perl-devel November 2020

perl-devel@lists.fedoraproject.org

2 participants
334 discussions

[Bug 1877421] New: perl-dbi: Old API functions vulnerable to overflow
by bugzilla＠redhat.com 02 Nov '21

02 Nov '21

https://bugzilla.redhat.com/show_bug.cgi?id=1877421 Bug ID: 1877421 Summary: perl-dbi: Old API functions vulnerable to overflow Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: psampaio(a)redhat.com CC: caillon+fedoraproject(a)gmail.com, hhorak(a)redhat.com, john.j5live(a)gmail.com, jorton(a)redhat.com, jplesnik(a)redhat.com, kasal(a)ucw.cz, perl-devel(a)lists.fedoraproject.org, perl-maint-list(a)redhat.com, ppisar(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com Target Milestone: --- Classification: Other A flaw was found in perl-dbi before version 1.643. Old API functions might be vulnerable to overflowing potentially causing memory corruption. References: https://github.com/perl5-dbi/dbi/commit/00e2ec459b55b72ee5703c1bd8e6cf57f19… -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1877409] New: perl-dbi: Buffer overlfow on an overlong DBD class name
by bugzilla＠redhat.com 02 Nov '21

02 Nov '21

https://bugzilla.redhat.com/show_bug.cgi?id=1877409 Bug ID: 1877409 Summary: perl-dbi: Buffer overlfow on an overlong DBD class name Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: psampaio(a)redhat.com CC: caillon+fedoraproject(a)gmail.com, hhorak(a)redhat.com, john.j5live(a)gmail.com, jorton(a)redhat.com, jplesnik(a)redhat.com, kasal(a)ucw.cz, perl-devel(a)lists.fedoraproject.org, perl-maint-list(a)redhat.com, ppisar(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com Target Milestone: --- Classification: Other A flaw was found in perl-dbi before version 1.643. A buffer overflow on via an overlong DBD class name in dbih_setup_handle function may lead to data be written past the intended limit. Upstream patch: https://github.com/perl5-dbi/dbi/commit/36f2a2c5fea36d7d47d6871e42028664346… -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1877405] New: perl-dbi: NULL profile dereference in dbi_profile()
by bugzilla＠redhat.com 02 Nov '21

02 Nov '21

https://bugzilla.redhat.com/show_bug.cgi?id=1877405 Bug ID: 1877405 Summary: perl-dbi: NULL profile dereference in dbi_profile() Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: psampaio(a)redhat.com CC: caillon+fedoraproject(a)gmail.com, hhorak(a)redhat.com, john.j5live(a)gmail.com, jorton(a)redhat.com, jplesnik(a)redhat.com, kasal(a)ucw.cz, perl-devel(a)lists.fedoraproject.org, perl-maint-list(a)redhat.com, ppisar(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com Target Milestone: --- Classification: Other A flaw was found in perl-dbi. hv_fetch() documentation requires checking for NULL and the code does that. But then calls SvOK(profile) uncoditionally two lines later lead to a null profile dereference. Upstream patch: https://github.com/perl5-dbi/dbi/commit/eca7d7c8f43d96f6277e86d1000e842eb4c… -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1877402] New: perl-dbi: Memory corruption in XS functions when Perl stack is reallocated
by bugzilla＠redhat.com 02 Nov '21

02 Nov '21

https://bugzilla.redhat.com/show_bug.cgi?id=1877402 Bug ID: 1877402 Summary: perl-dbi: Memory corruption in XS functions when Perl stack is reallocated Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: psampaio(a)redhat.com CC: caillon+fedoraproject(a)gmail.com, hhorak(a)redhat.com, john.j5live(a)gmail.com, jorton(a)redhat.com, jplesnik(a)redhat.com, kasal(a)ucw.cz, perl-devel(a)lists.fedoraproject.org, perl-maint-list(a)redhat.com, ppisar(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com Target Milestone: --- Classification: Other A flaw was found in perl-dbi. Macro ST(*) returns pointer to Perl stack. Other Perl functions which use Perl stack (e.g. eval) may reallocate Perl stack and therefore pointer returned by ST(*) macro is invalid which may lead to memory corruption. Upstream patch: https://github.com/perl5-dbi/dbi/commit/ea99b6aafb437db53c28fd40d5eafbe119c… -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 1829902] New: Upgrade perl-Algorithm-Dependency to 1.112
by bugzilla＠redhat.com 29 Oct '21

