https://bugzilla.redhat.com/show_bug.cgi?id=2316684
Bug ID: 2316684
Summary: Request for packaging of Perl module Mail::DMARC
Product: Fedora
Version: 40
OS: Linux
Status: NEW
Component: perl
Severity: medium
Assignee: jplesnik(a)redhat.com
Reporter: thom.jeera(a)proton.me
QA Contact: extras-qa(a)fedoraproject.org
CC: iarnell(a)gmail.com, jplesnik(a)redhat.com, kasal(a)ucw.cz,
mmaslano(a)redhat.com, mspacek(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rhughes(a)redhat.com,
spotrh(a)gmail.com
Target Milestone: ---
Classification: Fedora
spamassassin DMARC plugin (Mail::SpamAssassin::Plugin::DMARC, one of the
default plugins) requires this module.
Error messages (reduced):
Oct 5 16:20:09.892 [1302135] dbg: plugin: loading
Mail::SpamAssassin::Plugin::DMARC from @INC
...
Oct 5 16:20:11.810 [1302135] dbg: DMARC: cannot load Mail::DMARC::PurePerl:
module: Can't locate Mail/DMARC/PurePerl.pm in @INC (you may need to install
the Mail::DMARC::PurePerl module) ...
Oct 5 16:20:11.810 [1302135] dbg: DMARC: Mail::DMARC::PurePerl is required for
DMARC checks, DMARC checks disabled
Reproducible: Always
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2316684
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2391833
Bug ID: 2391833
Summary: CVE-2025-40927 perl-CGI-Simple: CGI::Simple versions
1.281 and earlier for Perl has a HTTP response
splitting flaw [fedora-41]
Product: Fedora
Version: 41
Status: NEW
Whiteboard: {"flaws": ["933fd1f2-29f2-4e6e-b879-37c457b28ad7"]}
Component: perl-CGI-Simple
Keywords: Security, SecurityTracking
Assignee: spotrh(a)gmail.com
Reporter: jmoroney(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org, spotrh(a)gmail.com
Blocks: 2391680
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability
management information. If something is wrong or missing, please contact a
member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent…
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2391833
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2387729
Bug ID: 2387729
Summary: CVE-2025-40920
perl-Catalyst-Authentication-Credential-HTTP:
Catalyst::Authentication::Credential::HTTP insecure
nonce generation [fedora-41]
Product: Fedora
Version: 41
Status: NEW
Whiteboard: {"flaws": ["325962f0-3194-4188-939d-eb25add581fd"]}
Component: perl-Catalyst-Authentication-Credential-HTTP
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: emmanuel(a)seyman.fr
Reporter: jmoroney(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: emmanuel(a)seyman.fr, iarnell(a)gmail.com,
perl-devel(a)lists.fedoraproject.org
Blocks: 2387724
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability
management information. If something is wrong or missing, please contact a
member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent…
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2387729
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2381743
Bug ID: 2381743
Summary: CVE-2025-40924 perl-Catalyst-Plugin-Session:
Catalyst::Plugin::Session generates session ids
insecurely [fedora-41]
Product: Fedora
Version: 41
Status: NEW
Whiteboard: {"flaws": ["ec85faa5-4df6-4672-b35f-0cc4c3fcc47d"]}
Component: perl-Catalyst-Plugin-Session
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: emmanuel(a)seyman.fr
Reporter: jmoroney(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: emmanuel(a)seyman.fr, perl-devel(a)lists.fedoraproject.org
Blocks: 2381699
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability
management information. If something is wrong or missing, please contact a
member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent…
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2381743
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2381430
Bug ID: 2381430
Summary: CVE-2025-40918 perl-Authen-SASL:
Authen::SASL::Perl::DIGEST_MD5 insecure cnonce
generation [fedora-41]
Product: Fedora
Version: 41
Status: NEW
Whiteboard: {"flaws": ["b8a1661d-36c5-46b6-9770-4c1464735756"]}
Component: perl-Authen-SASL
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: jplesnik(a)redhat.com
Reporter: jmoroney(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: anon.amish(a)gmail.com, jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, steve(a)silug.org
Blocks: 2380942
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability
management information. If something is wrong or missing, please contact a
member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent…
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2381430
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2370477
Bug ID: 2370477
Summary: CVE-2011-10007 perl-File-Find-Rule-Perl:
File::Find::Rule Arbitrary Code Execution [fedora-41]
Product: Fedora
Version: 41
Status: NEW
Whiteboard: {"flaws": ["ccdc166f-e010-4850-b637-d5c4a8627e2c"]}
Component: perl-File-Find-Rule-Perl
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: rc040203(a)freenet.de
Reporter: jmoroney(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: paul(a)city-fan.org, perl-devel(a)lists.fedoraproject.org,
rc040203(a)freenet.de
Blocks: 2370424
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
https://bugzilla.redhat.com/show_bug.cgi?id=2370424
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2370477
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2369086
Bug ID: 2369086
Summary: CVE-2025-31501 rt: From CVEorg collector [fedora-41]
Product: Fedora
Version: 41
Status: NEW
Whiteboard: {"flaws": ["c8ec98c3-462b-423d-8c73-182e3e8d58e8"]}
Component: rt
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: rc040203(a)freenet.de
Reporter: jmoroney(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: j(a)tib.bs, perl-devel(a)lists.fedoraproject.org,
rc040203(a)freenet.de
Blocks: 2369046
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
https://bugzilla.redhat.com/show_bug.cgi?id=2369046
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2369086
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…