perl-devel June 2022

perl-devel@lists.fedoraproject.org

5 participants
237 discussions

[Bug 2026907] New: Time to retire this package
by bugzilla＠redhat.com 25 May '23

25 May '23

https://bugzilla.redhat.com/show_bug.cgi?id=2026907 Bug ID: 2026907 Summary: Time to retire this package Product: Fedora Version: rawhide Status: NEW Component: perl-WWW-Google-Contacts Assignee: avibrazil(a)gmail.com Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: avibrazil(a)gmail.com, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Does perl-WWW-Google-Contacts-0:0.39-18.fc35 actually work? According to an upstream bug <https://rt.cpan.org/Public/Bug/Display.html?id=113292> it does work since 2015. This package is also the only user of perl-Crypt-SSLeay which does not work with OpenSSL 3 (bug #2007247) which now in Fedora 36. Could you please consider removing perl-WWW-Google-Contacts from Fedora? -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2026907

1 2

[Bug 1729976] New: Please package perl-LWP-Protocol-connect
by bugzilla＠redhat.com 05 May '23

05 May '23

https://bugzilla.redhat.com/show_bug.cgi?id=1729976 Bug ID: 1729976 Summary: Please package perl-LWP-Protocol-connect Product: Fedora EPEL Version: epel7 Status: NEW Component: perl-LWP-Protocol-https Assignee: extras-orphan(a)fedoraproject.org Reporter: clem.oudot(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: extras-orphan(a)fedoraproject.org, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: Some HTTP proxies require to use the CONNECT method. This is possible with Perl using LWP-Protocol-connect, but this module is not packaged in EPEL. Would it be possible to do it? -- You are receiving this mail because: You are on the CC list for the bug.

1 20

[Bug 1933287] New: EPEL8 Request: perl-File-Touch
by bugzilla＠redhat.com 05 May '23

05 May '23

https://bugzilla.redhat.com/show_bug.cgi?id=1933287 Bug ID: 1933287 Summary: EPEL8 Request: perl-File-Touch Product: Fedora EPEL Version: epel8 Status: NEW Component: perl-File-Touch Assignee: andrea.veri(a)gmail.com Reporter: jakub.jedelsky(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: andrea.veri(a)gmail.com, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Hello, I would appreciate if you could build perl-POSIX-strptime for EPEL8. Feel free to add me as co-maintainer (kubo). -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 2035341] New: CVE-2020-16154 perl-App-cpanminus: signature verification bypass
by bugzilla＠redhat.com 26 Apr '23

26 Apr '23

https://bugzilla.redhat.com/show_bug.cgi?id=2035341 Bug ID: 2035341 Summary: CVE-2020-16154 perl-App-cpanminus: signature verification bypass Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mrehak(a)redhat.com CC: hhorak(a)redhat.com, jorton(a)redhat.com, jplesnik(a)redhat.com, mmaslano(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, perl-maint-list(a)redhat.com Target Milestone: --- Classification: Other An attacker can prepend checksums for modified packages to the beginning of CHECKSUMS files, before the cleartext PGP headers. This makes the Module::Signature::_verify() checks in both cpan and cpanm pass. External Reference: https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2035341

1 13

[Bug 2037408] New: CVE-2020-16154 perl-App-cpanminus:1.7044/perl-App-cpanminus: Bypass of verification of signatures in CHECKSUMS files [fedora-all]
by bugzilla＠redhat.com 26 Apr '23

26 Apr '23

https://bugzilla.redhat.com/show_bug.cgi?id=2037408 Bug ID: 2037408 Summary: CVE-2020-16154 perl-App-cpanminus:1.7044/perl-App-cpanminus: Bypass of verification of signatures in CHECKSUMS files [fedora-all] Product: Fedora Version: 35 Status: NEW Component: perl-App-cpanminus Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: jplesnik(a)redhat.com Reporter: thoger(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, mmaslano(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2037408

1 6

[Bug 2035342] New: CVE-2020-16154 perl-App-cpanminus: signature verification bypass [fedora-all]
by bugzilla＠redhat.com 26 Apr '23

26 Apr '23

https://bugzilla.redhat.com/show_bug.cgi?id=2035342 Bug ID: 2035342 Summary: CVE-2020-16154 perl-App-cpanminus: signature verification bypass [fedora-all] Product: Fedora Version: 35 Status: NEW Component: perl-App-cpanminus Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: jplesnik(a)redhat.com Reporter: mrehak(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, mmaslano(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2035342

1 7

[Bug 1765510] New: Request to update perl-Protocol-WebSocket to 0.26 for EPEL 7
by bugzilla＠redhat.com 26 Apr '23

26 Apr '23

https://bugzilla.redhat.com/show_bug.cgi?id=1765510 Bug ID: 1765510 Summary: Request to update perl-Protocol-WebSocket to 0.26 for EPEL 7 Product: Fedora EPEL Version: epel7 Status: NEW Component: perl-Protocol-WebSocket Assignee: ddick(a)cpan.org Reporter: kretschmer.jens(a)siemens.com QA Contact: extras-qa(a)fedoraproject.org CC: ddick(a)cpan.org, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Please update perl-Protocol-WebSocket to the latest upstream version 0.26. The current version in EPEL 7 is 0.18 -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 2092363] New: Upgrade perl-Email-Valid to 1.203
by bugzilla＠redhat.com 13 Feb '23

13 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=2092363 Bug ID: 2092363 Summary: Upgrade perl-Email-Valid to 1.203 Product: Fedora Version: rawhide Status: NEW Component: perl-Email-Valid Assignee: spotrh(a)gmail.com Reporter: jplesnik(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jakub.jedelsky(a)gmail.com, perl-devel(a)lists.fedoraproject.org, spotrh(a)gmail.com, tjczepiel(a)gmail.com Target Milestone: --- Classification: Fedora Latest Fedora delivers 1.202 version. Upstream released 1.203. When you have free time, please upgrade it. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2092363

1 1

[Bug 2015018] New: Upgrade perl-Net-DNS-SEC to 1.19
by bugzilla＠redhat.com 03 Jan '23

03 Jan '23

https://bugzilla.redhat.com/show_bug.cgi?id=2015018 Bug ID: 2015018 Summary: Upgrade perl-Net-DNS-SEC to 1.19 Product: Fedora Version: rawhide Status: NEW Component: perl-Net-DNS-SEC Assignee: wjhns174(a)hardakers.net Reporter: jplesnik(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: paul.wouters(a)aiven.io, perl-devel(a)lists.fedoraproject.org, wjhns174(a)hardakers.net Target Milestone: --- Classification: Fedora Latest Fedora delivers 1.18 version. Upstream released 1.19. When you have free time, please upgrade it. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2015018

1 2

[Bug 2083148] New: CVE-2018-25033 slic3r: admesh: heap-buffer-overflow in stl_update_connects_remove_1() of src/connect.c [fedora-all]
by bugzilla＠redhat.com 13 Dec '22

13 Dec '22

https://bugzilla.redhat.com/show_bug.cgi?id=2083148 Bug ID: 2083148 Summary: CVE-2018-25033 slic3r: admesh: heap-buffer-overflow in stl_update_connects_remove_1() of src/connect.c [fedora-all] Product: Fedora Version: 35 Status: NEW Component: slic3r Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: mhroncok(a)redhat.com Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: mhroncok(a)redhat.com, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2083148

1 4

← Newer
1
2
3
4
5
6
7
8
...
24
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel June 2022