[Bug 1081385] New: CVE-2013-6393 perl-YAML-LibYAML: libyaml: heap-based buffer overflow when parsing YAML tags [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1081385 Bug ID: 1081385 Summary: CVE-2013-6393 perl-YAML-LibYAML: libyaml: heap-based buffer overflow when parsing YAML tags [fedora-all] Product: Fedora Version: 20 Component:

[Bug 1033990] CVE-2013-6393 libyaml: heap-based buffer overflow when parsing YAML tags

https://bugzilla.redhat.com/show_bug.cgi?id=1033990 Murray McAllister mmcal...@redhat.com changed: What|Removed |Added Depends On||1081385

Broken dependencies: perl-PDL

perl-PDL has broken dependencies in the epel-7 tree: On ppc64: perl-PDL-2.7.0-2.el7.1.ppc64 requires perl(PDL::Slatec) Please resolve this as soon as possible. -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list

[Bug 995748] perl-Net-Amazon-S3-0.59-1.fc20 does not include s3cl script and manpage

https://bugzilla.redhat.com/show_bug.cgi?id=995748 Petr Pisar ppi...@redhat.com changed: What|Removed |Added Depends On||1081468 Referenced

[perl-YAML-LibYAML] Add fixes for CVE-2013-6393 and CVE-2014-2525

commit da43da31bb1dba3e2801e062aa179ac8d50aa538 Author: Paul Howarth p...@city-fan.org Date: Thu Mar 27 13:52:30 2014 + Add fixes for CVE-2013-6393 and CVE-2014-2525 - Fix LibYAML input sanitization errors (CVE-2014-2525) - Fix heap-based buffer overflow when parsing YAML

[perl-YAML-LibYAML/f20] Add fixes for CVE-2013-6393 and CVE-2014-2525

Summary of changes: da43da3... Add fixes for CVE-2013-6393 and CVE-2014-2525 (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[Bug 1078083] CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs

https://bugzilla.redhat.com/show_bug.cgi?id=1078083 --- Comment #22 from John Eckersberg jecke...@redhat.com --- Can you please create a tracking bug for epel-all as well? -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug

[perl-YAML-LibYAML/epel7] (3 commits) ...Add fixes for CVE-2013-6393 and CVE-2014-2525

Summary of changes: 3560fff... Perl 5.18 rebuild (*) 3e843d9... - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass (*) da43da3... Add fixes for CVE-2013-6393 and CVE-2014-2525 (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG

[perl-YAML-LibYAML/f19] (3 commits) ...Add fixes for CVE-2013-6393 and CVE-2014-2525

Summary of changes: 3560fff... Perl 5.18 rebuild (*) 3e843d9... - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass (*) da43da3... Add fixes for CVE-2013-6393 and CVE-2014-2525 (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG

Broken dependencies: mojomojo

mojomojo has broken dependencies in the rawhide tree: On x86_64: mojomojo-1.10-1.fc20.noarch requires perl(HTML::FormFu::Element::reCAPTCHA) On i386: mojomojo-1.10-1.fc20.noarch requires perl(HTML::FormFu::Element::reCAPTCHA) On armhfp: mojomojo-1.10-1.fc20.noarch

Broken dependencies: perl-Catalyst-Controller-HTML-FormFu

perl-Catalyst-Controller-HTML-FormFu has broken dependencies in the rawhide tree: On x86_64: perl-Catalyst-Controller-HTML-FormFu-0.09004-4.fc20.noarch requires perl(HTML::FormFu::MultiForm) On i386: perl-Catalyst-Controller-HTML-FormFu-0.09004-4.fc20.noarch requires

Broken dependencies: perl-Language-Expr

perl-Language-Expr has broken dependencies in the rawhide tree: On x86_64: perl-Language-Expr-0.19-4.fc19.noarch requires perl(:MODULE_COMPAT_5.16.2) On i386: perl-Language-Expr-0.19-4.fc19.noarch requires perl(:MODULE_COMPAT_5.16.2) On armhfp:

Broken dependencies: perl-GnuPG-Interface

perl-GnuPG-Interface has broken dependencies in the rawhide tree: On x86_64: perl-GnuPG-Interface-0.50-1.fc21.noarch requires perl(MooX::late) perl-GnuPG-Interface-0.50-1.fc21.noarch requires perl(MooX::HandlesVia) On i386: perl-GnuPG-Interface-0.50-1.fc21.noarch requires