29 Oct '21

https://bugzilla.redhat.com/show_bug.cgi?id=1829902 Bug ID: 1829902 Summary: Upgrade perl-Algorithm-Dependency to 1.112 Product: Fedora Version: rawhide Status: NEW Component: perl-Algorithm-Dependency Assignee: rc040203(a)freenet.de Reporter: jplesnik(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: lkundrak(a)v3.sk, lxtnow(a)gmail.com, perl-devel(a)lists.fedoraproject.org, rc040203(a)freenet.de Target Milestone: --- Classification: Fedora Latest Fedora delivers 1.111 version. Upstream released 1.112. When you have free time, please upgrade it. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1829990] New: perl-Test-WWW-Mechanize-PSGI for EL8
by bugzilla＠redhat.com 20 Sep '21

20 Sep '21

https://bugzilla.redhat.com/show_bug.cgi?id=1829990 Bug ID: 1829990 Summary: perl-Test-WWW-Mechanize-PSGI for EL8 Product: Fedora Version: rawhide Status: NEW Component: perl-Test-WWW-Mechanize-PSGI Assignee: rc040203(a)freenet.de Reporter: xavier(a)bachelot.org QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, rc040203(a)freenet.de Target Milestone: --- Classification: Fedora Hi, Could you please build perl-Test-WWW-Mechanize-PSGI in EPEL 8 ? It's in the dependency chain of a package I'd like to build for EPEL 8. Master branch rebuilds properly against epel 8 target. Regards, Xavier -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 1829977] New: perl-Test-WWW-Mechanize for EL8
by bugzilla＠redhat.com 20 Sep '21

20 Sep '21

https://bugzilla.redhat.com/show_bug.cgi?id=1829977 Bug ID: 1829977 Summary: perl-Test-WWW-Mechanize for EL8 Product: Fedora EPEL Version: epel8 Status: NEW Component: perl-Test-WWW-Mechanize Assignee: tremble(a)tremble.org.uk Reporter: xavier(a)bachelot.org QA Contact: extras-qa(a)fedoraproject.org CC: jose.p.oliveira.oss(a)gmail.com, perl-devel(a)lists.fedoraproject.org, rc040203(a)freenet.de, tremble(a)tremble.org.uk Target Milestone: --- Classification: Fedora Hi, Could you please build perl-Test-WWW-Mechanize in EPEL 8 ? It's in the dependency chain of a package I'd like to build for EPEL 8. Master branch rebuilds properly against epel 8 target. Regards, Xavier -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1892743] New: Upgrade perl-Type-Tiny to 1.012000
by bugzilla＠redhat.com 16 Sep '21

16 Sep '21

https://bugzilla.redhat.com/show_bug.cgi?id=1892743 Bug ID: 1892743 Summary: Upgrade perl-Type-Tiny to 1.012000 Product: Fedora Version: rawhide Status: NEW Component: perl-Type-Tiny Assignee: rc040203(a)freenet.de Reporter: jplesnik(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, rc040203(a)freenet.de Target Milestone: --- Classification: Fedora Latest Fedora delivers 1.010006 version. Upstream released 1.012000. When you have free time, please upgrade it. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1870776] New: EPEL8 Branch Request: perl-Term-ProgressBar-Quiet
by bugzilla＠redhat.com 24 Aug '21

24 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1870776 Bug ID: 1870776 Summary: EPEL8 Branch Request: perl-Term-ProgressBar-Quiet Product: Fedora Version: rawhide Status: NEW Component: perl-Term-ProgressBar-Quiet Assignee: ppisar(a)redhat.com Reporter: igor.raits(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com Target Milestone: --- Classification: Fedora I would appreciate if you could build perl-Term-ProgressBar-Quiet for EPEL8. I've checked that master branch builds fine there and according to my testing works. Feel free to add me as co-maintainer. This package and its dependencies are built in https://copr.fedorainfracloud.org/coprs/ignatenkobrain/gdc/packages/. -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1870778] New: EPEL8 Branch Request: perl-IO-Interactive
by bugzilla＠redhat.com 24 Aug '21

24 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1870778 Bug ID: 1870778 Summary: EPEL8 Branch Request: perl-IO-Interactive Product: Fedora Version: rawhide Status: NEW Component: perl-IO-Interactive Assignee: ppisar(a)redhat.com Reporter: igor.raits(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com Target Milestone: --- Classification: Fedora I would appreciate if you could build perl-IO-Interactive for EPEL8. I've checked that master branch builds fine there and according to my testing works. Feel free to add me as co-maintainer. This package and its dependencies are built in https://copr.fedorainfracloud.org/coprs/ignatenkobrain/gdc/packages/. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

perl-devel November 2020