[EPEL-devel] Fedora EPEL 7 updates-testing report

2014-11-20 Thread updates
The following Fedora EPEL 7 Security updates need testing:
 Age  URL
  22  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3621/php-Smarty-3.1.21-1.el7
  22  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3642/Pound-2.7-0.4.d.el7.1
  18  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3745/tnftp-20141031-1.el7
  10  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3886/python-requests-kerberos-0.6-1.el7
   9  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3794/polarssl-1.3.9-2.el7
   7  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3989/cross-binutils-2.23.88.0.1-2.el7.1
   7  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3995/oath-toolkit-2.4.1-8.el7
   6  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4045/libvncserver-0.9.9-0.9.el7.1
   2  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4113/kwebkitpart-1.3.4-5.el7
   2  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4100/erlang-R16B-03.9.el7
   1  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4152/lsyncd-2.1.5-6.el7
   1  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4154/nodejs-0.10.33-1.el7,libuv-0.10.29-1.el7
   0  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4174/python-eyed3-0.7.4-4.el7
   0  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4170/clamav-0.98.5-1.el7


The following builds have been pushed to Fedora EPEL 7 updates-testing

clamav-0.98.5-1.el7
ga-5.3b-14.el7
gflags-2.1.1-6.el7
gtk-gnutella-1.1.1-1.el7
gtk-murrine-engine-0.98.2-7.el7
myproxy-6.1.6-1.el7
ncl-6.2.1-1.el7
php-EasyRdf-0.8.0-5.el7
php-solarium-3.3.0-1.el7
python-eyed3-0.7.4-4.el7
python-pyroute2-0.3.2-1.el7
python-sh-1.08-4.el7
python-testrepository-0.0.18-2.el7
qpid-dispatch-0.2-8.el7
subunit-0.0.21-2.el7
yaz-5.6.0-1.el7

Details about builds:



 clamav-0.98.5-1.el7 (FEDORA-EPEL-2014-4170)
 End-user tools for the Clam Antivirus scanner

Update Information:

ClamAV 0.98.5
=


ClamAV 0.98.5 also includes these new features and bug fixes:

  * Support for the XDP file format and extracting, decoding, and scanning PDF 
files within XDP files. Addition of shared library support for LLVM versions 
3.1 - 3.5 for the purpose of just-in-time(JIT) compilation of ClamAV bytecode 
signatures. Andreas Cadhalpun submitted the patch implementing this support.
  * Enhancements to the clambc command line utility to assist ClamAV bytecode 
signature authors by providing introspection into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'. This issue was 
identified by Kurt Siefried of Red Hat. 
  * Security fix for ClamAV crash when scanning maliciously crafted yoda's 
crypter files. This issue, as well as several other bugs fixed in this release, 
were identified by Damien Millescamp of Oppida.
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant mode. Thanks to 
Reinhard Max for supplying the patch.
  * Bug fixes and other feature enhancements.

Please see the ChangeLog file or GIT log for further details.

ChangeLog:

* Wed Nov 19 2014 Robert Scheck rob...@fedoraproject.org - 0.98.5-1
- Upgrade to 0.98.5 and updated daily.cvd (#1138101)
* Sat Aug 16 2014 Fedora Release Engineering rel-...@lists.fedoraproject.org 
- 0.98.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

References:

  [ 1 ] Bug #1138101 - CVE-2013-6497 ClamAV: -a segmentation fault when 
processing files
https://bugzilla.redhat.com/show_bug.cgi?id=1138101




 ga-5.3b-14.el7 (FEDORA-EPEL-2014-4160)
 Global Arrays Toolkit

Update Information:

Fix bug #1150473 to support epel7

References:

  [ 1 ] Bug #1150473 - please build ga for EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1150473




 gflags-2.1.1-6.el7 (FEDORA-EPEL-2014-4172)
 Library for commandline flag processing

Update Information:

Moved from rawhide to epel7.

[EPEL-devel] Fedora EPEL 5 updates-testing report

2014-11-20 Thread updates
The following Fedora EPEL 5 Security updates need testing:
 Age  URL
 942  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.10-5.el5
 396  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1.20.12-1.el5
 161  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7.26-1.el5
  57  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2669/check-mk-1.2.4p5-1.el5
  56  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2853/mediawiki119-1.19.18-1.el5
  22  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3675/Pound-2.6-2.el5.2
  15  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3784/mantis-1.2.17-3.el5
  10  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-1.3.8-2.el5
   7  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3972/nginx-0.8.55-6.el5
   7  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3983/polarssl-1.3.2-3.el5
   1  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4147/lsyncd-2.1.4-4.el5.1.1
   0  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4166/clamav-0.98.5-1.el5


The following builds have been pushed to Fedora EPEL 5 updates-testing

clamav-0.98.5-1.el5
myproxy-6.1.6-1.el5

Details about builds:



 clamav-0.98.5-1.el5 (FEDORA-EPEL-2014-4166)
 Anti-virus software

Update Information:

ClamAV 0.98.5
=


ClamAV 0.98.5 also includes these new features and bug fixes:

  * Support for the XDP file format and extracting, decoding, and scanning PDF 
files within XDP files. Addition of shared library support for LLVM versions 
3.1 - 3.5 for the purpose of just-in-time(JIT) compilation of ClamAV bytecode 
signatures. Andreas Cadhalpun submitted the patch implementing this support.
  * Enhancements to the clambc command line utility to assist ClamAV bytecode 
signature authors by providing introspection into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'. This issue was 
identified by Kurt Siefried of Red Hat. 
  * Security fix for ClamAV crash when scanning maliciously crafted yoda's 
crypter files. This issue, as well as several other bugs fixed in this release, 
were identified by Damien Millescamp of Oppida.
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant mode. Thanks to 
Reinhard Max for supplying the patch.
  * Bug fixes and other feature enhancements.

Please see the ChangeLog file or GIT log for further details.

ChangeLog:

* Wed Nov 19 2014 Robert Scheck rob...@fedoraproject.org - 0.98.5-1
- Upgrade to 0.98.5 and updated daily.cvd (#1138101)

References:

  [ 1 ] Bug #1138101 - CVE-2013-6497 ClamAV: -a segmentation fault when 
processing files
https://bugzilla.redhat.com/show_bug.cgi?id=1138101




 myproxy-6.1.6-1.el5 (FEDORA-EPEL-2014-4159)
 Manage X.509 Public Key Infrastructure (PKI) security credentials

Update Information:

MyProxy 6.1.6

* Allow TLS (no longer force SSLv3)
* VOMS support now in a separate package (myproxy-voms)


ChangeLog:

* Wed Nov 19 2014 Mattias Ellert mattias.ell...@fysast.uu.se - 6.1.6-1
- Update to 6.1.6
- Drop patch myproxy-deps.patch (fixed upstream)
- Upstream source moved from sourceforge to the Globus Toolkit github repo
- Use source tarball published by Globus
- Use upstream's init scripts and systemd unit files
- New binary package myproxy-voms (voms support split out as a plugin)


___
epel-devel mailing list
epel-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/epel-devel


[EPEL-devel] Fedora EPEL 6 updates-testing report

2014-11-20 Thread updates
The following Fedora EPEL 6 Security updates need testing:
 Age  URL
 942  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.14-2.el6
 161  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1616/puppet-2.7.26-1.el6
  32  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3434/pylint-1.3.1-1.el6,python-astroid-1.2.1-2.el6,python-logilab-common-0.62.1-2.el6
  28  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3527/asterisk-1.8.31.1-1.el6
  22  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3623/Pound-2.6-2.el6.1
  18  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3748/tnftp-20141031-1.el6
  15  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3790/facter-1.6.18-7.el6
  10  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3851/python-requests-kerberos-0.6-1.el6
   9  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3927/drupal7-ckeditor-1.16-2.el6
   7  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3962/oath-toolkit-2.0.2-5.el6
   7  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4005/nginx-1.0.15-11.el6
   7  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4008/cross-binutils-2.23.51.0.3-1.el6.1
   7  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3975/polarssl-1.3.2-3.el6
   7  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-2069/php-channel-phpseclib-1.3-1.el6,php-sabredav-Sabre_VObject-2.1.4-2.el6,php-sabredav-Sabre_HTTP-1.7.11-1.el6,php-sabredav-Sabre_DAVACL-1.7.9-1.el6,php-sabredav-Sabre_DAV-1.7.13-1.el6,php-sabredav-Sabre_CardDAV-1.7.9-2.el6,php-sabredav-Sabre_CalDAV-1.7.9-1.el6,php-irodsphp-3.3.0-0.4.beta1.el6,php-phpseclib-net-ssh2-0.3.9-1.el6,php-phpseclib-net-sftp-0.3.9-1.el6,php-phpseclib-crypt-twofish-0.3.9-2.el6,php-phpseclib-crypt-tripledes-0.3.9-2.el6,php-phpseclib-crypt-rsa-0.3.9-1.el6,php-phpseclib-crypt-rijndael-0.3.9-2.el6,php-phpseclib-crypt-rc4-0.3.9-2.el6,php-phpseclib-crypt-random-0.3.9-1.el6,php-phpseclib-crypt-hash-0.3.9-1.el6,php-phpseclib-crypt-des-0.3.9-2.el6,php-phpseclib-crypt-blowfish-0.3.9-2.el6,php-phpseclib-crypt-aes-0.3.9-1.el6,php-phpseclib-math-biginteger-0.3.9-1.el6,php-phpseclib-crypt-base-0.3.9-1.el6,owncloud-6.0.5-4.el6
   5  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4057/moodle-2.5.9-1.el6
   1  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4151/lsyncd-2.1.4-4.el6.1.1
   1  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4144/nodejs-0.10.33-1.el6,libuv-0.10.29-1.el6
   0  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4165/python-eyed3-0.7.4-5.el6
   0  
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4176/clamav-0.98.5-1.el6


The following builds have been pushed to Fedora EPEL 6 updates-testing

clamav-0.98.5-1.el6
golang-github-coreos-go-systemd-2-2.el6
gtk-gnutella-1.1.1-1.el6
myproxy-6.1.6-1.el6
ntfs-3g-2014.2.15-8.el6
php-EasyRdf-0.8.0-5.el6
php-solarium-3.3.0-1.el6
python-eyed3-0.7.4-5.el6
python-pyroute2-0.3.2-1.el6
qpdfview-0.4.13-1.el6
qpid-dispatch-0.2-8.el6
qpid-proton-0.8-1.el6
rubygem-qpid_proton-0.8-1.el6

Details about builds:



 clamav-0.98.5-1.el6 (FEDORA-EPEL-2014-4176)
 Anti-virus software

Update Information:

ClamAV 0.98.5
=


ClamAV 0.98.5 also includes these new features and bug fixes:

  * Support for the XDP file format and extracting, decoding, and scanning PDF 
files within XDP files. Addition of shared library support for LLVM versions 
3.1 - 3.5 for the purpose of just-in-time(JIT) compilation of ClamAV bytecode 
signatures. Andreas Cadhalpun submitted the patch implementing this support.
  * Enhancements to the clambc command line utility to assist ClamAV bytecode 
signature authors by providing introspection into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'. This issue was 
identified by Kurt Siefried of Red Hat. 
  * Security fix for ClamAV crash when scanning maliciously crafted yoda's 
crypter files. This issue, as well as several other bugs fixed in this release, 
were identified by Damien Millescamp of Oppida.
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant mode. Thanks to 
Reinhard Max for supplying the patch.
  * Bug fixes and other feature enhancements.

