[Bug 1821881] New: CVE-2013-7488 perl-Convert-ASN1: allows remote
attackers to cause an infinite loop via unexpected input [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1821881
Bug ID: 1821881
Summary: CVE-2013-7488 perl-Convert-ASN1: allows remote
attackers to cause an infinite loop via unexpected
input [fedora-all]
Product: Fedora
Version: 31
Status: NEW
Component: perl-Convert-ASN1
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: jplesnik(a)redhat.com
Reporter: gsuckevi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: caillon+fedoraproject(a)gmail.com, caolanm(a)redhat.com,
john.j5live(a)gmail.com, jplesnik(a)redhat.com,
kasal(a)ucw.cz, perl-devel(a)lists.fedoraproject.org,
rhughes(a)redhat.com, rstrode(a)redhat.com,
sandmann(a)redhat.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 4 months
[Bug 1890896] New: Add perl-File-Map to EPEL8
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1890896
Bug ID: 1890896
Summary: Add perl-File-Map to EPEL8
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: perl-File-Map
Assignee: lkundrak(a)v3.sk
Reporter: jplesnik(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: emmanuel(a)seyman.fr, lkundrak(a)v3.sk,
perl-devel(a)lists.fedoraproject.org
Blocks: 1890795
Target Milestone: ---
Classification: Fedora
I need perl-File-Map for perl-PDL in EPEL8. Could you please build it there? If
you give me (jplesnik) permissions in dist-git, I can do it instead of you.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1890795
[Bug 1890795] EPEL8 Request: perl-PDL
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 4 months
[Bug 1781753] New: Co-maintainer request (to maintain EPEL8 branch)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1781753
Bug ID: 1781753
Summary: Co-maintainer request (to maintain EPEL8 branch)
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Net-Amazon-S3
Assignee: ppisar(a)redhat.com
Reporter: i.gnatenko.brain(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jakub.jedelsky(a)gmail.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
rrati(a)redhat.com, tjczepiel(a)gmail.com
Target Milestone: ---
Classification: Fedora
Hello,
We are working on bringing multiple perl packages into a 'upstream' (EPEL)
which we use internally (at GoodData). This package is one of many which have
builds in Fedora Rawhide but lacks EPEL8 branch. We would like to request it
and help you to maintain the package (incl. Fedora Rawhide).
Please add us to a maintainer list for the package perl-Net-Amazon-S3. Our FAS
usernames are:
- tjmc
- kubo
Thanks for the cooperation in advance!
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 4 months
[Bug 1889575] New: perl-Graph-0.9705 is available
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1889575
Bug ID: 1889575
Summary: perl-Graph-0.9705 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Graph
Keywords: FutureFeature, Triaged
Assignee: athoscribeiro(a)gmail.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: alexl(a)users.sourceforge.net, athoscribeiro(a)gmail.com,
igor.raits(a)gmail.com,
perl-devel(a)lists.fedoraproject.org,
walt(a)gouldfamily.org
Target Milestone: ---
Classification: Fedora
Latest upstream release: 0.9705
Current version/release in rawhide: 0.97.04-15.fc33
URL: http://search.cpan.org/dist/Graph/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/7524/
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 4 months
[Bug 1744419] New: Replace /etc/rc.d/init.d/httpd by systemctl
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1744419
Bug ID: 1744419
Summary: Replace /etc/rc.d/init.d/httpd by systemctl
Product: Fedora
Version: 30
OS: Linux
Status: NEW
Component: w3c-markup-validator
Assignee: nathanael(a)gnat.ca
Reporter: jan.kratochvil(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: nathanael(a)gnat.ca, perl-devel(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
Description of problem:
Scripts are obsolete.
Version-Release number of selected component (if applicable):
w3c-markup-validator-1.3-16.fc30.noarch
How reproducible:
Always.
Steps to Reproduce:
1. dnf install w3c-markup-validator
2. Access http://localhost/w3c-validator/
Actual results:
File not found.
Expected results:
Validator.
Additional info:
.spec scripts are calling:
/etc/rc.d/init.d/httpd reload
They should call:
systemctl try-reload-or-restart httpd
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 5 months
[Bug 1890417] New: amavisd-new-snmp can't be installed on EL8
because of dropped net-snmp-perl
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1890417
Bug ID: 1890417
Summary: amavisd-new-snmp can't be installed on EL8 because of
dropped net-snmp-perl
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: amavisd-new
Assignee: j.orti.alcaine(a)gmail.com
Reporter: pb(a)bieringer.de
QA Contact: extras-qa(a)fedoraproject.org
CC: janfrode(a)tanso.net, j.orti.alcaine(a)gmail.com,
perl-devel(a)lists.fedoraproject.org, steve(a)silug.org,
vanmeeuwen+fedora(a)kolabsys.com
Target Milestone: ---
Classification: Fedora
Description of problem:
amavisd-new-snmp can't be installed on EL8 because of dependency
"net-snmp-perl" was dropped from EL8 and also not available on EPEL8
Version:
2.12.0-9
How reproducible:
always
Steps to Reproduce:
yum install amavisd-new-snmp
Last metadata expiration check: 0:15:58 ago on Thu Oct 22 08:35:19 2020.
