https://bugzilla.redhat.com/show_bug.cgi?id=2030311
Bug ID: 2030311
Summary: Please branch and build perl-Authen-Krb5 in epel9
Product: Fedora EPEL
Version: epel9
Status: NEW
Component: perl-Authen-Krb5
Assignee: simon(a)sxw.org.uk
Reporter: alex.iribarren(a)cern.ch
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org, simon(a)sxw.org.uk
Target Milestone: ---
Classification: Fedora
Description of problem:
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2030311
https://bugzilla.redhat.com/show_bug.cgi?id=1716324
Bug ID: 1716324
Summary: perl-Text-Xslate-3.5.6-5.fc30 is not linked to
libperl.so
Product: Fedora
Version: 30
Status: NEW
Component: perl-Text-Xslate
Assignee: jplesnik(a)redhat.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: i(a)cicku.me, jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
perl-Text-Xslate-3.5.6-5.fc30 lost a dependency on libperl.so since
-Wl,--as-needed was added to distribution-wide linker flags:
$ scanelf -n blib/arch/auto/Text/Xslate/Xslate.so
TYPE NEEDED FILE
ET_DYN libc.so.6 blib/arch/auto/Text/Xslate/Xslate.so
$ ldd -r blib/arch/auto/Text/Xslate/Xslate.so
linux-vdso.so.1 (0x00007fff0d5cb000)
libc.so.6 => /lib64/libc.so.6 (0x00007f948b9a1000)
/lib64/ld-linux-x86-64.so.2 (0x00007f948bb8f000)
undefined symbol: Perl_sv_cmp (blib/arch/auto/Text/Xslate/Xslate.so)
undefined symbol: PL_ppaddr (blib/arch/auto/Text/Xslate/Xslate.so)
[...]
Xslate.so is built like this:
gcc -lpthread -shared -Wl,-z,relro -Wl,--as-needed -Wl,-z,now
-specs=/usr/lib/rpm/redhat/redhat-hardened-ld -L/usr/local/lib
-fstack-protector-strong -lperl -o blib/arch/auto/Text/Xslate/Xslate.so
lib/Text/Xslate.o src/xslate_methods.o
The cause is that -Wl,--as-needed takes effect when library is supplied and
considering only preceding object files and ignoring and following object
files. A correct linker command must list all object files before -l flags.
Like this:
gcc lib/Text/Xslate.o src/xslate_methods.o -lpthread -shared -Wl,-z,relro
-Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld
-L/usr/local/lib -fstack-protector-strong -lperl -o
blib/arch/auto/Text/Xslate/Xslate.so
Either there is bug in perl-Text-Xslate build script or in
Module::Build::XSUtil that it uses.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1923909
Bug ID: 1923909
Summary: Upgrade perl-Tree-DAG_Node to 1.32
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Tree-DAG_Node
Assignee: spotrh(a)gmail.com
Reporter: jplesnik(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jose.p.oliveira.oss(a)gmail.com, paul(a)city-fan.org,
perl-devel(a)lists.fedoraproject.org, spotrh(a)gmail.com
Target Milestone: ---
Classification: Fedora
Latest Fedora delivers 1.31 version. Upstream released 1.32. When you have free
time, please upgrade it.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2035273
Bug ID: 2035273
Summary: CVE-2020-16156 perl-CPAN: allows Signature
Verification Bypass
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mrehak(a)redhat.com
CC: caswilli(a)redhat.com, hhorak(a)redhat.com,
jorton(a)redhat.com, jplesnik(a)redhat.com,
kaycoth(a)redhat.com, mspacek(a)redhat.com,
perl-devel(a)lists.fedoraproject.org,
perl-maint-list(a)redhat.com, ppisar(a)redhat.com
Target Milestone: ---
Classification: Other
It was found that cpan and cpanm are vulnerable to a signature verification
bypass. Additionally, CPAN::Checksums (used by PAUSE) does not uniquely
identify packages in the signed CHECKSUMS file, enabling a supply chain attack.
Reference:
https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2035273
https://bugzilla.redhat.com/show_bug.cgi?id=2257106
Bug ID: 2257106
Summary: F40FailsToInstall: perl-WWW-Google-Contacts
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-WWW-Google-Contacts
Assignee: avibrazil(a)gmail.com
Reporter: fti-bugs(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: avibrazil(a)gmail.com,
perl-devel(a)lists.fedoraproject.org
Blocks: 2231790 (F40FailsToInstall,RAWHIDEFailsToInstall)
Target Milestone: ---
Classification: Fedora
Hello,
Please note that this comment was generated automatically by
https://pagure.io/releng/blob/main/f/scripts/ftbfs-fti/follow-policy.py
If you feel that this output has mistakes, please open an issue at
https://pagure.io/releng/
Your package (perl-WWW-Google-Contacts) Fails To Install in Fedora 40:
can't install perl-WWW-Google-Contacts:
- nothing provides perl(Net::Google::AuthSub) needed by
perl-WWW-Google-Contacts-0.39-23.fc39.noarch
If you know about this problem and are planning on fixing it, please
acknowledge so by setting the bug status to ASSIGNED. If you don't have time to
maintain this package, consider orphaning it, so maintainers of dependent
packages realize the problem.
If you don't react accordingly to the policy for FTBFS/FTI bugs
(https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails…)
your package may be orphaned in 8+ weeks.
P.S. The data was generated solely from koji buildroot, so it might be newer
than the latest compose or the content on mirrors. To reproduce, use the
koji/local repo only, e.g. in mock:
$ mock -r fedora-40-x86_64 --config-opts mirrored=False install
perl-WWW-Google-Contacts
P.P.S. If this bug has been reported in the middle of upgrading multiple
dependent packages, please consider using side tags:
https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/#updating-inter-d…
Thanks!
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2231790
[Bug 2231790] Fedora 40 Fails To install Tracker
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2257106
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2230255
Bug ID: 2230255
Summary: perl-HTTP-Tiny: a ton of new dependencies all of a
sudden?
Product: Fedora
Version: 38
Hardware: All
OS: Linux
Status: NEW
Component: perl-HTTP-Tiny
Assignee: jplesnik(a)redhat.com
Reporter: aros(a)gmx.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com, mspacek(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com
Target Milestone: ---
Classification: Fedora
Why does a new version of perl-HTTP-Tiny now depend on a ton of new Perl
subpackages?
Could this please be made optional?
# dnf update perl-HTTP-Tiny
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Upgrading:
perl-HTTP-Tiny noarch 0.086-2.fc38 updates 55 k
Installing dependencies:
perl-AutoLoader noarch 5.74-497.fc38 updates 22 k
perl-Digest noarch 1.20-490.fc38 fedora 25 k
perl-Digest-MD5 x86_64 2.58-490.fc38 fedora 36 k
perl-IO-Socket-IP noarch 0.41-492.fc38 fedora 41 k
perl-IO-Socket-SSL noarch 2.081-1.fc38 fedora 227 k
perl-Mozilla-CA noarch 20221114-2.fc38 fedora 12 k
perl-Net-SSLeay x86_64 1.92-5.fc38 fedora 361 k
perl-URI noarch 5.17-2.fc38 fedora 120 k
perl-base noarch 2.27-497.fc38 updates 17 k
perl-libnet noarch 3.15-1.fc38 fedora 128 k
Transaction Summary
================================================================================
Install 10 Packages
Upgrade 1 Package
Total download size: 1.0 M
Is this ok [y/N]:
Operation aborted.
This looks totally excessive and unnecessary.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2230255
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…