Please see the ChangeLog file or GIT log for further details.

ChangeLog:

* Wed Nov 19 2014 Robert Scheck rob...@fedoraproject.org - 0.98.5-1
- Upgrade to 0.98.5 and updated daily.cvd (#1138101)

References:

  [ 1 ] 

[EPEL-devel] Orphaned Packages in epel7 (2014-11-20)

2014-11-20 Thread opensource
The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life

Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one. Please adopt the affected package or
retire your depending package to avoid broken dependencies, otherwise your
package will be retired when the affected package gets retired.

  Package(co)maintainers  Status Change 
===
create-tx-configurationorphan, sparks 5 weeks ago   
jython orphan, akurtakov, dmalcolm,   2 weeks ago   
   jmatthews, lkundrak, 
   pmackinn, tradej 
mikmod orphan, s4504kr, sdz   27 weeks ago  
perl-App-Nopaste   orphan, iarnell, perl-sig  1 weeks ago   
perl-Context-Preserve  orphan, iarnell, mmaslano, 1 weeks ago   
   perl-sig, psabata
perl-Data-Dumper-Concise   orphan, iarnell, psabata,  1 weeks ago   
   tremble  
perl-DateTime-TimeZone-orphan, iarnell, perl-sig, 1 weeks ago   
SystemVpsabata  
perl-DateTime-TimeZone-orphan, iarnell, perl-sig, 1 weeks ago   
Tzfile psabata  
perl-Devel-REPLorphan, lkundrak, psabata  1 weeks ago   
perl-Devel-StackTrace- orphan, iarnell, perl-sig, 1 weeks ago   
WithLexicals   psabata  
perl-Directory-Scratch orphan, lkundrak, psabata  1 weeks ago   
perl-Getopt-Long-Descriptive   orphan, iarnell, perl-sig, 1 weeks ago   
   psabata, tremble 
perl-HTTP-Request-AsCGIorphan, eseyman, mmaslano, 1 weeks ago   
   perl-sig, psabata
perl-Hash-Merge-Simple orphan, iarnell, mmaslano, 1 weeks ago   
   perl-sig, psabata
perl-IPC-Shareable orphan, psabata, steve 1 weeks ago   
perl-JSON-Any  orphan, eseyman, lkundrak  1 weeks ago   
perl-Lexical-Persistence   orphan, iarnell, perl-sig, 1 weeks ago   
   psabata  
perl-Lingua-Stem-Snowball  orphan, lkundrak, perl-sig,1 weeks ago   
   psabata  
perl-Lingua-StopWords  orphan, lkundrak, perl-sig,1 weeks ago   
   psabata  
perl-Linux-Inotify2orphan, iarnell, perl-sig, 1 weeks ago   
   psabata, tremble 
perl-Log-Dispatch-Arrayorphan, iarnell, perl-sig, 1 weeks ago   
   psabata  
perl-MooseX-ClassAttribute orphan, iarnell, jplesnik, 1 weeks ago   
   mmaslano, perl-sig, psabata  
perl-MooseX-ConfigFromFile orphan, iarnell, mmaslano, 1 weeks ago   
   perl-sig, psabata
perl-MooseX-Getopt orphan, iarnell, perl-sig, 1 weeks ago   
   tremble  
perl-MooseX-InsideOut  orphan, iarnell, perl-sig  1 weeks ago   
perl-MooseX-Method-orphan, iarnell, perl-sig  1 weeks ago   
Signatures  
perl-MooseX-Object-Pluggable   orphan, iarnell, mmaslano, 1 weeks ago   
   perl-sig, psabata
perl-MooseX-SimpleConfig   orphan, iarnell, mmaslano, 1 weeks ago   
   perl-sig, psabata
perl-MooseX-Types-DateTime orphan, iarnell, mmaslano, 1 weeks ago   
   perl-sig, psabata
perl-MooseX-Types-Path-Class   orphan, iarnell, tremble   1 weeks ago   
perl-MooseX-Types-Structured   orphan, iarnell, perl-sig  1 weeks ago   
perl-Role-HasMessage   orphan, iarnell, perl-sig  1 weeks ago   
perl-Role-Identifiable orphan, iarnell, perl-sig  1 weeks ago   
perl-String-Formatter   

[EPEL-devel] Orphaned Packages in epel6 (2014-11-20)

2014-11-20 Thread opensource
The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life

Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one. Please adopt the affected package or
retire your depending package to avoid broken dependencies, otherwise your
package will be retired when the affected package gets retired.

  Package(co)maintainers  Status Change 
===
autoconf-archive   orphan, praiskup, tmatsuu  10 weeks ago  
cone   orphan, steve  1 weeks ago   
couchdborphan, erlang-sig, wtogami27 weeks ago  
dbus-tools orphan, miminar2 weeks ago   
ddclient   orphan 27 weeks ago  
djvulibre  orphan, jgu27 weeks ago  
dzen2  orphan 19 weeks ago  
ejabberd   orphan, erlang-sig, jkaluza,   27 weeks ago  
   martinlanghoff, mmahut   
erlang-amf orphan, erlang-sig 27 weeks ago  
erlang-edown   orphan, erlang-sig 27 weeks ago  
erlang-egeoip  orphan, erlang-sig 27 weeks ago  
erlang-emmap   orphan, erlang-sig 27 weeks ago  
erlang-eradius orphan, erlang-sig 27 weeks ago  
erlang-erlando orphan, erlang-sig 27 weeks ago  
erlang-erlsyslog   orphan, erlang-sig 27 weeks ago  
erlang-esasl   orphan, erlang-sig 27 weeks ago  
erlang-etaporphan, erlang-sig 27 weeks ago  
erlang-gen_leader  orphan, erlang-sig 27 weeks ago  
erlang-gettext orphan, erlang-sig 27 weeks ago  
erlang-gproc   orphan, erlang-sig 27 weeks ago  
erlang-gtknode orphan, erlang-sig 27 weeks ago  
erlang-lfe orphan, erlang-sig 27 weeks ago  
erlang-log4erl orphan, erlang-sig 27 weeks ago  
erlang-lukeorphan, erlang-sig 27 weeks ago  
erlang-meckorphan, erlang-sig, peter  27 weeks ago  
erlang-mimetypes   orphan, erlang-sig 27 weeks ago  
erlang-misultinorphan, erlang-sig 27 weeks ago  
erlang-neotoma orphan, erlang-sig 27 weeks ago  
erlang-oauth   orphan, erlang-sig 27 weeks ago  
erlang-ranch   orphan, erlang-sig 27 weeks ago  
erlang-skerl   orphan, erlang-sig 27 weeks ago  
erlang-snappy  orphan, erlang-sig 27 weeks ago  
erlang-webmachine  orphan, erlang-sig 27 weeks ago  
extremetuxracerorphan 5 weeks ago   
fmtoolsorphan, roma   27 weeks ago  
fuse-encfs orphan, jokajak27 weeks ago  
gprof2dot  orphan 14 weeks ago  
grin   orphan 27 weeks ago  
html2text  orphan, mcepl  27 weeks ago  
ip6sic orphan 27 weeks ago  
isic   orphan 27 weeks ago  
java-service-wrapper   orphan 27 weeks ago  
jazzy  orphan 11 weeks ago  
jcommonorphan, msrb   11 weeks ago  
jettison   orphan 27 weeks ago  
jigdo  orphan, jsteffan   27 weeks ago  
jwmorphan, skytux, splinux10 weeks ago  
lcov   orphan 27 weeks ago  
lisorphan 17 weeks ago  
mt-daapd   orphan 27 weeks ago  
mytop  orphan, ksyz, terjeros 27 weeks ago  
nviorphan 27 weeks ago  
osc-source_validator   orphan, saispo 27 weeks ago  
patricia-trie  orphan 11 weeks ago  
perl-Algorithm-Annotate 

[EPEL-devel] REMINDER: Mass Removal of Orphaned and Associated Packages

2014-11-20 Thread Stephen John Smoogen
 On December 17, 2014, EpSCO will be cleaning out the EPEL repositories
 of all orphaned packages. Packages that are orphaned will be removed and
 all packages depending on those orphaned packages will be removed from the
repository. Packagers requiring packages need to take over orphaned
packages.

Please see the following links for currently orphaned packages:

RHEL-7
https://lists.fedoraproject.org/pipermail/epel-devel/2014-November/010494.html

RHEL-5
https://lists.fedoraproject.org/pipermail/epel-devel/2014-November/010495.html

RHEL-6
https://lists.fedoraproject.org/pipermail/epel-devel/2014-November/010496.html

On December 19, 2014, all packages which have broken dependencies from
these orphaned packages will be removed from the repositories. Packages
needing to be re-added will need to go through a package review.