[Bug 1081559] perl-YAML-LibYAML bundles yaml-1.0.4

https://bugzilla.redhat.com/show_bug.cgi?id=1081559 Petr Pisar ppi...@redhat.com changed: What|Removed |Added Summary|perl-YAML-LibYAML bundler |perl-YAML-LibYAML bundles

[Bug 1081559] perl-YAML-LibYAML bundler yaml-1.0.4

https://bugzilla.redhat.com/show_bug.cgi?id=1081559 Petr Pisar ppi...@redhat.com changed: What|Removed |Added See Also|

[Bug 1081559] New: perl-YAML-LibYAML bundler yaml-1.0.4

https://bugzilla.redhat.com/show_bug.cgi?id=1081559 Bug ID: 1081559 Summary: perl-YAML-LibYAML bundler yaml-1.0.4 Product: Fedora Version: rawhide Component: perl-YAML-LibYAML Severity: high Assignee: jples...@redhat.com

File Term-ProgressBar-Quiet-0.31.tar.gz uploaded to lookaside cache by ppisar

A file has been added to the lookaside cache for perl-Term-ProgressBar-Quiet: 2ed5b6ac5d480a14ff3233a58987a2e4 Term-ProgressBar-Quiet-0.31.tar.gz -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-Term-ProgressBar-Quiet] Import

commit 1ceff8e6ca1ea261e7ae31e572255fbb861dbb60 Author: Petr Písař ppi...@redhat.com Date: Thu Mar 27 16:12:27 2014 +0100 Import .gitignore |1 + perl-Term-ProgressBar-Quiet.spec | 53 ++ sources |

[perl-YAML-LibYAML/el6] Add fixes for CVE-2013-6393 and CVE-2014-2525

commit 2e17fd3f16300ddd36d5bf1664bd6eee50a8494e Author: Paul Howarth p...@city-fan.org Date: Thu Mar 27 13:52:30 2014 + Add fixes for CVE-2013-6393 and CVE-2014-2525 - Fix LibYAML input sanitization errors (CVE-2014-2525) - Fix heap-based buffer overflow when parsing YAML

File MooX-0.101.tar.gz uploaded to lookaside cache by corsepiu

A file has been added to the lookaside cache for perl-MooX: c35d73fc38aceb7edec1b5560abe4e2d MooX-0.101.tar.gz -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-YAML-LibYAML] Created tag perl-YAML-LibYAML-0.38-4.el6

The lightweight tag 'perl-YAML-LibYAML-0.38-4.el6' was created pointing to: 2e17fd3... Add fixes for CVE-2013-6393 and CVE-2014-2525 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-YAML-LibYAML] Created tag perl-YAML-LibYAML-0.41-4.el7

The lightweight tag 'perl-YAML-LibYAML-0.41-4.el7' was created pointing to: da43da3... Add fixes for CVE-2013-6393 and CVE-2014-2525 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-YAML-LibYAML] Created tag perl-YAML-LibYAML-0.41-4.fc21

The lightweight tag 'perl-YAML-LibYAML-0.41-4.fc21' was created pointing to: da43da3... Add fixes for CVE-2013-6393 and CVE-2014-2525 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-YAML-LibYAML] Created tag perl-YAML-LibYAML-0.41-4.fc19

The lightweight tag 'perl-YAML-LibYAML-0.41-4.fc19' was created pointing to: da43da3... Add fixes for CVE-2013-6393 and CVE-2014-2525 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-YAML-LibYAML] Created tag perl-YAML-LibYAML-0.41-4.fc20

The lightweight tag 'perl-YAML-LibYAML-0.41-4.fc20' was created pointing to: da43da3... Add fixes for CVE-2013-6393 and CVE-2014-2525 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-MooX/f20] Initial import.

Summary of changes: b998375... Initial import. (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-MooX/f19] Initial import.

