rpm -qa | grep perl-XML-SAX
perl-XML-SAX-0.99-13.fc22.noarch
perl-XML-SAX-Base-1.08-12.fc22.noarch
perl-XML-SAX-0.99-12.fc21.noarch
perl-XML-SAX-Base-1.08-11.fc21.noarch
[dg@major ~]$ rpm -qa | grep LibXML
perl-XML-LibXML-2.0118-1.fc22.x86_64
perl-XML-LibXML-2.0116-3.fc21.x86_64
(These rpm -qa's were taken as the upgrade was still running)
How reproducible:
Not sure, I've only done the update once
Steps to Reproduce:
1. Take a happy f21 install
2. Do upgrade to f22 using yum distro-sync
3. Watch the messages as they scroll
Actual results:
Segmentation fault (core dumped) perl -MXML::SAX -e
"XML::SAX->add_parser(q($p))->save_parsers()" 2> /dev/null
Expected results:
No seg fault
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1399506
Bug ID: 1399506
Summary: perl-File-Find-Rule-Age-0.302-5.fc26 FTBFS randomly
Product: Fedora
Version: rawhide
Component: perl-File-Find-Rule-Age
Assignee: TicoTimo(a)gmail.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org, TicoTimo(a)gmail.com
External Bug ID: GNOME Desktop 106579
perl-File-Find-Rule-Age-0.302-5.fc26 fails to build sometimes because there is
a race condition in the tests:
t/02-created.t ... skipped: Long running tests are unwanted
# Failed test 'modified_since now (DateTime::Duration)'
# at t/02-modified.t line 66.
# Structures begin differing at:
# $got->[0] = Does not exist
# $expected->[0] = 'now'
# []
# Failed test 'modified_before lastday (DateTime::Duration)'
# at t/02-modified.t line 167.
# Structures begin differing at:
# $got->[0] = 'lastday'
# $expected->[0] = 'yesterday'
# [
# 'lastday',
# 'yesterday'
# ]
# Looks like you failed 2 tests of 24.
t/02-modified.t ..
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/24 subtests
--
You are receiving this mail because:
You are on the CC list for the bug.