-- 
Stephen J Smoogen.
___
epel-devel mailing list
epel-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/epel-devel


[EPEL-devel] Orphaned Packages in epel5 (2014-11-20)

2014-11-20 Thread opensource
The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life

Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one. Please adopt the affected package or
retire your depending package to avoid broken dependencies, otherwise your
package will be retired when the affected package gets retired.

  Package(co)maintainers  Status Change 
===
BibToolorphan 27 weeks ago  
GitPython  orphan, dgoodwin   27 weeks ago  
NetPIPEorphan 27 weeks ago  
Perlbalorphan 27 weeks ago  
RabbIT orphan 27 weeks ago  
abcde  orphan 27 weeks ago  
acpitool   orphan 27 weeks ago  
ant-contriborphan, davidcl, msrb  27 weeks ago  
astronomy-menusorphan, astronomy-sig, 27 weeks ago  
   mmahut   
autoconf-archive   orphan, praiskup, tmatsuu  10 weeks ago  
avlorphan 27 weeks ago  
bibexport  orphan 27 weeks ago  
bwidgetorphan 27 weeks ago  
bwm-ng orphan, slankes27 weeks ago  
bytelist   orphan 27 weeks ago  
bzrorphan, pstodulk, shahms   14 weeks ago  
cairommorphan 27 weeks ago  
cd-discid  orphan 27 weeks ago  
clnorphan, deji   16 weeks ago  
cntlm  orphan 27 weeks ago  
cone   orphan, steve  1 weeks ago   
couchdborphan, erlang-sig, wtogami27 weeks ago  
ctapi-common   orphan 27 weeks ago  
cvs2cl orphan 27 weeks ago  
dbus-tools orphan, miminar2 weeks ago   
ddclient   orphan 27 weeks ago  
dnsjavaorphan 27 weeks ago  
eclipse-subclipse  orphan 27 weeks ago  
ejabberd   orphan, erlang-sig, jkaluza,   27 weeks ago  
   mmahut   
elektraorphan 27 weeks ago  
enigma orphan, wart   27 weeks ago  
eqntottorphan, chitlesh   27 weeks ago  
erlang orphan, erlang-sig, gemi   27 weeks ago  
erlang-amf orphan, erlang-sig 27 weeks ago  
erlang-edown   orphan, erlang-sig 27 weeks ago  
erlang-eradius orphan, erlang-sig 27 weeks ago  
erlang-erlando orphan, erlang-sig 27 weeks ago  
erlang-erlsom  orphan, erlang-sig 27 weeks ago  
erlang-erlsyslog   orphan, erlang-sig 27 weeks ago  
erlang-esasl   orphan, erlang-sig 27 weeks ago  
erlang-etaporphan, erlang-sig 27 weeks ago  
erlang-gen_leader  orphan, erlang-sig 27 weeks ago  
erlang-getopt  orphan, erlang-sig 27 weeks ago  
erlang-gettext orphan, erlang-sig 27 weeks ago  
erlang-gproc   orphan, erlang-sig 27 weeks ago  
erlang-ibrowse orphan, erlang-sig 27 weeks ago  
erlang-lfe orphan, erlang-sig 27 weeks ago  
erlang-log4erl orphan, erlang-sig 27 weeks ago  
erlang-meckorphan, erlang-sig, peter  27 weeks ago  
erlang-misultinorphan, erlang-sig 27 weeks ago  
erlang-mustacheorphan, erlang-sig 27 weeks ago  
erlang-neotoma orphan, erlang-sig 27 weeks ago  
erlang-oauth   orphan, erlang-sig 27 weeks ago  
erlang-xmlrpc   

Re: Summary/Minutes from today's FESCo Meeting (2014-11-19)

2014-11-20 Thread Tomas Hozza
On 11/20/2014 08:05 AM, Till Maas wrote:
 On Wed, Nov 19, 2014 at 03:06:11PM -0500, Tomas Mraz wrote:

  * #1368 How to deal with F21 broken dependencies  (t8m, 19:08:56)
* AGREED: FESCo agrees to dropping the packages with broken
  dependencies listed in #1368 from both F21 and rawhide (+7, -0, 0:0)
  (t8m, 19:25:56)

 I retired the packages now. To make sure the final repo does not
 contain any packages with broken dependencies, the Freeze Exception
 process needs to be used to get packages from updates-testing that do
 not contain broken dependencies into the stable repo:
 https://fedoraproject.org/wiki/QA:SOP_freeze_exception_bug_process

* AGREED: We will do the broken deps cleanup on Final Freeze from now
  on in the future Fedora releases (+8, -0, 0:0)  (t8m, 19:30:41)
* There will be warning sent to the affected maintainers at least 3
  weeks in advance  (t8m, 19:31:36)

 What happens with packages that get broken after the warning but before
 the Final Freeze?

 Regards
 Till

Please someone correct me if I'm wrong, but all broken packages
should be cleaned up after the Final Freeze. However we could
send one more up-to-date reminder after the Freeze.

Regards,
Tomas
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

remove git-bzr from rawhide?

2014-11-20 Thread Petr Stodulka

Hi folks,
I think about removal of git-bzr package in rawhide, which is actualy 
non-functional - contains only file with warning message
about replacement by git-remote-bzr package - which actualy replace 
git-bzr in f21 too. Are you OK with it? I didn't remove any
package earlier, but after short discussion I want to remove it from 
specfile of git only and add Provides/Obsoletes
into the git-remote-bzr. Is there anything else what should I do? Or do 
you think someone that should be still kept?


And probably Obsoletes/Provides could be set in f21 too - 
https://bugzilla.redhat.com/show_bug.cgi?id=1164212.

Disagree anyone with it?

Thanks
Petr

--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Review swap

2014-11-20 Thread Michael Schwendt
On Wed, 19 Nov 2014 21:13:29 +0100, Lorenzo Dalrio wrote:

 In my hurry I have swapped Version and Release following exactly the
 guidelines you have linked. :-/

Well, a package being tiny does not imply there's nothing to be reviewed.

The top of the executable says

  __version__ = '1.2.0'

which it displays somewhere in the tools Help system. The CHANGELOG file
says Version 1.2.

The script contains a shebang that can become problematic, unless
it really works with both Python 2 and Python 3:

  #!/usr/bin/env python

https://fedorahosted.org/fpc/ticket/327
Older topic:
http://fedoraproject.org/wiki/Script_Interpreters_%28draft%29
https://www.redhat.com/archives/fedora-packaging/2009-July/msg00056.html
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

F-21 Branched report: 20141120 changes

2014-11-20 Thread Fedora Branched Report
Compose started at Thu Nov 20 07:15:30 UTC 2014
Broken deps for armhfp
--
[authhub]
authhub-0.1.2-3.fc19.armv7hl requires libjson.so.0
[avro]
avro-mapred-1.7.5-9.fc21.noarch requires hadoop-mapreduce
avro-mapred-1.7.5-9.fc21.noarch requires hadoop-client
[fatrat]
1:fatrat-1.2.0-0.21.beta2.fc21.armv7hl requires 
libtorrent-rasterbar.so.7
[gearbox]
gearbox-10.11-8.fc21.armv7hl requires libIceUtil.so.35
gearbox-10.11-8.fc21.armv7hl requires ice
gearbox-devel-10.11-8.fc21.armv7hl requires ice-devel
[gofer]
ruby-gofer-0.77.1-2.fc21.noarch requires rubygem(qpid) = 0:0.16.0
[leiningen]
leiningen-1.7.1-7.fc20.noarch requires maven-ant-tasks
leiningen-1.7.1-7.fc20.noarch requires classworlds
[libopensync-plugin-irmc]
1:libopensync-plugin-irmc-0.22-7.fc20.armv7hl requires libopenobex.so.1
[openstack-nova]
openstack-nova-compute-2014.1.2-1.fc21.noarch requires 
libvirt-daemon-xen
[ostree]
ostree-grub2-2014.11-1.fc21.armv7hl requires grub2
[rubygem-newgem]
rubygem-newgem-1.5.3-11.fc21.noarch requires rubygem(rubigen) = 0:1.5.3
[spring-maps-default]
spring-maps-default-0.1-12.fc21.noarch requires spring
[syntastic]
syntastic-d-3.5.0-1.fc21.noarch requires ldc



Broken deps for i386
--
[authhub]
authhub-0.1.2-3.fc19.i686 requires libjson.so.0
[fatrat]
1:fatrat-1.2.0-0.21.beta2.fc21.i686 requires libtorrent-rasterbar.so.7
[gearbox]
gearbox-10.11-8.fc21.i686 requires libIceUtil.so.35
gearbox-10.11-8.fc21.i686 requires ice
gearbox-devel-10.11-8.fc21.i686 requires ice-devel
[gofer]
ruby-gofer-0.77.1-2.fc21.noarch requires rubygem(qpid) = 0:0.16.0
[leiningen]
leiningen-1.7.1-7.fc20.noarch requires maven-ant-tasks
leiningen-1.7.1-7.fc20.noarch requires classworlds
[libopensync-plugin-irmc]
1:libopensync-plugin-irmc-0.22-7.fc20.i686 requires libopenobex.so.1
[rubygem-newgem]
rubygem-newgem-1.5.3-11.fc21.noarch requires rubygem(rubigen) = 0:1.5.3



Broken deps for x86_64
--
[authhub]
authhub-0.1.2-3.fc19.x86_64 requires libjson.so.0()(64bit)
[fatrat]
1:fatrat-1.2.0-0.21.beta2.fc21.i686 requires libtorrent-rasterbar.so.7
1:fatrat-1.2.0-0.21.beta2.fc21.x86_64 requires 
libtorrent-rasterbar.so.7()(64bit)
[gearbox]
gearbox-10.11-8.fc21.i686 requires libIceUtil.so.35
gearbox-10.11-8.fc21.i686 requires ice
gearbox-10.11-8.fc21.x86_64 requires libIceUtil.so.35()(64bit)
gearbox-10.11-8.fc21.x86_64 requires ice
gearbox-devel-10.11-8.fc21.i686 requires ice-devel
gearbox-devel-10.11-8.fc21.x86_64 requires ice-devel
[gofer]
ruby-gofer-0.77.1-2.fc21.noarch requires rubygem(qpid) = 0:0.16.0
[leiningen]
leiningen-1.7.1-7.fc20.noarch requires maven-ant-tasks
leiningen-1.7.1-7.fc20.noarch requires classworlds
[libopensync-plugin-irmc]
1:libopensync-plugin-irmc-0.22-7.fc20.x86_64 requires 
libopenobex.so.1()(64bit)
[rubygem-newgem]
rubygem-newgem-1.5.3-11.fc21.noarch requires rubygem(rubigen) = 0:1.5.3



