perl-devel September 2026

perl-devel@lists.fedoraproject.org

2 participants
204 discussions

[Bug 2543884] New: perl-DBI-1.655 is available
by bugzilla＠redhat.com 08 Oct '26

08 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2543884 Bug ID: 2543884 Summary: perl-DBI-1.655 is available Product: Fedora Version: rawhide Status: NEW Component: perl-DBI Keywords: FutureFeature, Triaged Assignee: jplesnik(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, rhughes(a)redhat.com, rstrode(a)redhat.com Target Milestone: --- Classification: Fedora Releases retrieved: 1.655 Upstream release that is considered latest: 1.655 Current version/release in rawhide: 1.654-1.fc46 URL: https://metacpan.org/dist/DBI/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/2811/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/perl-DBI -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2543884 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 11

[Bug 2542966] New: CVE-2026-88816 perl-DBI: perl-DBI: Denial of Service via numeric FetchHashKeyName attribute [fedora-all]
by bugzilla＠redhat.com 08 Oct '26

08 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2542966 Bug ID: 2542966 Summary: CVE-2026-88816 perl-DBI: perl-DBI: Denial of Service via numeric FetchHashKeyName attribute [fedora-all] Product: Fedora Version: rawhide Status: NEW Whiteboard: {"flaws": ["245b53b3-bf28-41f4-a33a-2cc84423bc98"]} Component: perl-DBI Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: jplesnik(a)redhat.com Reporter: vvasilev(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, rhughes(a)redhat.com, rstrode(a)redhat.com Blocks: 2542560 (CVE-2026-88816) Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrow_hashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer (IV) or floating-point (NV) value, that pointer is invalid, so reading the key name triggers a segmentation fault. This can be triggered with the following code: my $dbh = DBI->connect( "dbi:ExampleP:", "", "", { RaiseError => 0, PrintError => 0 } ); $dbh->{FetchHashKeyName} = 42; my $sth = $dbh->prepare("select mode, size, name from ."); $sth->execute; $sth->fetchrow_hashref; Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2542560 [Bug 2542560] CVE-2026-88816 perl-DBI: perl-DBI: Denial of Service via numeric FetchHashKeyName attribute -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2542966 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 12

[Bug 2542965] New: CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting [fedora-all]
by bugzilla＠redhat.com 08 Oct '26

08 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2542965 Bug ID: 2542965 Summary: CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting [fedora-all] Product: Fedora Version: rawhide Status: NEW Whiteboard: {"flaws": ["6c6274dc-3669-4090-913d-a6ba1c140670"]} Component: perl-DBI Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: jplesnik(a)redhat.com Reporter: vvasilev(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, rhughes(a)redhat.com, rstrode(a)redhat.com Blocks: 2542559 (CVE-2026-88815) Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (NV) value has no valid string pointer, so grok_number reads from an invalid address, triggering a segmentation fault. This is reachable in Perl using the sql_type_cast function: my $num = 42; DBI::sql_type_cast( $num, DBI::SQL_NUMERIC, 0 ); Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2542559 [Bug 2542559] CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2542965 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 12

[Bug 2541007] New: perl-DBI-1.654 is available
by bugzilla＠redhat.com 08 Oct '26

08 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2541007 Bug ID: 2541007 Summary: perl-DBI-1.654 is available Product: Fedora Version: rawhide Status: NEW Component: perl-DBI Keywords: FutureFeature, Triaged Assignee: jplesnik(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, rhughes(a)redhat.com, rstrode(a)redhat.com Target Milestone: --- Classification: Fedora Releases retrieved: 1.654 Upstream release that is considered latest: 1.654 Current version/release in rawhide: 1.653-1.fc46 URL: https://metacpan.org/dist/DBI/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/2811/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/perl-DBI -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2541007 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 13