Actual results:
Error:
Problem: cannot install the best candidate for the job
- nothing provides perl(NetSNMP::ASN) needed by
amavis-snmp-2.12.0-9.el8.noarch
- nothing provides perl(NetSNMP::OID) needed by
amavis-snmp-2.12.0-9.el8.noarch
- nothing provides perl(NetSNMP::agent) needed by
amavis-snmp-2.12.0-9.el8.noarch
- nothing provides perl(NetSNMP::default_store) needed by
amavis-snmp-2.12.0-9.el8.noarch
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use
not only best candidate packages)
Expected results:
working
Additional info:
There is "net-snmp-perl" available on Okay-repo, but this downgrades also
net-snmp-libs (and others).
Imho it was a very strange decission to drop the "net-snmp-perl", because
potentially this cannot even put dedicated into EPEL8...
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 5 months
[Bug 1851872] New: Wrong tag in comment line of DKIM record: 'i='
should be 's='
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1851872
Bug ID: 1851872
Summary: Wrong tag in comment line of DKIM record: 'i=' should
be 's='
Product: Fedora EPEL
Version: epel8
Hardware: x86_64
OS: Linux
Status: NEW
Component: amavisd-new
Severity: low
Assignee: jortialc(a)redhat.com
Reporter: aad(a)offerman.net
QA Contact: extras-qa(a)fedoraproject.org
CC: janfrode(a)tanso.net, jortialc(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, steve(a)silug.org,
vanmeeuwen+fedora(a)kolabsys.com
Target Milestone: ---
Classification: Fedora
Description of problem:
The comment line generated with the DKIM record shows an 'i=' (identifier) tag,
while this should be the 's=' (selector) tag.
Version-Release number of selected component (if applicable):
2.12.0
How reproducible:
set up a DKIM key pair in the configuration and run the command:
amavisd -c /etc/amavisd/amavisd.conf showkeys
the first line of a/each DKIM record is a command line, now saying something
like this:
; key#27 4096 bits, i=dkim20191228, d=example.com,
/etc/amavisd/example.com.dkim20191228.pem
this should be:
; key#27 4096 bits, s=dkim20191228, d=example.com,
/etc/amavisd/example.com.dkim20191228.pem
Additional info:
Since this is only a comment line providing info on the actual record that
follows, there's no harm done, other than suggesting that this is the
identifier rather than the selector tag.
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 5 months
[Bug 1821879] New: CVE-2013-7488 perl-Convert-ASN1: allows remote
attackers to cause an infinite loop via unexpected input
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1821879
Bug ID: 1821879
Summary: CVE-2013-7488 perl-Convert-ASN1: allows remote
attackers to cause an infinite loop via unexpected
input
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: caillon+fedoraproject(a)gmail.com, caolanm(a)redhat.com,
john.j5live(a)gmail.com, jplesnik(a)redhat.com,
kasal(a)ucw.cz, perl-devel(a)lists.fedoraproject.org,
perl-maint-list(a)redhat.com, ppisar(a)redhat.com,
psabata(a)redhat.com, rhughes(a)redhat.com,
rstrode(a)redhat.com, sandmann(a)redhat.com
Target Milestone: ---
Classification: Other
perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows
remote attackers to cause an infinite loop via unexpected input.
Reference:
https://github.com/gbarr/perl-Convert-ASN1/issues/14
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 5 months
[Bug 1890589] New: EPEL8 Request: perl-Config-GitLike
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1890589
Bug ID: 1890589
Summary: EPEL8 Request: perl-Config-GitLike
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Config-GitLike
Assignee: emmanuel(a)seyman.fr
Reporter: jakub.jedelsky(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: emmanuel(a)seyman.fr, iarnell(a)gmail.com,
perl-devel(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
Hello, I would appreciate if you could build perl-Config-GitLike for EPEL8.
Feel free to add me as co-maintainer. This package and its dependencies are
built from master branch in
https://copr.fedorainfracloud.org/coprs/kubo/gdc/packages/. Thanks.
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 5 months
[Bug 1893136] New: RFE - build a perl-Future package for EPEL8
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1893136
Bug ID: 1893136
Summary: RFE - build a perl-Future package for EPEL8
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Future
Assignee: emmanuel(a)seyman.fr
Reporter: steve.traylen(a)cern.ch
QA Contact: extras-qa(a)fedoraproject.org
CC: emmanuel(a)seyman.fr, perl-devel(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
Hi,
Please can a perl-Future package be built.
I verified that the current HEAD package can be built and installed
so long as the perl-Test-Identity is available which currently it is not.
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 5 months