Removed package:  audtty-0.1.12-9.fc20
Removed package:  condor-cloud-0.1-8.fc21
Removed package:  deltacloud-core-1.1.3-1.fc20
Removed package:  django-recaptcha-0.1-7.20091212svn6.fc21
Removed package:  dragonegg-3.4-0.3.rc0.fc21
Removed package:  edelib-2.1-5.fc21
Removed package:  flush-0.9.12-10.fc21
Removed package:  gdesklet-SlideShow-0.9-16.fc21
Removed package:  gdesklets-citation-2.0-3.20120702git355e2ee.fc19
Removed package:  gedit-valencia-0.4.0-1.20131223git94442bf.fc21
Removed package:  ltsp-5.4.5-8.fc21
Removed package:  monodevelop-vala-2.8.8.1-6.fc21
Removed package:  netdisco-1.1-7.fc21
Removed package:  ocaml-pa-do-0.8.16-3.fc21
Removed package:  openslides-1.3.1-3.fc21
Removed package:  openvas-client-3.0.3-8.fc20
Removed package:  pootle-2.1.6-8.fc21
Removed package:  python-askbot-fedmsg-0.1.0-2.fc21
Removed package:  python-coffin-0.3.7-3.fc21
Removed package:  python-django-addons-0.6.6-2.fc21
Removed package:  python-django-longerusername-0.4-5.20130204gite4e85d7d.fc21
Removed package:  rubygem-rubigen-1.5.8-3.fc21
Removed package:  sugar-tamtam-0-0.14.20100201git.fc21
Removed package:  transifex-1.2.1-12.fc21
Removed package:  valabind-0.7.4-4.fc21
Removed package:  zyGrib-6.1.4-3.fc20

Summary:
Added Packages: 0
Removed Packages: 26
Modified Packages: 0
Size of added packages: 0 (0 )
Size change of modified packages: 0 (0 )
Size of removed packages: 46784400 (45 M)
Size change: -46784400 (-45 M)
Compose finished at Thu Nov 20 11:32:16 UTC 2014

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

rawhide report: 20141120 changes

2014-11-20 Thread Fedora Rawhide Report
Compose started at Thu Nov 20 05:15:06 UTC 2014
Broken deps for i386
--
[3Depict]
3Depict-0.0.16-3.fc22.i686 requires libmgl.so.7.2.0
[Sprog]
Sprog-0.14-27.fc20.noarch requires perl(:MODULE_COMPAT_5.18.0)
[authhub]
authhub-0.1.2-3.fc19.i686 requires libjson.so.0
[cab]
cab-0.1.9-12.fc22.i686 requires cabal-dev
[condor]
condor-plumage-8.1.4-7.a1a7df5.fc22.i686 requires libmongoclient.so
[dnssec-check]
dnssec-check-1.14.0.1-4.fc20.i686 requires libval-threads.so.14
dnssec-check-1.14.0.1-4.fc20.i686 requires libsres.so.14
[fatrat]
1:fatrat-1.2.0-0.21.beta2.fc22.i686 requires libtorrent-rasterbar.so.7
[glances]
glances-2.1.2-2.fc22.noarch requires python-psutil = 0:2.0.0
[gofer]
ruby-gofer-0.77.1-2.fc21.noarch requires rubygem(qpid) = 0:0.16.0
[iwhd]
iwhd-1.6-11.fc22.i686 requires libmongoclient.so
[leiningen]
leiningen-1.7.1-7.fc20.noarch requires maven-ant-tasks
leiningen-1.7.1-7.fc20.noarch requires classworlds
[libopensync-plugin-irmc]
1:libopensync-plugin-irmc-0.22-7.fc20.i686 requires libopenobex.so.1
[nwchem]
nwchem-openmpi-6.3.2-11.fc21.i686 requires libmpi_usempi.so.1
[perl-MooseX-Declare]
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::Syntax::MethodDeclaration::Parameterized)
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::StackItem)
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::Context::WithOptions)
[python-selenium]
python3-selenium-2.43.0-1.fc22.noarch requires python3-rdflib
[rubygem-newgem]
rubygem-newgem-1.5.3-11.fc21.noarch requires rubygem(rubigen) = 0:1.5.3
[shogun]
shogun-doc-3.2.0.1-0.27.git20140804.96f3cf3.fc22.noarch requires 
shogun-data = 0:0.8.1-0.18.git20140804.48a1abb.fc22
[uwsgi]
uwsgi-plugin-gridfs-2.0.7-2.fc22.i686 requires libmongoclient.so
uwsgi-stats-pusher-mongodb-2.0.7-2.fc22.i686 requires libmongoclient.so
[vfrnav]
vfrnav-20140510-2.fc22.i686 requires libpolyclipping.so.16
vfrnav-utils-20140510-2.fc22.i686 requires libpolyclipping.so.16



Broken deps for x86_64
--
[3Depict]
3Depict-0.0.16-3.fc22.x86_64 requires libmgl.so.7.2.0()(64bit)
[Sprog]
Sprog-0.14-27.fc20.noarch requires perl(:MODULE_COMPAT_5.18.0)
[authhub]
authhub-0.1.2-3.fc19.x86_64 requires libjson.so.0()(64bit)
[cab]
cab-0.1.9-12.fc22.x86_64 requires cabal-dev
[condor]
condor-plumage-8.1.4-7.a1a7df5.fc22.x86_64 requires 
libmongoclient.so()(64bit)
[dnssec-check]
dnssec-check-1.14.0.1-4.fc20.x86_64 requires 
libval-threads.so.14()(64bit)
dnssec-check-1.14.0.1-4.fc20.x86_64 requires libsres.so.14()(64bit)
[fatrat]
1:fatrat-1.2.0-0.21.beta2.fc22.i686 requires libtorrent-rasterbar.so.7
1:fatrat-1.2.0-0.21.beta2.fc22.x86_64 requires 
libtorrent-rasterbar.so.7()(64bit)
[glances]
glances-2.1.2-2.fc22.noarch requires python-psutil = 0:2.0.0
[gofer]
ruby-gofer-0.77.1-2.fc21.noarch requires rubygem(qpid) = 0:0.16.0
[iwhd]
iwhd-1.6-11.fc22.x86_64 requires libmongoclient.so()(64bit)
[leiningen]
leiningen-1.7.1-7.fc20.noarch requires maven-ant-tasks
leiningen-1.7.1-7.fc20.noarch requires classworlds
[libopensync-plugin-irmc]
1:libopensync-plugin-irmc-0.22-7.fc20.x86_64 requires 
libopenobex.so.1()(64bit)
[nwchem]
nwchem-openmpi-6.3.2-11.fc21.x86_64 requires libmpi_usempi.so.1()(64bit)
[perl-MooseX-Declare]
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::Syntax::MethodDeclaration::Parameterized)
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::StackItem)
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::Context::WithOptions)
[python-selenium]
python3-selenium-2.43.0-1.fc22.noarch requires python3-rdflib
[rubygem-newgem]
rubygem-newgem-1.5.3-11.fc21.noarch requires rubygem(rubigen) = 0:1.5.3
[shogun]
shogun-doc-3.2.0.1-0.27.git20140804.96f3cf3.fc22.noarch requires 
shogun-data = 0:0.8.1-0.18.git20140804.48a1abb.fc22
[uwsgi]
uwsgi-plugin-gridfs-2.0.7-2.fc22.x86_64 requires 
libmongoclient.so()(64bit)
uwsgi-stats-pusher-mongodb-2.0.7-2.fc22.x86_64 requires 
libmongoclient.so()(64bit)
[vfrnav]
vfrnav-20140510-2.fc22.i686 requires libpolyclipping.so.16
vfrnav-20140510-2.fc22.x86_64 requires libpolyclipping.so.16()(64bit)
vfrnav-utils-20140510-2.fc22.x86_64 requires 
libpolyclipping.so.16()(64bit)



Broken deps for armhfp
--
[3Depict]
3Depict-0.0.16-3.fc22.armv7hl requires libmgl.so.7.2.0
[Sprog]
Sprog-0.14-27.fc20.noarch requires perl(:MODULE_COMPAT_5.18.0)
[authhub]
authhub-0.1.2-3.fc19.armv7hl 

Announcing the release of Fedora 21 Beta for ARM aarch64!

2014-11-20 Thread Peter Robinson
The Fedora 21 beta release for the ARM aarch64 platform is here, and - as usual
- is packed with amazing improvements to Fedora, as well as fantastic free and
open source software, gently harvested for your enjoyment. No bits were harmed
in the making of this beta.

What is the Beta Release?
=

The beta release is the last important milestone before the
release of Fedora 21. A Beta release is code-complete and bears a
very strong resemblance to the third and final release. Only
critical bug fixes will be pushed as updates up to the general
release of Fedora 21. The final release of Fedora 21 is
[https://fedoraproject.org/wiki/Releases/21/Schedule] expected in
early December. Meanwhile, download the beta of Fedora 21 and
help us make it even better:

https://fedoraproject.org/wiki/How_to_file_a_bug_report

Every bug you uncover is a chance to improve the experience for
millions of Fedora users worldwide. Together, we can make Fedora 21
a rock-solid distribution. We have a culture of coordinating new
features and pushing fixes upstream as much as feasible and your
feedback will help improve not only Fedora but Linux and free
software on the whole.

https://fedoraproject.org/wiki/Staying_close_to_upstream_projects

(See the end of this announcement for more information on how to help.)

Fedora 21 Base
--

Each of the products will build on the base set of packages for
Fedora. For instance, each product will use the same packages for
the kernel, RPM, Yum, systemd, Anaconda, and so forth.