[Bug 2539153] New: perl-Mixin-ExtraFields-0.140003-10.fc46 FTBFS: Undefined subroutine &Params::Util::_INSTANCE at blib/lib/Mixin/ExtraFields.pm line 380
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2539153 Bug ID: 2539153 Summary: perl-Mixin-ExtraFields-0.140003-10.fc46 FTBFS: Undefined subroutine &Params::Util::_INSTANCE at blib/lib/Mixin/ExtraFields.pm line 380 Product: Fedora Version: rawhide URL: https://koschei.fedoraproject.org//package/perl-Mixin- ExtraFields Status: NEW Component: perl-Mixin-ExtraFields Assignee: jplesnik(a)redhat.com Reporter: ppisar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, perl-devel(a)lists.fedoraproject.org Blocks: 2503726 (F46FTBFS,RAWHIDEFTBFS) Target Milestone: --- Classification: Fedora perl-Mixin-ExtraFields-0.140003-10.fc46 fails to build in Fedora 46 because some tests fail like this: # Failed test 'use Object::HasExtraFields;' # at t/basic.t line 15. # Tried to use 'Object::HasExtraFields'. # Error: Undefined subroutine &Params::Util::_INSTANCE called at /builddir/build/BUILD/perl-Mixin-ExtraFields-0.140003-build/Mixin-ExtraFields-0.140003/blib/lib/Mixin/ExtraFields.pm line 380. # BEGIN failed--compilation aborted at t/lib/Object/HasExtraFields.pm line 15. # Compilation failed in require at t/basic.t line 15. # BEGIN failed--compilation aborted at t/basic.t line 15. Can't locate object method "new" via package "Object::HasExtraFields" at t/basic.t line 18. # Looks like your test exited with 255 just after 2. t/basic.t .............. Dubious, test returned 255 (wstat 65280, 0xff00) Failed 28/29 subtests A difference between passing and failing build root is at <https://koschei.fedoraproject.org/build/24010016>. A replacement of Params::Util with Params::SomeUtil in perl-Sub-Exporter-0.992 and perl-Data-OptList-0.115 is the probable trigger. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2503726 [Bug 2503726] Fedora 46 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2539153 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 6

[Bug 2537126] New: pod2man uses obsolete fixed-font, causing troff warnings
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2537126 Bug ID: 2537126 Summary: pod2man uses obsolete fixed-font, causing troff warnings Product: Fedora Version: 43 OS: Linux Status: NEW Component: perl-podlators Severity: low Assignee: jplesnik(a)redhat.com Reporter: tim(a)tim-landscheidt.de QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, mspacek(a)redhat.com, perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com Target Milestone: --- Classification: Fedora With perl-podlators-6.0.2-520.fc43.noarch, pod2man's own man page and any man page it generates uses the font "CW" as fixed-font. With groff 1.24.0, this font is no longer recognized, thus causing troff warnings "cannot select font 'CW'": | $ man pod2man > /dev/null | troff:<standard input>:91: warning: cannot select font 'CW' | troff:<standard input>:96: warning: cannot select font 'CW' | troff:<standard input>:98: warning: cannot select font 'CW' | […] | troff:<standard input>:402: warning: cannot select font 'CW' | troff:<standard input>:403: warning: cannot select font 'CW' | troff:<standard input>:420: warning: cannot select font 'CW' | $ This bug (https://github.com/rra/podlators/issues/43) has been fixed upstream in podlators 6.1.0 by switching the default fixed-font to "CR" (https://github.com/rra/podlators/commit/e099fdf3fa07014e3df6a476242e2484b57…) It would be nice if this patch could be backported to Fedora 43ff. Alternatively, this can be fixed in individual packages by amending the make variable POD2MAN, for example in the case of perl-podlators: | %build | perl Makefile.PL INSTALLDIRS=vendor NO_PACKLIST=1 NO_PERLLOCAL=1 | -%{make_build} | +%{make_build} POD2MAN='$(POD2MAN_EXE) --fixed=CR' Reproducible: Always -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2537126 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 5