Summary of changes: b998375... Initial import. (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-Term-ProgressBar-Quiet/f20] Import

Summary of changes: 1ceff8e... Import (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[Bug 1081382] CVE-2014-2525 perl-YAML-LibYAML: libyaml: heap-based buffer overflow when parsing URLs [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1081382 --- Comment #2 from Fedora Update System upda...@fedoraproject.org --- perl-YAML-LibYAML-0.41-4.fc19 has been submitted as an update for Fedora 19. https://admin.fedoraproject.org/updates/perl-YAML-LibYAML-0.41-4.fc19 -- You are receiving

[Bug 1081385] CVE-2013-6393 perl-YAML-LibYAML: libyaml: heap-based buffer overflow when parsing YAML tags [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1081385 --- Comment #2 from Fedora Update System upda...@fedoraproject.org --- perl-YAML-LibYAML-0.41-4.fc19 has been submitted as an update for Fedora 19. https://admin.fedoraproject.org/updates/perl-YAML-LibYAML-0.41-4.fc19 -- You are receiving

[Bug 1081382] CVE-2014-2525 perl-YAML-LibYAML: libyaml: heap-based buffer overflow when parsing URLs [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1081382 --- Comment #3 from Fedora Update System upda...@fedoraproject.org --- perl-YAML-LibYAML-0.41-4.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/perl-YAML-LibYAML-0.41-4.fc20 -- You are receiving

[Bug 1081385] CVE-2013-6393 perl-YAML-LibYAML: libyaml: heap-based buffer overflow when parsing YAML tags [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1081385 --- Comment #3 from Fedora Update System upda...@fedoraproject.org --- perl-YAML-LibYAML-0.41-4.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/perl-YAML-LibYAML-0.41-4.fc20 -- You are receiving

[perl-Net-Amazon-S3] Enable s3cl tool

commit 94ce32ee4e8d6200b94b89badcfcd41214cd Author: Petr Písař ppi...@redhat.com Date: Thu Mar 27 13:48:11 2014 +0100 Enable s3cl tool And modernize spec files etc. .rpmlint|2 + perl-Net-Amazon-S3.spec | 152

[perl-Net-Amazon-S3/f20] Enable s3cl tool

Summary of changes: 94ce32e... Enable s3cl tool (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[Bug 995748] perl-Net-Amazon-S3-0.59-1.fc20 does not include s3cl script and manpage

https://bugzilla.redhat.com/show_bug.cgi?id=995748 Petr Pisar ppi...@redhat.com changed: What|Removed |Added Status|NEW |MODIFIED Fixed In

[Bug 1064271] perl-Net-SSLeay tests failing on s390(x) with glibc-2.18.90-21.fc21

https://bugzilla.redhat.com/show_bug.cgi?id=1064271 --- Comment #21 from Dan Horák d...@danny.cz --- reduced reproducer - install F-20 - update glibc from http://fedora.danny.cz/s390/glibc-2.18.90-20.fc21.dh.1/ - it is glibc-2.18.90-20.fc21 + commit 93a45ff1 - rpmbuild --rebuild

[Bug 995748] perl-Net-Amazon-S3-0.59-1.fc20 does not include s3cl script and manpage

https://bugzilla.redhat.com/show_bug.cgi?id=995748 --- Comment #2 from Fedora Update System upda...@fedoraproject.org --- perl-IO-Interactive-0.0.6-1.fc20, perl-Term-ProgressBar-Simple-0.03-1.fc20, perl-Term-ProgressBar-Quiet-0.31-1.fc20, perl-Net-Amazon-S3-0.59-2.fc20 has been submitted as an

[pkgdb] perl-Module-Install-GithubMeta ownership changed

Package perl-Module-Install-GithubMeta in Fedora EPEL 7 is now owned by pghmcfc To make changes to this package see: https://admin.fedoraproject.org/pkgdb/acls/name/perl-Module-Install-GithubMeta -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing

[pkgdb] perl-Module-Install-AutoLicense ownership changed

Package perl-Module-Install-AutoLicense in Fedora EPEL 7 is now owned by pghmcfc To make changes to this package see: https://admin.fedoraproject.org/pkgdb/acls/name/perl-Module-Install-AutoLicense -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing

[pkgdb] perl-Module-Install-ReadmeFromPod ownership changed

Package perl-Module-Install-ReadmeFromPod in Fedora EPEL 7 is now owned by pghmcfc To make changes to this package see: https://admin.fedoraproject.org/pkgdb/acls/name/perl-Module-Install-ReadmeFromPod -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel

File MooseX-Types-Stringlike-0.002.tar.gz uploaded to lookaside cache by pghmcfc

A file has been added to the lookaside cache for perl-MooseX-Types-Stringlike: cc9113b5dfb29189f6383da2b55ef61d MooseX-Types-Stringlike-0.002.tar.gz -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-MooseX-Types-Stringlike] Initial import (perl-MooseX-Types-Stringlike-0.002-1)

commit bf41294b1fbf2095fdfa33473820de56ba9013a1 Author: Paul Howarth p...@city-fan.org Date: Thu Mar 27 19:10:47 2014 + Initial import (perl-MooseX-Types-Stringlike-0.002-1) This module provides a more general version of the Str type. If coercions are enabled, it will

