https://bugzilla.redhat.com/show_bug.cgi?id=1877402
Bug ID: 1877402
Summary: perl-dbi: Memory corruption in XS functions when Perl
stack is reallocated
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: psampaio(a)redhat.com
CC: caillon+fedoraproject(a)gmail.com, hhorak(a)redhat.com,
john.j5live(a)gmail.com, jorton(a)redhat.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
perl-devel(a)lists.fedoraproject.org,
perl-maint-list(a)redhat.com, ppisar(a)redhat.com,
rhughes(a)redhat.com, rstrode(a)redhat.com,
sandmann(a)redhat.com
Target Milestone: ---
Classification: Other
A flaw was found in perl-dbi. Macro ST(*) returns pointer to Perl stack. Other
Perl functions which use Perl stack (e.g. eval) may reallocate Perl stack and
therefore pointer returned by ST(*) macro is invalid which may lead to memory
corruption.
Upstream patch:
https://github.com/perl5-dbi/dbi/commit/ea99b6aafb437db53c28fd40d5eafbe119c…
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1829902
Bug ID: 1829902
Summary: Upgrade perl-Algorithm-Dependency to 1.112
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Algorithm-Dependency
Assignee: rc040203(a)freenet.de
Reporter: jplesnik(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: lkundrak(a)v3.sk, lxtnow(a)gmail.com,
perl-devel(a)lists.fedoraproject.org,
rc040203(a)freenet.de
Target Milestone: ---
Classification: Fedora
Latest Fedora delivers 1.111 version. Upstream released 1.112. When you have
free time, please upgrade it.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1829990
Bug ID: 1829990
Summary: perl-Test-WWW-Mechanize-PSGI for EL8
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Test-WWW-Mechanize-PSGI
Assignee: rc040203(a)freenet.de
Reporter: xavier(a)bachelot.org
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
rc040203(a)freenet.de
Target Milestone: ---
Classification: Fedora
Hi,
Could you please build perl-Test-WWW-Mechanize-PSGI in EPEL 8 ?
It's in the dependency chain of a package I'd like to build for EPEL 8.
Master branch rebuilds properly against epel 8 target.
Regards,
Xavier
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1829977
Bug ID: 1829977
Summary: perl-Test-WWW-Mechanize for EL8
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: perl-Test-WWW-Mechanize
Assignee: tremble(a)tremble.org.uk
Reporter: xavier(a)bachelot.org
QA Contact: extras-qa(a)fedoraproject.org
CC: jose.p.oliveira.oss(a)gmail.com,
perl-devel(a)lists.fedoraproject.org,
rc040203(a)freenet.de, tremble(a)tremble.org.uk
Target Milestone: ---
Classification: Fedora
Hi,
Could you please build perl-Test-WWW-Mechanize in EPEL 8 ?
It's in the dependency chain of a package I'd like to build for EPEL 8.
Master branch rebuilds properly against epel 8 target.
Regards,
Xavier
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1870776
Bug ID: 1870776
Summary: EPEL8 Branch Request: perl-Term-ProgressBar-Quiet
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Term-ProgressBar-Quiet
Assignee: ppisar(a)redhat.com
Reporter: igor.raits(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com
Target Milestone: ---
Classification: Fedora
I would appreciate if you could build perl-Term-ProgressBar-Quiet for EPEL8.
I've checked that master branch builds fine there and according to my testing
works. Feel free to add me as co-maintainer. This package and its dependencies
are built in
https://copr.fedorainfracloud.org/coprs/ignatenkobrain/gdc/packages/.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1870778
Bug ID: 1870778
Summary: EPEL8 Branch Request: perl-IO-Interactive
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-IO-Interactive
Assignee: ppisar(a)redhat.com
Reporter: igor.raits(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com
Target Milestone: ---
Classification: Fedora
I would appreciate if you could build perl-IO-Interactive for EPEL8. I've
checked that master branch builds fine there and according to my testing works.
Feel free to add me as co-maintainer. This package and its dependencies are
built in https://copr.fedorainfracloud.org/coprs/ignatenkobrain/gdc/packages/.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1883498
Bug ID: 1883498
Summary: perl-Module-Load-0.36 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Module-Load
Keywords: FutureFeature, Triaged
Assignee: jplesnik(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com, paul(a)city-fan.org,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
steve(a)silug.org
Target Milestone: ---
Classification: Fedora
Latest upstream release: 0.36
Current version/release in rawhide: 0.34-457.fc33
URL: http://search.cpan.org/dist/Module-Load/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/3102/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1882958
Bug ID: 1882958
Summary: perl-MIME-Base64-3.16 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-MIME-Base64
Keywords: FutureFeature, Triaged
Assignee: jplesnik(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com
Target Milestone: ---
Classification: Fedora
Latest upstream release: 3.16
Current version/release in rawhide: 3.15-458.fc33
URL: http://search.cpan.org/dist/MIME-Base64/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/6977/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1882957
Bug ID: 1882957
Summary: perl-Unicode-Collate-1.29 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Unicode-Collate
Keywords: FutureFeature, Triaged
Assignee: jplesnik(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com
Target Milestone: ---
Classification: Fedora
Latest upstream release: 1.29
Current version/release in rawhide: 1.28-1.fc34
URL: http://search.cpan.org/dist/Unicode-Collate/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/6985/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1882938
Bug ID: 1882938
Summary: perl-File-Temp-0.2310 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-File-Temp
Keywords: FutureFeature, Triaged
Assignee: jplesnik(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com
Target Milestone: ---
Classification: Fedora
Latest upstream release: 0.2310
Current version/release in rawhide: 0.230.900-457.fc33
URL: http://search.cpan.org/dist/File-Temp/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/2906/
--
You are receiving this mail because:
You are on the CC list for the bug.