[Bug 2376788] Upgrade perl-Module-CoreList to 5.20250702

2025-07-17 Thread bugzilla via perl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2376788 Fedora Update System changed: What|Removed |Added Fixed In Version|perl-Module-CoreList-5.2025 |perl-Module-CoreList-5.2025

[Bug 2376788] Upgrade perl-Module-CoreList to 5.20250702

2025-07-17 Thread bugzilla via perl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2376788 Fedora Update System changed: What|Removed |Added Fixed In Version|perl-Module-CoreList-5.2025 |perl-Module-CoreList-5.2025

[Bug 2379900] Moving of off /etc/pki/tls/certs/ca-bundle.crt

2025-07-17 Thread bugzilla via perl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2379900 --- Comment #3 from Thomas E. Dickey --- I missed a detail: the compiled-in default is the last line > #SSL_CERT_FILE:NULL (and I don't see that adjusted in the rpm build options) so aside from users who have followed the suggestion, there w

[Bug 2379900] Moving of off /etc/pki/tls/certs/ca-bundle.crt

2025-07-17 Thread bugzilla via perl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2379900 --- Comment #2 from Thomas E. Dickey --- That's not simply a suggested value, but is the compiled-in default, which the "drop" change is going to break. > # As a documentation aid, the default values for each setting are shown > # commented-o

[Bug 2381743] New: CVE-2025-40924 perl-Catalyst-Plugin-Session: Catalyst::Plugin::Session generates session ids insecurely [fedora-41]

2025-07-17 Thread bugzilla via perl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2381743 Bug ID: 2381743 Summary: CVE-2025-40924 perl-Catalyst-Plugin-Session: Catalyst::Plugin::Session generates session ids insecurely [fedora-41] Product: Fedora Vers

[Bug 2381744] New: CVE-2025-40924 perl-Catalyst-Plugin-Session: Catalyst::Plugin::Session generates session ids insecurely [fedora-42]

2025-07-17 Thread bugzilla via perl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2381744 Bug ID: 2381744 Summary: CVE-2025-40924 perl-Catalyst-Plugin-Session: Catalyst::Plugin::Session generates session ids insecurely [fedora-42] Product: Fedora Vers

[Bug 2381430] CVE-2025-40918 perl-Authen-SASL: Authen::SASL::Perl::DIGEST_MD5 insecure cnonce generation [fedora-41]

2025-07-17 Thread bugzilla via perl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2381430 Michal Josef Spacek changed: What|Removed |Added CC||mspa...@redhat.com Lin

[Bug 2381432] CVE-2025-40918 perl-Authen-SASL: Authen::SASL::Perl::DIGEST_MD5 insecure cnonce generation [fedora-42]

2025-07-17 Thread bugzilla via perl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2381432 Michal Josef Spacek changed: What|Removed |Added CC||mspa...@redhat.com Lin

[Bug 2379900] Moving of off /etc/pki/tls/certs/ca-bundle.crt

2025-07-17 Thread bugzilla via perl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2379900 --- Comment #1 from Lukáš Zaoral --- Hello! The highlighted line is a commented-out example suggestion in the default lynx.cfg. Therefore, there is nothing blocking the mass rebuild since the value is not used. I can change the example value

[Bug 2381431] CVE-2025-40918 perl-Authen-SASL-SASLprep: Authen::SASL::Perl::DIGEST_MD5 insecure cnonce generation [fedora-41]

2025-07-17 Thread bugzilla via perl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2381431 Petr Pisar changed: What|Removed |Added Resolution|--- |NOTABUG Status|NEW

[Bug 2381433] CVE-2025-40918 perl-Authen-SASL-SASLprep: Authen::SASL::Perl::DIGEST_MD5 insecure cnonce generation [fedora-42]

2025-07-17 Thread bugzilla via perl-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2381433 Petr Pisar changed: What|Removed |Added Status|NEW |CLOSED Resolution|---