https://bugzilla.redhat.com/show_bug.cgi?id=2030311
Bug ID: 2030311
Summary: Please branch and build perl-Authen-Krb5 in epel9
Product: Fedora EPEL
Version: epel9
Status: NEW
Component: perl-Authen-Krb5
Assignee: simon(a)sxw.org.uk
Reporter: alex.iribarren(a)cern.ch
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org, simon(a)sxw.org.uk
Target Milestone: ---
Classification: Fedora
Description of problem:
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2030311
https://bugzilla.redhat.com/show_bug.cgi?id=2355705
Bug ID: 2355705
Summary: CVE-2024-13939 perl-String-Compare-ConstantTime:
String::Compare::ConstantTime for Perl through 0.321
is vulnerable to timing attacks that allow an attacker
to guess the length of a secret string [fedora-41]
Product: Fedora
Version: 41
Status: NEW
Whiteboard: {"flaws": ["da725ec8-9b41-4a44-8936-c21c330ab0cf"]}
Component: perl-String-Compare-ConstantTime
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: ppisar(a)redhat.com
Reporter: ahanwate(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com
Blocks: 2355663
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
https://bugzilla.redhat.com/show_bug.cgi?id=2355663
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2355705
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=1716324
Bug ID: 1716324
Summary: perl-Text-Xslate-3.5.6-5.fc30 is not linked to
libperl.so
Product: Fedora
Version: 30
Status: NEW
Component: perl-Text-Xslate
Assignee: jplesnik(a)redhat.com
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: i(a)cicku.me, jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
perl-Text-Xslate-3.5.6-5.fc30 lost a dependency on libperl.so since
-Wl,--as-needed was added to distribution-wide linker flags:
$ scanelf -n blib/arch/auto/Text/Xslate/Xslate.so
TYPE NEEDED FILE
ET_DYN libc.so.6 blib/arch/auto/Text/Xslate/Xslate.so
$ ldd -r blib/arch/auto/Text/Xslate/Xslate.so
linux-vdso.so.1 (0x00007fff0d5cb000)
libc.so.6 => /lib64/libc.so.6 (0x00007f948b9a1000)
/lib64/ld-linux-x86-64.so.2 (0x00007f948bb8f000)
undefined symbol: Perl_sv_cmp (blib/arch/auto/Text/Xslate/Xslate.so)
undefined symbol: PL_ppaddr (blib/arch/auto/Text/Xslate/Xslate.so)
[...]
Xslate.so is built like this:
gcc -lpthread -shared -Wl,-z,relro -Wl,--as-needed -Wl,-z,now
-specs=/usr/lib/rpm/redhat/redhat-hardened-ld -L/usr/local/lib
-fstack-protector-strong -lperl -o blib/arch/auto/Text/Xslate/Xslate.so
lib/Text/Xslate.o src/xslate_methods.o
The cause is that -Wl,--as-needed takes effect when library is supplied and
considering only preceding object files and ignoring and following object
files. A correct linker command must list all object files before -l flags.
Like this:
gcc lib/Text/Xslate.o src/xslate_methods.o -lpthread -shared -Wl,-z,relro
-Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld
-L/usr/local/lib -fstack-protector-strong -lperl -o
blib/arch/auto/Text/Xslate/Xslate.so
Either there is bug in perl-Text-Xslate build script or in
Module::Build::XSUtil that it uses.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2338799
Bug ID: 2338799
Summary: Many core Perl modules are missing
Product: Fedora
Version: 41
Hardware: x86_64
OS: Linux
Status: NEW
Component: perl
Severity: medium
Assignee: jplesnik(a)redhat.com
Reporter: davidlevner(a)yahoo.com
QA Contact: extras-qa(a)fedoraproject.org
CC: iarnell(a)gmail.com, jplesnik(a)redhat.com, kasal(a)ucw.cz,
mmaslano(a)redhat.com, mspacek(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rhughes(a)redhat.com,
spotrh(a)gmail.com
Target Milestone: ---
Classification: Fedora
Created attachment 2066675
--> https://bugzilla.redhat.com/attachment.cgi?id=2066675&action=edit
List of core Perl modules missing after installing Fedora 41
Description of problem:
When I did a fresh install of Fedora 41 on a new computer, many core Perl
modules and programs were not installed. I have a fairly complete list of
modules that I generated with a Perl script (see attachment). I don't have a
complete list of Perl core programs, but I do know that perl5db.pl is missing.
You can't run the Perl debugger without perl5db.pl.
Version-Release number of selected component (if applicable):
Perl v 5.40.0
How reproducible:
I only did a fresh install of Fedora 41 once. The problem occurred. I don't
have the resources to reproduce the problem on other computers.
Steps to Reproduce:
1. Create a fresh installation of Fedora 41.
2. Search the following directories for the modules listed in the attachment:
/usr/local/lib64/perl5/5.40
/usr/local/share/perl5/5.40
/usr/lib64/perl5/vendor_perl
/usr/share/perl5/vendor_perl
/usr/lib64/perl5
/usr/share/perl5
For perl5db.pl, type "which perl5db.pl" or look in all the directories in your
execution path for a file of this name.
Actual results:
perl5db.pl and the modules are not found.
Expected results:
perl5db.pl and all the modules are found.