The Base Working Group develops the standard platform for all Fedora
products, which includes the installer, compose tools, and basic
platform for the other products. The Base set of packages is not a full
product intended for use on its own, but to be kept as a small, stable
platform for other products to build on.

Highlights in the Beta Release
==

In this section, we'll look at some of the things that are new or
interesting in the Beta release.

A Note on Shellshocked
--

You've probably read all about the Shellshocked vulnerability
in GNU Bash, which affected Fedora 19, 20, and 21 Alpha. Rest
assured that Fedora 21 beta has been patched to close this
vulnerability.

Fedora 21 Server


The Fedora Server product is a common base platform that is meant to
run featured application stacks, which are produced, tested, and
distributed by the Server Working Group. Want to use Fedora as a Web
server, file server, database server, or platform for an
Infrastructure-as-a-Service? Fedora 21 Server is for you.

Fedora Server Management Features
=

The Fedora Server product introduces new Server management
features aimed at making it easier to install discrete
infrastructure services. The Fedora Server will introduce three
new technologies in Fedora to handle this task, rolekit, Cockpit
and OpenLMI.

Rolekit (https://fedorahosted.org/rolekit) is a Role deployment
and management toolkit that provides a consistent interface to
administrators to install and configure all the packages needed
to implement a specific server role. Rolekit is at an early stage
of development in Fedora 21 Beta.

Cockpit (http://cockpit-project.org/) is a user interface for
configuring and monitoring your server or servers. It is
accessible remotely via a web browser.

OpenLMI (http://www.openlmi.org/) is a remote management system
built atop DMTF-CIM. It can be used for scripting management
functions across many machines as well as querying for
capabilities and monitoring for system events.

*** Release Schedule ***

The full release schedule is available on the Fedora wiki. The
current schedule currently calls for the final release to come
out on December 9th:

https://fedoraproject.org/wiki/Releases/21/Schedule

Dates are subject to change, pending any major bugs or issues
found during the development process.

Issues and Details
---

This is an Beta release. As such, we expect that you may
encounter bugs or missing features. To report issues encountered
during testing, contact the Fedora QA team via the
QA mailing list (test at lists.fedoraproject.org) or in
#fedora-qa on freenode.

For tips on reporting a bug effectively, read How to file a bug
report:

https://fedoraproject.org/wiki/How_to_file_a_bug_report

Thanks much to all the contributors who've helped bring Fedora 21
this far! We're very excited about this release, and we hope that
you'll enjoy it too.
___
devel-announce mailing list
devel-annou...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel-announce
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Announcing the release of Fedora 21 Beta for the POWER architecture!

2014-11-20 Thread Peter Robinson
The Fedora 21 beta release for the POWER platform, in Big and Little Endian
flavours, is here, and - as usual - is packed with amazing improvements to
Fedora, as well as fantastic free and open source software, gently harvested
for your enjoyment. No bits were harmed in the making of this beta.

What is the Beta Release?
=

The beta release is the last important milestone before the
release of Fedora 21. A Beta release is code-complete and bears a
very strong resemblance to the third and final release. Only
critical bug fixes will be pushed as updates up to the general
release of Fedora 21. The final release of Fedora 21 is
[https://fedoraproject.org/wiki/Releases/21/Schedule] expected in
early December. Meanwhile, download the beta of Fedora 21 and
help us make it even better:

https://fedoraproject.org/wiki/How_to_file_a_bug_report

Every bug you uncover is a chance to improve the experience for
millions of Fedora users worldwide. Together, we can make Fedora 21
a rock-solid distribution. We have a culture of coordinating new
features and pushing fixes upstream as much as feasible and your
feedback will help improve not only Fedora but Linux and free
software on the whole.

https://fedoraproject.org/wiki/Staying_close_to_upstream_projects

(See the end of this announcement for more information on how to help.)

Fedora 21 Base
--

Each of the products will build on the base set of packages for
Fedora. For instance, each product will use the same packages for
the kernel, RPM, Yum, systemd, Anaconda, and so forth.

The Base Working Group develops the standard platform for all Fedora
products, which includes the installer, compose tools, and basic
platform for the other products. The Base set of packages is not a full
product intended for use on its own, but to be kept as a small, stable
platform for other products to build on.

Highlights in the Beta Release
==

In this section, we'll look at some of the things that are new or
interesting in the Beta release.

A Note on Shellshocked
--

You've probably read all about the Shellshocked vulnerability
in GNU Bash, which affected Fedora 19, 20, and 21 Alpha. Rest
assured that Fedora 21 beta has been patched to close this
vulnerability.

Fedora 21 Server


The Fedora Server product is a common base platform that is meant to
run featured application stacks, which are produced, tested, and
distributed by the Server Working Group. Want to use Fedora as a Web
server, file server, database server, or platform for an
Infrastructure-as-a-Service? Fedora 21 Server is for you.

Fedora Server Management Features
=

The Fedora Server product introduces new Server management
features aimed at making it easier to install discrete
infrastructure services. The Fedora Server will introduce three
new technologies in Fedora to handle this task, rolekit, Cockpit
and OpenLMI.

Rolekit (https://fedorahosted.org/rolekit) is a Role deployment
and management toolkit that provides a consistent interface to
administrators to install and configure all the packages needed
to implement a specific server role. Rolekit is at an early stage
of development in Fedora 21 Beta.

Cockpit (http://cockpit-project.org/) is a user interface for
configuring and monitoring your server or servers. It is
accessible remotely via a web browser.

OpenLMI (http://www.openlmi.org/) is a remote management system
built atop DMTF-CIM. It can be used for scripting management
functions across many machines as well as querying for
capabilities and monitoring for system events.

*** Release Schedule ***

The full release schedule is available on the Fedora wiki. The
current schedule currently calls for the final release to come
out on December 9th:

https://fedoraproject.org/wiki/Releases/21/Schedule

Dates are subject to change, pending any major bugs or issues
found during the development process.

Issues and Details
---

This is an Beta release. As such, we expect that you may
encounter bugs or missing features. To report issues encountered
during testing, contact the Fedora QA team via the
QA mailing list (test at lists.fedoraproject.org) or in
#fedora-qa on freenode.

For tips on reporting a bug effectively, read How to file a bug
report:

https://fedoraproject.org/wiki/How_to_file_a_bug_report

Thanks much to all the contributors who've helped bring Fedora 21
this far! We're very excited about this release, and we hope that
you'll enjoy it too.
___
devel-announce mailing list
devel-annou...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel-announce
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: remove git-bzr from rawhide?

2014-11-20 Thread Alexey I. Froloff
On Thu, Nov 20, 2014 at 10:57:36AM +0100, Petr Stodulka wrote:
 I think about removal of git-bzr package in rawhide, which is actualy
 non-functional - contains only file with warning message
 about replacement by git-remote-bzr package - which actualy replace git-bzr
 in f21 too. Are you OK with it? I didn't remove any
 package earlier, but after short discussion I want to remove it from
 specfile of git only and add Provides/Obsoletes
 into the git-remote-bzr. Is there anything else what should I do? Or do you
 think someone that should be still kept?
I was surprised (in a bad way), when git remote update instead
showed me big warning and did nothing.  Doing dnf upgrade did
nothing, executing commands from git-bzr warning also did nothing
(because /usr/libexec/git-core have preference over $PATH).  And
only after that I've found git-remote-bzr package...

So, I think non-functional git-bzr must be removed and
appropriate Provides/Obsoletes must be add in all branches.  If
someone thinks, that git-bzr must be present for some reason,
better make it empty and require git-remote-bzr.

-- 
Regards,--
Sir Raorn.   --- https://plus.google.com/+AlexeyFroloff


pgpp_i3lxOOj2.pgp
Description: PGP signature
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Review swap

2014-11-20 Thread Lorenzo Dalrio
Once again, thank you Michael.
I have corrected version number to reflect executable version and
patched shebang line.


2014-11-20 12:11 GMT+01:00 Michael Schwendt mschwe...@gmail.com:
 On Wed, 19 Nov 2014 21:13:29 +0100, Lorenzo Dalrio wrote:

 In my hurry I have swapped Version and Release following exactly the
 guidelines you have linked. :-/

 Well, a package being tiny does not imply there's nothing to be reviewed.

 The top of the executable says

   __version__ = '1.2.0'

 which it displays somewhere in the tools Help system. The CHANGELOG file
 says Version 1.2.

 The script contains a shebang that can become problematic, unless
 it really works with both Python 2 and Python 3:

   #!/usr/bin/env python

 https://fedorahosted.org/fpc/ticket/327
 Older topic:
 http://fedoraproject.org/wiki/Script_Interpreters_%28draft%29
 https://www.redhat.com/archives/fedora-packaging/2009-July/msg00056.html
 --
 devel mailing list
 devel@lists.fedoraproject.org
 https://admin.fedoraproject.org/mailman/listinfo/devel
 Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Mozilla enabled ads in Firefox and they're active in Fedora

2014-11-20 Thread Petr Viktorin

On 11/19/2014 09:11 AM, Benjamin Kerensa wrote:

Hello Free Software Friends,


I want to encourage the Fedora Community to think carefully about making
a switch
to another browser as the default in Fedora. I would not get hung up on
these tiles
(Ads) too much and remember they are necessary in order for Mozilla to
continue
building Firefox, Thunderbird, Seamonkey, Firefox OS and supporting the
very literally
hundreds of movements and thousands of events it does each year.

But that all aside I hope you will weigh whether the alternatives will
provider your users
any better of an experience in terms of Stability, Performance, Privacy
or Trust.

I think it will be difficult to find an alternative that offers what
Firefox does to your
users and frankly I think you will have a fair amount of users that will
be upset that
you switched the default on them. Sure they can still install Firefox
but the fact is
Fedora users come to expect Firefox to be the default much like they
expect Gnome
to be the default. (Also remember there are very likely thousands of
Mozilla Contributors that use Fedora)


In other words: you have achieved have vendor lock-in.
Congratulations! Good for you. Not so good for me.


Whatever your decision have a good release cycle and keep on building that
awesome free software!


Free software is, and always has been, about users. If something does 
not benefit the users should be able to switch away – where something 
is not whole applications, but individual *features* of applications.


