[Bug 1600090] New: Bad license in doc/jp/Class-Data-Inheritable.pod
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1600090
Bug ID: 1600090
Summary: Bad license in doc/jp/Class-Data-Inheritable.pod
Product: Fedora
Version: rawhide
Component: perl-Class-Data-Inheritable
Assignee: tcallawa(a)redhat.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: paul(a)city-fan.org, perl-devel(a)lists.fedoraproject.org,
tcallawa(a)redhat.com, tremble(a)tremble.org.uk
External Bug ID: CPAN 29648
doc/jp/Class-Data-Inheritable.pod from Class-Data-Inheritable-0.08 as found in
Fedora 29 is "Artistic only":
Copyright (c) 2000, Damian Conway and Michael G Schwern. All Rights Reserved.
This module is free software. It may be used, redistributed and/or modified
under the terms of the Perl Artistic License (see
http://www.perl.com/perl/misc/Artistic.html)
I added a comment to an upstream bug report (CPAN RT#29648).
Fedora must remove the file from the source archive or the upstream change the
license.
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 5 months
[Bug 1547165] New: perl-ExtUtils-CBuilder should require gcc
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1547165
Bug ID: 1547165
Summary: perl-ExtUtils-CBuilder should require gcc
Product: Fedora
Version: rawhide
Component: perl-ExtUtils-CBuilder
Assignee: ppisar(a)redhat.com
Reporter: paul(a)city-fan.org
QA Contact: extras-qa(a)fedoraproject.org
CC: jose.p.oliveira.oss(a)gmail.com, jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
steve(a)silug.org, tcallawa(a)redhat.com
In view of the likely upcoming removal of gcc from the default buildroot, it
would make sense to add gcc as a dependency of perl-ExtUtils-CBuilder, given
that the entire purpose of the module is to compile the C portions of perl
modules.
This would fix a significant of number of perl modules that FTBFS without gcc
in the default buildroot, as can be seen by looking at the logs from the failed
builds:
https://ignatenkobrain.fedorapeople.org/gcc-removal.txt
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 5 months
[Bug 1475784] New: Useless dependency on perl(Email::Address)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1475784
Bug ID: 1475784
Summary: Useless dependency on perl(Email::Address)
Product: Fedora
Version: rawhide
Component: perl-Email-MessageID
Assignee: tcallawa(a)redhat.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
tcallawa(a)redhat.com
perl-Email-MessageID does not need Email::Address since 1.403 version. The
module is not used anywhere in the code and Changes reads:
1.403 2013-08-13 09:11:47 America/New_York
[This might break your code]
no longer a subclass of Email::Address!
I recommend to remove the build- and run-time dependency on Email::Address.
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 5 months
[Bug 1623268] New: CVE-2011-2767 mod_perl:
arbitrary Perl code execution in the context of the user account via a
user-owned .htaccess
[epel-7]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1623268
Bug ID: 1623268
Summary: CVE-2011-2767 mod_perl: arbitrary Perl code execution
in the context of the user account via a user-owned
.htaccess [epel-7]
Product: Fedora EPEL
Version: epel7
Component: mod_perl
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: ppisar(a)redhat.com
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jkaluza(a)redhat.com, jorton(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 5 months
[Bug 1623265] New: CVE-2011-2767 mod_perl:
arbitrary Perl code execution in the context of the user account via a
user-owned .htaccess
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1623265
Bug ID: 1623265
Summary: CVE-2011-2767 mod_perl: arbitrary Perl code execution
in the context of the user account via a user-owned
.htaccess
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: hhorak(a)redhat.com, jkaluza(a)redhat.com,
jorton(a)redhat.com, perl-devel(a)lists.fedoraproject.org,
perl-maint-list(a)redhat.com, ppisar(a)redhat.com
A flaw was found in mod_perl 2.0 through 2.0.10 which allows attackers to
execute arbitrary Perl code by placing it in a user-owned .htaccess file,
because (contrary to the documentation) there is no configuration option that
permits Perl code for the administrator's control of HTTP request processing
without also permitting unprivileged users to run Perl code in the context of
the user account that runs Apache HTTP Server processes.
References:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=644169
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 5 months
[Bug 1456817] New: Use of uninitialized value $fh in pattern match
(m//)
at /usr/share/perl5/vendor_perl/Proc/PID/File.pm line 286.
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1456817
Bug ID: 1456817
Summary: Use of uninitialized value $fh in pattern match (m//)
at /usr/share/perl5/vendor_perl/Proc/PID/File.pm line
286.
Product: Fedora
Version: 25
Component: perl-Proc-PID-File
Severity: low
Assignee: marianne(a)tuxette.fr
Reporter: edgar.hoch(a)ims.uni-stuttgart.de
QA Contact: extras-qa(a)fedoraproject.org
CC: marianne(a)tuxette.fr,
perl-devel(a)lists.fedoraproject.org
Created attachment 1283443
--> https://bugzilla.redhat.com/attachment.cgi?id=1283443&action=edit
Perl test program for Proc::PID::File
Description of problem:
When calling the attached perl program I get the following error messages:
Use of uninitialized value $fh in pattern match (m//) at
/usr/share/perl5/vendor_perl/Proc/PID/File.pm line 286.
Use of uninitialized value $fh in pattern match (m//) at
/usr/share/perl5/vendor_perl/Proc/PID/File.pm line 286.
The problem seems to be that sub alive calls sub read without a parameter.
Version-Release number of selected component (if applicable):
perl-Proc-PID-File-1.28-1.fc25.noarch
How reproducible:
Always.
Steps to Reproduce:
1. Call the atteched perl program.
Actual results:
Error message:
Use of uninitialized value $fh in pattern match (m//) at
/usr/share/perl5/vendor_perl/Proc/PID/File.pm line 286.
Use of uninitialized value $fh in pattern match (m//) at
/usr/share/perl5/vendor_perl/Proc/PID/File.pm line 286.
Expected results:
Nothing (no error, no output)
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 5 months