Additional info:
For a discussion of what constitutes a core Perl module, see
https://www.perl.com/article/what-is-the-perl-core-/. This article confirms
that Fedora has a long-standing problem of omitting core Perl modules.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2338799
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2332241
Bug ID: 2332241
Summary: CVE-2024-55918 perl-Graphics-ColorNames: HTML
injection [fedora-41]
Product: Fedora
Version: 41
Status: NEW
Whiteboard: {"flaws": ["39c04a19-4932-4492-ba5e-9a8f0ae95fb4"]}
Component: perl-Graphics-ColorNames
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: jplesnik(a)redhat.com
Reporter: ahanwate(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, steve(a)silug.org
Blocks: 2332239
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
https://bugzilla.redhat.com/show_bug.cgi?id=2332239
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2332241
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2283360
Bug ID: 2283360
Summary: F41FailsToInstall: asciio, perl-App-Asciio
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-App-Asciio
Assignee: emmanuel(a)seyman.fr
Reporter: fti-bugs(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: emmanuel(a)seyman.fr, perl-devel(a)lists.fedoraproject.org
Blocks: 2260877 (F41FailsToInstall,RAWHIDEFailsToInstall)
Target Milestone: ---
Classification: Fedora
Hello,
Please note that this comment was generated automatically by
https://pagure.io/releng/blob/main/f/scripts/ftbfs-fti/follow-policy.py
If you feel that this output has mistakes, please open an issue at
https://pagure.io/releng/
Your package (perl-App-Asciio) Fails To Install in Fedora 41:
can't install asciio:
- nothing provides perl(App::Asciio::Text::Asciio) needed by
asciio-1.90.02-1.fc41.noarch
- nothing provides perl(Term::TermKey) needed by asciio-1.90.02-1.fc41.noarch
can't install perl-App-Asciio:
- nothing provides perl(App::Asciio::GTK::Asciio::stripes::angled_arrow)
needed by perl-App-Asciio-1.90.02-1.fc41.noarch
- nothing provides perl(App::Asciio::GTK::Asciio::stripes::editable_exec_box)
needed by perl-App-Asciio-1.90.02-1.fc41.noarch
- nothing provides perl(App::Asciio::GTK::Asciio::stripes::ellipse) needed by
perl-App-Asciio-1.90.02-1.fc41.noarch
- nothing provides perl(App::Asciio::GTK::Asciio::stripes::rhombus) needed by
perl-App-Asciio-1.90.02-1.fc41.noarch
- nothing provides
perl(App::Asciio::GTK::Asciio::stripes::section_wirl_arrow) needed by
perl-App-Asciio-1.90.02-1.fc41.noarch
- nothing provides perl(App::Asciio::Text::Asciio::Dialogs) needed by
perl-App-Asciio-1.90.02-1.fc41.noarch
- nothing provides perl(App::Asciio::Text::Asciio::Menues) needed by
perl-App-Asciio-1.90.02-1.fc41.noarch
- nothing provides perl(App::Asciio::Text::Asciio::stripes::editable_arrow2)
needed by perl-App-Asciio-1.90.02-1.fc41.noarch
- nothing provides perl(App::Asciio::Text::Asciio::stripes::editable_box2)
needed by perl-App-Asciio-1.90.02-1.fc41.noarch
- nothing provides
perl(App::Asciio::Text::Asciio::stripes::editable_exec_box) needed by
perl-App-Asciio-1.90.02-1.fc41.noarch
- nothing provides
perl(App::Asciio::Text::Asciio::stripes::section_wirl_arrow) needed by
perl-App-Asciio-1.90.02-1.fc41.noarch
- nothing provides perl(App::Asciio::Text::Asciio::stripes::wirl_arrow)
needed by perl-App-Asciio-1.90.02-1.fc41.noarch
If you know about this problem and are planning on fixing it, please
acknowledge so by setting the bug status to ASSIGNED. If you don't have time to
maintain this package, consider orphaning it, so maintainers of dependent
packages realize the problem.
If you don't react accordingly to the policy for FTBFS/FTI bugs
(https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails…)
your package may be orphaned in 8+ weeks.
P.S. The data was generated solely from koji buildroot, so it might be newer
than the latest compose or the content on mirrors. To reproduce, use the
koji/local repo only, e.g. in mock:
$ mock -r fedora-41-x86_64 --config-opts mirrored=False install asciio
perl-App-Asciio
P.P.S. If this bug has been reported in the middle of upgrading multiple
dependent packages, please consider using side tags:
https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/#updating-inter-d…
Thanks!
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2260877
[Bug 2260877] Fedora 41 Fails To install Tracker
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2283360
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2349284
Bug ID: 2349284
Summary: perl-Text-CSV-2.06 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Text-CSV
Keywords: FutureFeature, Triaged
Assignee: jvromans(a)squirrel.nl
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
jvromans(a)squirrel.nl, lkundrak(a)v3.sk,
perl-devel(a)lists.fedoraproject.org,
redhat-bugzilla(a)linuxnetz.de
Target Milestone: ---
Classification: Fedora
Releases retrieved: 2.06
Upstream release that is considered latest: 2.06
Current version/release in rawhide: 2.05-1.fc42
URL: https://metacpan.org/dist/Text-CSV/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/3433/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/perl-Text-CSV
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2349284
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…