Compare, for example, to the ad-ridden, spy-heavy, vendor-locked-in 
Android ecosystem, where users can't turn off unwanted features. Most 
software there is written to benefit the *developers*, not the *users*. 
Sure, it is more profitable for them that way, and the terms of some of 
those apps are even acceptable. But the fact that this model is finding 
its way into free software is worrying at best.


I think the line we should not cross is: including features that don't 
benefit the user and may be considered harmful. If I opt-in to ads – if 
you politely ask, and I, with mutual respect and understanding, agree to 
help your cause – then it's perfectly fine. (See vim's Help kids in 
Uganda message.) If you just quietly make money off me, or distract and 
annoy me until I have paid, then I can't and will not respect you.


It's not about tracking per se – I'm fine with e.g. opt-in usage reports 
that feed into research for making a better browser – that benefits me 
(in a very indirect and miniscule way, but in the end the purpose is for 
the *user's* benefit).
Ads are a feature that only benefits the upstream and the companies that 
pay for the ads. From my (user's) perspective, there is no reason to 
have them on my system. There is no benefit to me from this feature. 
None at all. This is a major difference from Gnome search providers, 
which I personally don't like either, but I can see how they might be 
good for someone.


If I wanted software that works and is adequately funded, I'd use 
Chrome. If Mozilla slides into forcing ads on people, the difference 
between Chrome and Firefox becomes quantitative, not qualitative – 
Google does the same bad stuff, but worse.


Personally, I sadly no longer trust Mozilla to do what's best for me. 
(Please don't become the next Google. Yes, I'm aware Google makes lots 
of money and can easily fund development and thousands of events each 
year. That does not make them an example I think Mozilla should follow.)


If Fedora starts including, as soldiers in a Trojan horse of default 
software, upstreams' features that don't benefit me and may be 
considered harmful, then Fedora will lose my trust as well.



tl;dr: I think the line we should not cross is: including features that 
don't benefit the user and may be considered harmful.


--
Petr³

--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Mozilla enabled ads in Firefox and they're active in Fedora

2014-11-20 Thread Matthew Miller
On Thu, Nov 20, 2014 at 03:28:11PM +0100, Petr Viktorin wrote:
 tl;dr: I think the line we should not cross is: including features
 that don't benefit the user and may be considered harmful.

I don't think this is a very clear line. Should we drop all spreadsheet
applications?

http://www.velocityreviews.com/threads/spreadsheets-considered-harmful.717849/

-- 
Matthew Miller
mat...@fedoraproject.org
Fedora Project Leader
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Mozilla enabled ads in Firefox and they're active in Fedora

2014-11-20 Thread Petr Viktorin

On 11/20/2014 04:02 PM, Matthew Miller wrote:

On Thu, Nov 20, 2014 at 03:28:11PM +0100, Petr Viktorin wrote:

tl;dr: I think the line we should not cross is: including features
that don't benefit the user and may be considered harmful.


I don't think this is a very clear line. Should we drop all spreadsheet
applications?

http://www.velocityreviews.com/threads/spreadsheets-considered-harmful.717849/


Spreadsheet applications exist to benefit the user, so they don't cross 
this line.


(With a short-circuiting and¹, you won't even get to the may be 
considered harmful part in this case...)



--
Petr³

¹ http://en.wikipedia.org/wiki/Short-circuit_evaluation

--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Mozilla enabled ads in Firefox and they're active in Fedora

2014-11-20 Thread Martin Stransky

On 11/20/2014 03:28 PM, Petr Viktorin wrote:

It's not about tracking per se – I'm fine with e.g. opt-in usage reports
that feed into research for making a better browser – that benefits me
(in a very indirect and miniscule way, but in the end the purpose is for
the *user's* benefit).
Ads are a feature that only benefits the upstream and the companies that
pay for the ads. From my (user's) perspective, there is no reason to
have them on my system. There is no benefit to me from this feature.
None at all. This is a major difference from Gnome search providers,
which I personally don't like either, but I can see how they might be
good for someone.


From the user perspective Mozilla provides you a high-quality browser 
for free (free as a beer). But they have to pay engineers for the work.


There are some other options there. To have free (basic) and paid 
(extended) Firefox versions - Red Hat goes this way. Or direct donation 
from users like Wikipedia. Mozilla chose the Ads way and you may or may 
not accept it and you exactly know what's the (asked) price.


That's still much better than Chrome where the price (user tracking) is 
hidden and you can't disable it.


You can remove the Ads from Firefox by one click so no big deal here. 
The same case is using Addblock to block Ads on Web. But you're giving 
nothing back then.


Every user likes the best software for free (as a beer), but there isn't 
any magic wand which makes it up for you.


ma.

--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Mozilla enabled ads in Firefox and they're active in Fedora

2014-11-20 Thread Lukas Zapletal
 Being bombarded with questions when you just want to get to using
 something isn't the best user experience, and I think in general
 something we've been trying to reduce.

This doesn't need to be must-choice. A checkbox won't hurt, but I am not
UX expert. Having that said, this is not a valid point when I suggest
not to do the decision for the user.

 How would that be implemented? What would it apply to?

The firstboot script would drop a config value to the user home
directory (touch ~/.no-ads) and call some kind of script distributed in
a separate package that would re-configure all the programs to opt-out
according to this setting. The first one would be Firefox. I am not
aware of any other package in Fedora that have ads, but this way we
could have a policy how to deal with those. Each package could drop a
script that would do the work into let's say /etc/ads-opt-out.d/ or
similar.

But if you'd ask me to do the decision for the user, I'd definitely
respond with no ads.

-- 
Later,
 Lukas #lzap Zapletal
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Mozilla enabled ads in Firefox and they're active in Fedora

2014-11-20 Thread Petr Viktorin

On 11/20/2014 04:44 PM, Martin Stransky wrote:

On 11/20/2014 03:28 PM, Petr Viktorin wrote:

It's not about tracking per se – I'm fine with e.g. opt-in usage reports
that feed into research for making a better browser – that benefits me
(in a very indirect and miniscule way, but in the end the purpose is for
the *user's* benefit).
Ads are a feature that only benefits the upstream and the companies that
pay for the ads. From my (user's) perspective, there is no reason to
have them on my system. There is no benefit to me from this feature.
None at all. This is a major difference from Gnome search providers,
which I personally don't like either, but I can see how they might be
good for someone.


 From the user perspective Mozilla provides you a high-quality browser
for free (free as a beer). But they have to pay engineers for the work.


Every piece of Fedora is like that, and yet I don't see any other 
software doing useless-for-me opt-out tracking.
(Also, who am I paying? All authors of Firefox, or only the Mozilla 
employees?)



There are some other options there. To have free (basic) and paid
(extended) Firefox versions - Red Hat goes this way. Or direct donation
from users like Wikipedia. Mozilla chose the Ads way and you may or may
not accept it and you exactly know what's the (asked) price.


The question is, will *Fedora* accept it on my behalf?  Will Fedora no 
longer shield me from the ways of the Android developer?



That's still much better than Chrome where the price (user tracking) is
hidden and you can't disable it.


Well, you can – the Chromium source is out there. The only catch is that 
Chromium is not built primarily for users, but for the developers' benefit.



You can remove the Ads from Firefox by one click so no big deal here.
The same case is using Addblock to block Ads on Web. But you're giving
nothing back then.


Is there now an *obligation* to give back? Because there never has been 
such a thing.


I personally give quite a lot back, not to Mozilla specifically but to 
open-source community as a whole – but it's not because I have an 
obligation to do it nor because I'm forced to do it.
The recend trend of open source guiding me to become part of some 
monetization scheme saddens me.



Every user likes the best software for free (as a beer), but there isn't
any magic wand which makes it up for you.


The process which gave us Firefox so far seemed quite fine. I'm sure it 
was no easy wand-waving, but so far it has been for the user first.
Sure, Mozilla did not organize as many events or hire so many employees 
or get to dabble in the phone business. But the result is, so far, great.


I want my software to work for *me*; the free as in beer part is secondary.

--
Petr³

--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Mozilla enabled ads in Firefox and they're active in Fedora

2014-11-20 Thread Matěj Cepl
On 2014-11-20, 14:28 GMT, Petr Viktorin wrote:
 Ads are a feature that only benefits the upstream and the companies that 
 pay for the ads. From my (user's) perspective, there is no reason to 
 have them on my system. There is no benefit to me from this feature. 

Sorry, I have to ask here the obvious question: how much did you 
pay for Firefox? How much do you think it costs to develop 
Firefox and to keep up with the Google’s endless pockets? Do you 
have some better solution for Mozilla to resolve this 
difference? I am quite sure your genial idea making couple of 
hundred million USD per year for them without any ads would be 
very welcome. Unfortunately, that communism thing somehow didn’t 
work ... it would be lovely if it did.