[perl-Module-Install-GithubMeta/epel7] (3 commits) ...0.26 bump

Summary of changes: 4e92866... Perl 5.18 rebuild (*) 1492d70... 0.24 bump (*) eb77dff... 0.26 bump (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list

[perl-Module-Install-GithubMeta] Created tag perl-Module-Install-GithubMeta-0.26-1.el7

The lightweight tag 'perl-Module-Install-GithubMeta-0.26-1.el7' was created pointing to: eb77dff... 0.26 bump -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-MooseX-Types-Stringlike/epel7] Initial import (perl-MooseX-Types-Stringlike-0.002-1)

Summary of changes: bf41294... Initial import (perl-MooseX-Types-Stringlike-0.002-1) (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list

[perl-Module-Install-AutoLicense] Created tag perl-Module-Install-AutoLicense-0.08-4.el7

The lightweight tag 'perl-Module-Install-AutoLicense-0.08-4.el7' was created pointing to: 7ab6f54... - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list

[perl-MooseX-Types-Stringlike/f20] Initial import (perl-MooseX-Types-Stringlike-0.002-1)

Summary of changes: bf41294... Initial import (perl-MooseX-Types-Stringlike-0.002-1) (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list

[perl-Module-Install-ReadmeFromPod/epel7] (3 commits) ...0.22 bump

Summary of changes: 85236ad... - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass (*) c1a039e... Perl 5.18 rebuild (*) f0b9ca3... 0.22 bump (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG

[perl-Module-Install-ReadmeFromPod] Created tag perl-Module-Install-ReadmeFromPod-0.22-1.el7

The lightweight tag 'perl-Module-Install-ReadmeFromPod-0.22-1.el7' was created pointing to: f0b9ca3... 0.22 bump -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-Unicode-UTF8/epel7] Update to 0.60

Summary of changes: c43958d... Update to 0.60 (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-MooseX-Types-Stringlike/f19] Initial import (perl-MooseX-Types-Stringlike-0.002-1)

Summary of changes: bf41294... Initial import (perl-MooseX-Types-Stringlike-0.002-1) (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list

[perl-Unicode-UTF8] Created tag perl-Unicode-UTF8-0.60-1.el7

The lightweight tag 'perl-Unicode-UTF8-0.60-1.el7' was created pointing to: c43958d... Update to 0.60 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@lists.fedoraproject.org

[perl-Path-Tiny/epel7] (14 commits) ...Update to 0.052

Summary of changes: 903ae30... Update to 0.032 (*) 377cfde... Update to 0.033 (*) 98b5658... Update to 0.034 (*) f7b7c3d... Update to 0.035 (*) d7330cf... Update to 0.037 (*) 803eaaa... Update to 0.038 (*) 201e3e3... Update to 0.040 (*) 6f37b27... Update to 0.041 (*) b895f8d...

[Bug 1055297] perl-Rose-DB-Object-0.811 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1055297 Fedora Update System upda...@fedoraproject.org changed: What|Removed |Added Status|MODIFIED|ON_QA

[Bug 1064271] perl-Net-SSLeay tests failing on s390(x) with glibc-2.18.90-21.fc21

https://bugzilla.redhat.com/show_bug.cgi?id=1064271 --- Comment #22 from Carlos O'Donell codon...@redhat.com --- (In reply to Dan Horák from comment #20) and commit 93a45ff1ca6d459618bb0cf93580c4b2809a4b61 Author: Andreas Krebbel kreb...@linux.vnet.ibm.com Date: Tue Jan 7 09:36:31 2014

[Bug 1078083] CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs

https://bugzilla.redhat.com/show_bug.cgi?id=1078083 Murray McAllister mmcal...@redhat.com changed: What|Removed |Added Depends On||1081856 ---

[Bug 1078083] CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs

https://bugzilla.redhat.com/show_bug.cgi?id=1078083 --- Comment #24 from Murray McAllister mmcal...@redhat.com --- (In reply to John Eckersberg from comment #22) Can you please create a tracking bug for epel-all as well? Done. Sorry about that! -- You are receiving this mail because: You