Your message dated Mon, 31 Jul 2017 11:30:25 +0300
with message-id <20170731083025.6i7ueaejbojemvqx@estella.local.invalid>
and subject line Re: Bug#867164: perl: base.pm change causes other packages to 
FTBFS
has caused the Debian Bug report #867164,
regarding perl: base.pm change causes other packages to FTBFS
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
867164: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867164
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: perl
Version: 5.20.2-3+deb8u6
Severity: serious
Justification: causes other packages to FTBFS
Tags: jessie upstream fixed-upstream

It was discovered that the security fix from last summer caused various
packages to FTBFS during unrelated QA work:

    request-tracker4_4.2.8-3+deb8u1
    libgraph-writer-dsm-perl_0.006-1
    libclass-c3-xs-perl_0.13-2
    libclass-c3-perl_0.26-1
    libbio-das-lite-perl_2.04-1.1

This was caused by an early version of a security fix in base.pm
which was not released by upstream because of these compatibility problems.

In stretch/sid these packages have been patched to work around the problem;
it was an oversight that similar workarounds didn't get made in jessie.

Now that there is an improved patch available from upstream which fixes
this regression (currently in the 5.24.2-RC1 and 5.22.4-RC1 releases) we
should apply this in jessie and (for completeness) stretch point releases,
as well as sid.

Upstream commit:

https://perl5.git.perl.org/perl.git/commit/1afa2890005f3acdb5794bc9ec34dfd0a7e54c28

with additional documentation in later commits:

https://perl5.git.perl.org/perl.git/shortlog/refs/heads/maint-5.24

--- End Message ---
--- Begin Message ---
Version: 5.20.2-3+deb8u8

On Tue, Jul 04, 2017 at 12:53:01PM +0100, Dominic Hargreaves wrote:
> Source: perl
> Version: 5.20.2-3+deb8u6
> Severity: serious
> Justification: causes other packages to FTBFS
> Tags: jessie upstream fixed-upstream
> 
> It was discovered that the security fix from last summer caused various
> packages to FTBFS during unrelated QA work:

[...]

> Now that there is an improved patch available from upstream which fixes
> this regression (currently in the 5.24.2-RC1 and 5.22.4-RC1 releases) we
> should apply this in jessie and (for completeness) stretch point releases,
> as well as sid.

This was fixed in the last jessie point release (8.9) with
perl/5.20.2-3+deb8u8, but the changelog entry had a wrong
bug number. Closing now.
-- 
Niko Tyni   nt...@debian.org

--- End Message ---

Reply via email to