Best,

Matěj

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

[perl-ExtUtils-Manifest] 1.69 bump

2014-11-20 Thread Petr Pisar
commit e449928a2af8d594253388145edee1367d60e5ad
Author: Petr Písař ppi...@redhat.com
Date:   Thu Nov 20 17:59:20 2014 +0100

1.69 bump

 .gitignore  |1 +
 perl-ExtUtils-Manifest.spec |   12 ++--
 sources |2 +-
 3 files changed, 8 insertions(+), 7 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 82eadf6..417669a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,3 +5,4 @@
 /ExtUtils-Manifest-1.65.tar.gz
 /ExtUtils-Manifest-1.66.tar.gz
 /ExtUtils-Manifest-1.68.tar.gz
+/ExtUtils-Manifest-1.69.tar.gz
diff --git a/perl-ExtUtils-Manifest.spec b/perl-ExtUtils-Manifest.spec
index 80f34a3..1b0bb2b 100644
--- a/perl-ExtUtils-Manifest.spec
+++ b/perl-ExtUtils-Manifest.spec
@@ -1,11 +1,11 @@
 Name:   perl-ExtUtils-Manifest
-Version:1.68
+Version:1.69
 Release:1%{?dist}
 Summary:Utilities to write and check a MANIFEST file
 License:GPL+ or Artistic
 Group:  Development/Libraries
 URL:http://search.cpan.org/dist/ExtUtils-Manifest/
-Source0:
http://www.cpan.org/authors/id/B/BI/BINGOS/ExtUtils-Manifest-%{version}.tar.gz
+Source0:
http://www.cpan.org/authors/id/E/ET/ETHER/ExtUtils-Manifest-%{version}.tar.gz
 BuildArch:  noarch
 BuildRequires:  perl
 BuildRequires:  perl(ExtUtils::MakeMaker)
@@ -26,12 +26,9 @@ BuildRequires:  perl(File::Spec) = 0.8
 BuildRequires:  perl(Cwd)
 BuildRequires:  perl(Data::Dumper)
 BuildRequires:  perl(Test::More)
+# CPAN::Meta not needed
 Requires:   perl(:MODULE_COMPAT_%(eval `perl -V:version`; echo $version))
 Requires:   perl(File::Path)
-Requires:   perl(File::Spec) = 0.8
-
-# Remove underspecified dependencies
-%global __requires_exclude 
%{?__requires_exclude:%__requires_exclude|}^perl\\(File::Spec\\)\\s*$
 
 %description
 %{summary}.
@@ -57,6 +54,9 @@ make test
 %{_mandir}/man3/*
 
 %changelog
+* Thu Nov 20 2014 Petr Pisar ppi...@redhat.com - 1.69-1
+- 1.69 bump
+
 * Wed Sep 17 2014 Petr Pisar ppi...@redhat.com - 1.68-1
 - 1.68 bump
 
diff --git a/sources b/sources
index 19fde82..a8c2857 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-0284039fc5aa81bf2d77df6f3a4bf95c  ExtUtils-Manifest-1.68.tar.gz
+cb001f834cc0f0e992d8c780eace6f2f  ExtUtils-Manifest-1.69.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-de...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

Re: Mozilla enabled ads in Firefox and they're active in Fedora

2014-11-20 Thread Gerald B. Cox
On Thu, Nov 20, 2014 at 7:44 AM, Martin Stransky stran...@redhat.com
wrote:

 That's still much better than Chrome where the price (user tracking) is
 hidden and you can't disable it.


Well, Chrome isn't an option for Fedora due to proprietary portions...
however, there is the Chromium project and there is an effort ongoing to
get it included in the Fedora repositories.

I don't think Mozilla has done anything inherently evil by including these
ads in Firefox.  It was done in a very unobtrusive way and they made it
ridiculously easy to disable.

One other point about Google, Chrome and the Chromium project.  Many people
have alluded to the evil empire of Google and it's nefarious tracking and
hording of user information.  It isn't nefarious if you explain to people
exactly what you are doing.  Google has gone to extreme lengths to make
it's data collection policies as transparent as possible.  You can learn
about what Chrome collects and how by reading the privacy policy which is
easily found.  If you take the time to read it, you'll find there is
nothing sinister at all going on.  What is going on however is the fact
that Google competitors are spreading FUD much like Microsoft had done
about Linux.
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Abandoning boinc-client

2014-11-20 Thread Mattia Verga

Hi all,
despite my efforts and many wasted hours I'm unable to build recent 
versions of boinc-client (I'm stuck with errors about gtk-2.0 and 
gtk-3.0 co-existence).
I'm only a co-maintainer, but the primary maintainer has abandoned the 
package to its fate long time ago (but he never orphaned it) and there 
are a lot of bugs that he never cared about. So, despite the fact that 
the package will not be orphaned, it will be de facto when I will 
abandon it.


It would be nice if someone more skilled can take some care to it. Apart 
from problems due to gtk-3.0, I think the way boinc-client works should 
be rethought: the daemon mode leads to many problems accessing GPU 
computing capabilities and detection of user activity in X. In my 
opinion boinc should be started by user and not by a system process and 
it must run project files into user home directory to allow more users 
on the same workstation.


Today I've made the last changes to clean up some stuff. I hope someone 
other has interest to take care of it.

Thank you

Mattia
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Orphaned Packages in branched (2014-11-20)

2014-11-20 Thread opensource
The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life

Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one. Please adopt the affected package or
retire your depending package to avoid broken dependencies, otherwise your
package will be retired when the affected package gets retired.

Package(co)maintainersStatus Change 
===
clc-intercal  orphan, iarnell 1 weeks ago   
cone  orphan, steve   1 weeks ago   
create-tx-configuration   orphan, sparks  5 weeks ago   
dbus-toolsorphan, miminar 2 weeks ago   
fldigi-docorphan, dp670 weeks ago   
gimp-dbp  orphan, paller  0 weeks ago   
gimp-elsamuko orphan, paller  0 weeks ago   
gimp-high-pass-filter orphan, paller  0 weeks ago   
mojomojo  orphan, iarnell, perl-sig   1 weeks ago   
nmon  orphan, paller  0 weeks ago   

The following packages require above mentioned packages:
Affected (co)maintainers
dp67: fldigi-doc
iarnell: mojomojo, clc-intercal
miminar: dbus-tools
paller: gimp-high-pass-filter, gimp-elsamuko, nmon, gimp-dbp
perl-sig: mojomojo
sparks: create-tx-configuration
steve: cone

Orphans (10): clc-intercal cone create-tx-configuration dbus-tools
fldigi-doc gimp-dbp gimp-elsamuko gimp-high-pass-filter mojomojo
nmon


Orphans (dependend on) (0):


Orphans for at least 6 weeks (dependend on) (0):


Orphans (not depended on) (10): clc-intercal cone
create-tx-configuration dbus-tools fldigi-doc gimp-dbp
gimp-elsamuko gimp-high-pass-filter mojomojo nmon


Orphans for at least 6 weeks (not dependend on) (0):

-- 
The script creating this output is run and developed by Fedora
Release Engineering. Please report issues at its trac instance:
https://fedorahosted.org/rel-eng/
The sources of this script can be found at:
https://git.fedorahosted.org/cgit/releng/tree/scripts/find_unblocked_orphans.py
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Orphaned Packages in branched (2014-11-20)

2014-11-20 Thread Pete Travis
On Nov 20, 2014 2:25 PM, opensou...@till.name wrote:

 The following packages are orphaned and will be retired when they
 are orphaned for six weeks, unless someone adopts them. If you know for
sure
 that the package should be retired, please do so now with a proper reason:
 https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life

 Note: If you received this mail directly you (co)maintain one of the
affected
 packages or a package that depends on one. Please adopt the affected
package or
 retire your depending package to avoid broken dependencies, otherwise your
 package will be retired when the affected package gets retired.

 Package(co)maintainersStatus Change
 ===
...
 create-tx-configuration   orphan, sparks  5 weeks ago
...

Taking this one; I used it just recently and don't want to be surprised if
I need it again.

--Pete
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Abotu setting 'PermitRootLogin=no' in sshd_config

2014-11-20 Thread P J P
Hello,

Sshd(8) daemon by default allows remote users to login as root.

  1. Is that really necessary?
  2. Lot of users use their systems as root, without even creating a non-root 
user.
 Such practices need to be discouraged, not allowing remote root login 
could be
 useful in that.

Does it make sense to disable remote root login by default? If so, do we need 
to just report it to the maintainer or it would be treated as a feature?

---
Regards
   -Prasad
http://feedmug.com
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Abotu setting 'PermitRootLogin=no' in sshd_config

2014-11-20 Thread Aditya Patawari
On Fri, Nov 21, 2014 at 12:41 PM, P J P pj.pan...@yahoo.co.in wrote:
 Hello,

 Sshd(8) daemon by default allows remote users to login as root.

   1. Is that really necessary?
   2. Lot of users use their systems as root, without even creating a non-root 
 user.
  Such practices need to be discouraged, not allowing remote root login 
 could be
  useful in that.

 Does it make sense to disable remote root login by default? If so, do we need 
 to just report it to the maintainer or it would be treated as a feature?
Being a Fedora user on my personal machine as well as maintainer of a
few Fedora machines in production environment, I would gladly welcome
this. Many people do disable root login anyway. Having it default
would be a positive step from security stand point.
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Abotu setting 'PermitRootLogin=no' in sshd_config

2014-11-20 Thread Jan Kratochvil
On Fri, 21 Nov 2014 08:11:27 +0100, P J P wrote:
 Does it make sense to disable remote root login by default? If so, do we
 need to just report it to the maintainer or it would be treated as
 a feature?

Almost all of my Fedora installations are test VMs where any security is
irrelevant.

Just my use case, not saying if it is good or bad in general.


Jan
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Abotu setting 'PermitRootLogin=no' in sshd_config

2014-11-20 Thread Christian Rose
2014-11-21 8:11 GMT+01:00 P J P pj.pan...@yahoo.co.in:

 Sshd(8) daemon by default allows remote users to login as root.

   1. Is that really necessary?
   2. Lot of users use their systems as root, without even creating a
 non-root user.
  Such practices need to be discouraged, not allowing remote root login
 could be
  useful in that.

 Does it make sense to disable remote root login by default? If so, do we
 need to just report it to the maintainer or it would be treated as a
 feature?


IIRC, the main reason for PermitRootLogin being enabled by default was to
prevent a remote server from becoming inaccessible in cases such as a
network mounted /home suddenly becoming unavailable.


Regards
Christian
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Abotu setting 'PermitRootLogin=no' in sshd_config

2014-11-20 Thread Florian Weimer

On 11/21/2014 08:34 AM, Jan Kratochvil wrote:

On Fri, 21 Nov 2014 08:11:27 +0100, P J P wrote:

Does it make sense to disable remote root login by default? If so, do we
need to just report it to the maintainer or it would be treated as
a feature?


Almost all of my Fedora installations are test VMs where any security is
irrelevant.

Just my use case, not saying if it is good or bad in general.


I think it's a valid use case, but rather poorly supported at the 
moment.  For example, there should be completely seemless SSH login from 
virt-manager for user-manageable  virtual machines (both as root and the 
user).


My point is that once we address this (most likely through some 
configuration generation during VM setup), we can also switch 
PermitRootLogin on.


--
Florian Weimer / Red Hat Product Security
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Accessing/Logging into the pkgdb

2014-11-20 Thread Ralf Corsepius

Hi,

for unknown reasons, I can't login to the pkgdb anymore.