[Bug 2444081] New: Please branch and build perl-Class-DBI for EPEL-10
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2444081 Bug ID: 2444081 Summary: Please branch and build perl-Class-DBI for EPEL-10 Product: Fedora EPEL Version: epel10 Status: NEW Component: perl-Class-DBI Assignee: spotrh(a)gmail.com Reporter: paul(a)city-fan.org QA Contact: extras-qa(a)fedoraproject.org CC: igor.raits(a)gmail.com, perl-devel(a)lists.fedoraproject.org, spotrh(a)gmail.com Target Milestone: --- Classification: Fedora Please branch and build perl-Class-DBI in epel10. If you do not wish to maintain perl-Class-DBI in epel10, or do not think you will be able to do this in a timely manner, I would be happy to be a co-maintainer of the package (FAS pghmcfc); please add me through https://src.fedoraproject.org/rpms/perl-Class-DBI/adduser -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2444081 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 11

[Bug 2542263] New: perl-Exception-Class-1.46 is available
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2542263 Bug ID: 2542263 Summary: perl-Exception-Class-1.46 is available Product: Fedora Version: rawhide Status: NEW Component: perl-Exception-Class Keywords: FutureFeature, Triaged Assignee: paul(a)city-fan.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: paul(a)city-fan.org, perl-devel(a)lists.fedoraproject.org, steve(a)silug.org Target Milestone: --- Classification: Fedora Releases retrieved: 1.46 Upstream release that is considered latest: 1.46 Current version/release in rawhide: 1.45-15.fc45 URL: http://search.cpan.org/dist/Exception-Class/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/11845/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/perl-Exception-Class -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2542263 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 7

[Bug 2501794] New: rt-6.0.3 is available
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2501794 Bug ID: 2501794 Summary: rt-6.0.3 is available Product: Fedora Version: rawhide Status: NEW Component: rt Keywords: FutureFeature, Triaged Assignee: emmanuel(a)seyman.fr Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: emmanuel(a)seyman.fr, j(a)tib.bs, perl-devel(a)lists.fedoraproject.org, rc040203(a)freenet.de Target Milestone: --- Classification: Fedora Releases retrieved: 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 3.0.10, 3.0.11, 3.0.12, 3.2.0, 3.2.1, 3.2.2, 3.2.3, 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5, 3.4.6, 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5, 3.6.6, 3.6.7, 3.6.8, 3.6.9, 3.6.10, 3.6.11, 3.8.0, 3.8.1, 3.8.2, 3.8.3, 3.8.4, 3.8.5, 3.8.6, 3.8.7, 3.8.8, 3.8.9, 3.8.10, 3.8.11, 3.8.12, 3.8.13, 3.8.14, 3.8.15, 3.8.16, 3.8.17, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.10, 4.0.11, 4.0.12, 4.0.13, 4.0.14, 4.0.15, 4.0.16, 4.0.17, 4.0.18, 4.0.19, 4.0.20, 4.0.21, 4.0.22, 4.0.23, 4.0.24, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.2.4, 4.2.5, 4.2.6, 4.2.7, 4.2.8, 4.2.9, 4.2.10, 4.2.11, 4.2.13, 4.2.14, 4.4.7, 4.4.8, 4.4.9, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.0.10, 6.0.0, 6.0.1, 6.0.2, 6.0.3 Upstream release that is considered latest: 6.0.3 Current version/release in rawhide: 5.0.7-5.fc44 URL: http://bestpractical.com/request-tracker/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/7292/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/rt -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2501794 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 6

[Bug 2544206] New: perl-DateTime-TimeZone-2.71 is available
by bugzilla＠redhat.com 05 Oct '26

05 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2544206 Bug ID: 2544206 Summary: perl-DateTime-TimeZone-2.71 is available Product: Fedora Version: rawhide Status: NEW Component: perl-DateTime-TimeZone Keywords: FutureFeature, Triaged Assignee: jplesnik(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: jplesnik(a)redhat.com, perl-devel(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Releases retrieved: 2.71 Upstream release that is considered latest: 2.71 Current version/release in rawhide: 2.70-1.fc46 URL: http://metacpan.org/dist/DateTime-TimeZone/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/2801/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/perl-DateTime-TimeZone -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2544206 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 8

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel September 2026