[Bug 1128979] perl-Plack: trailing slashes removed leading to source code disclosure [fedora-all]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.redhat.com/show_bug.cgi?id=1128979



--- Comment #7 from Ralf Corsepius <rc040203@xxxxxxxxxx> ---
(In reply to Emmanuel Seyman from comment #6)
> (In reply to Ralf Corsepius from comment #5)
> >
> > Like many other perl modules, Plack has a long dependency chain, which needs
> > to be kept quite close to "current", otherwise quick responses to bugs
> > aren't possible.
> 
> Given that the patch that fixes the security is a one-liner, I think this is
> a difficulty you're imposing on yourself more than it is a hard requirement.

No, it's an upstream requirement. Plack-1.0031 requires
perl(File::ShareDir::Install) >= 0.06

This requirement is fullfilled on EPEL7, fc21 and f22, while the versions in
fc19 and fc20 are *outdated*

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=0QLoq6PBJQ&a=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/perl-devel





[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Legacy Announce]     [Fedora PHP Devel]     [Kernel Devel]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite Information]
  Powered by Linux