What am I supposed to do? There is no request reset password button 
nor other helpful information available on the login screen.


Ralf
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

[Bug 1136723] perl-Workflow-1.41-2.fc22 FTBFS randomly: 'One observation sent on workflow fetch to two observers' t/workflow.t test fails

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1136723

Emmanuel Seyman emman...@seyman.fr changed:

   What|Removed |Added

 Status|NEW |CLOSED
 Resolution|--- |UPSTREAM
Last Closed||2014-11-20 04:41:37



--- Comment #2 from Emmanuel Seyman emman...@seyman.fr ---
Given that this issue is an upstream bug more than it is a packaging issue,
I'll be keeping track of it in CPAN's RT. Accordingly, I'm closing this bug
with the resolution of UPSTREAM.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=AwHb5VZWT9a=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1105023] perl-IO-Event-0.813-1.fc21 FTBFS: t/forked2.t fails under heavy load

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1105023

Emmanuel Seyman emman...@seyman.fr changed:

   What|Removed |Added

 Status|NEW |CLOSED
 Resolution|--- |UPSTREAM
Last Closed||2014-11-20 04:41:37



--- Comment #1 from Emmanuel Seyman emman...@seyman.fr ---
Given that this issue is an upstream bug more than it is a packaging issue,
I'll be keeping track of it in CPAN's RT. Accordingly, I'm closing this bug
with the resolution of UPSTREAM.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=BVpvIWoMo0a=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 808197] FTBFS: big endian bug in self checks

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=808197

Emmanuel Seyman emman...@seyman.fr changed:

   What|Removed |Added

 Status|NEW |CLOSED
 Resolution|--- |UPSTREAM
Last Closed||2014-11-20 04:41:35



--- Comment #6 from Emmanuel Seyman emman...@seyman.fr ---
Given that this issue is an upstream bug more than it is a packaging issue,
I'll be keeping track of it in CPAN's RT. Accordingly, I'm closing this bug
with the resolution of UPSTREAM.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=JYUthlzWA8a=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1165144] perl-MooseX-Declare-0.40-1.fc22 requires perl(MooseX::Declare::StackItem) which nobody provides

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1165144

Paul Howarth p...@city-fan.org changed:

   What|Removed |Added

 CC||p...@city-fan.org



--- Comment #2 from Paul Howarth p...@city-fan.org ---
If upstream considers these packages to be private, perhaps it might be better
to hide the requires in the perl-MooseX-Declare package rather than
explicitly provide them?

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=caGNgT4byVa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1165144] perl-MooseX-Declare-0.40-1.fc22 requires perl(MooseX::Declare::StackItem) which nobody provides

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1165144



--- Comment #3 from Emmanuel Seyman emman...@seyman.fr ---
The commit in question is:
https://github.com/moose/MooseX-Declare/commit/291b5892e63a682af013c7e9e30ab8a3ba143e68

The reason given doesn't strike as sufficient to hide these packages in the rpm
metadata.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=BGNmliXeMXa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1165144] perl-MooseX-Declare-0.40-1.fc22 requires perl(MooseX::Declare::StackItem) which nobody provides

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1165144



--- Comment #4 from Paul Howarth p...@city-fan.org ---
Fair enough.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=S57pPg8uAFa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166041] New: CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041

Bug ID: 1166041
   Summary: CVE-2010-5312 jquery-ui: XSS vulnerability in
jQuery.ui.dialog title option
   Product: Security Response
 Component: vulnerability
  Keywords: Security
  Severity: medium
  Priority: medium
  Assignee: security-response-t...@redhat.com
  Reporter: vkaig...@redhat.com
CC: aba...@redhat.com, aboko...@redhat.com,
and...@topdog.za.net, andrewniema...@gmail.com,
aort...@redhat.com, apatt...@redhat.com,
ape...@redhat.com, athma...@gmail.com,
ayo...@redhat.com, bazanlui...@gmail.com,
bkab...@redhat.com, bkear...@redhat.com,
blean...@redhat.com, brett.le...@gmail.com,
br...@wolff.to, cas...@casperlefantom.net,
cbill...@redhat.com, ccole...@redhat.com,
chat-to...@raveit.de, c...@plauener.de,
chr...@redhat.com, comzer...@fedoraproject.org,
cpell...@redhat.com, crobe...@redhat.com,
dajoh...@redhat.com, dal...@redhat.com, d...@danny.cz,
davi...@ultracar.co.uk, dclar...@redhat.com,
dev...@gunduz.org, dmcph...@redhat.com,
dridi.boukelmo...@gmail.com, echevemas...@gmail.com,
emman...@seyman.fr, erl...@lists.fedoraproject.org,
extras-orp...@fedoraproject.org, fa...@locati.cc,
f...@fcami.net, fed...@famillecollet.com,
frankl...@gmail.com, gbai...@lxpro.com,
gkot...@redhat.com, gmccu...@redhat.com,
herr...@owlriver.com, hho...@redhat.com,
hobbes1...@gmail.com, h...@trarbentley.net,
i...@cicku.me, i...@stingr.net, i...@ianweller.org,
iarn...@gmail.com, ipa-ma...@redhat.com,
iva...@gmail.com, jamieli...@fedoraproject.org,
jaswin...@kernel.org, jdeti...@redhat.com,
jdor...@redhat.com, jha...@redhat.com,
jia...@redhat.com, j...@sngx.net, jk...@redhat.com,
jml...@redhat.com, joc...@herr-schmitt.de,
joelsm...@redhat.com, joka...@fedoraproject.org,
joker...@redhat.com, jonathanstef...@gmail.com,
jor...@redhat.com, jpra...@redhat.com,
jrafa...@redhat.com, jsmith.fed...@gmail.com,
jstri...@redhat.com, jvl...@redhat.com,
karlthe...@gmail.com, katello-b...@redhat.com,
ke...@scrye.com, kseifr...@redhat.com,
ktdre...@ktdreyer.com, kwiz...@gmail.com,
leigh123li...@googlemail.com, lemen...@gmail.com,
l...@redhat.com, limburg...@gmail.com,
lmac...@redhat.com, lme...@redhat.com,
loganje...@gmail.com, lp...@redhat.com, l...@mit.edu,
mar...@redhat.com, m...@cs.wisc.edu,
mbar...@redhat.com, mbu...@redhat.com,
mc...@redhat.com, mcla...@redhat.com,
methe...@gmail.com, mhron...@redhat.com,
mic...@michel-slm.name, m...@cchtml.com,
miketwebs...@gmail.com, mko...@redhat.com,
mmasl...@redhat.com, mmcco...@redhat.com,
mmcc...@redhat.com, mmcgr...@redhat.com,
mru...@redhat.com, nelso...@red-tux.net,
nonamed...@gmail.com, nus...@fedoraproject.org,
obare...@redhat.com, oli...@linux-kernel.at,
or...@cora.nwra.com,
paulo.cesar.pereira.de.andr...@gmail.com,
pa...@zhukoff.net, perl-devel@lists.fedoraproject.org,
peter.bo...@gmail.com, phalli...@excelsiorsystems.net,
pmy...@redhat.com, prais...@redhat.com,
pro...@gmail.com, puiterw...@redhat.com,
pvikt...@redhat.com, pvobo...@redhat.com,
python-ma...@redhat.com, rb...@redhat.com,
rbry...@redhat.com, rcrit...@redhat.com,
rel...@redhat.com, rhos-ma...@redhat.com,
rnova...@redhat.com, robinlee.s...@gmail.com,
satya.komarag...@gmail.com, scle...@redhat.com,
sc...@foolishpride.org, sdod...@sdodson.com,
shawn.iwin...@gmail.com, smparr...@gmail.com,
sso...@redhat.com, sticks...@gmail.com, s...@lank.es,
tadej.ja...@tadej.hicsalta.si,
tchollingswo...@gmail.com, thomas.mosc...@gmx.de,
tho...@redhat.com, tim4...@gmail.com, t...@redhat.com,
 

[Bug 1166041] CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041

Vasyl Kaigorodov vkaig...@redhat.com changed:

   What|Removed |Added

 Blocks||1162456



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=NdS1qRuHyma=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

Broken dependencies: perl-MooseX-Declare

2014-11-20 Thread buildsys


perl-MooseX-Declare has broken dependencies in the rawhide tree:
On x86_64:
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::Syntax::MethodDeclaration::Parameterized)
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::StackItem)
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::Context::WithOptions)
On i386:
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::Syntax::MethodDeclaration::Parameterized)
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::StackItem)
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::Context::WithOptions)
On armhfp:
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::Syntax::MethodDeclaration::Parameterized)
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::StackItem)
perl-MooseX-Declare-0.40-1.fc22.noarch requires 
perl(MooseX::Declare::Context::WithOptions)
Please resolve this as soon as possible.


--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1062757] Review Request: glite-lb-logger-msg - Plugin for sending LB notifications to messaging infrastructure

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1062757



--- Comment #17 from Fedora Update System upda...@fedoraproject.org ---
glite-lb-logger-msg-1.2.13-2.el6 has been pushed to the Fedora EPEL 6 stable
repository.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=TWCOCWWtmMa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

File Devel-Pragma-0.60.tar.gz uploaded to lookaside cache by psabata

2014-11-20 Thread Petr Šabata
A file has been added to the lookaside cache for perl-Devel-Pragma:

495b5b3a230a9894940955edec252cc0  Devel-Pragma-0.60.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[perl-Devel-Pragma] 0.60 bump

2014-11-20 Thread Petr Šabata
commit ccb3f0fc8f57bd057cfa0f6c0be83778e61dbff1
Author: Petr Šabata con...@redhat.com
Date:   Thu Nov 20 11:55:41 2014 +0100

0.60 bump

 .gitignore |1 +
 perl-Devel-Pragma.spec |   41 +
 sources|2 +-
 3 files changed, 31 insertions(+), 13 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 6c5ffc1..35bb921 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 /Devel-Pragma-0.54.tar.gz
+/Devel-Pragma-0.60.tar.gz
diff --git a/perl-Devel-Pragma.spec b/perl-Devel-Pragma.spec
index 82dbc8d..7858926 100644
--- a/perl-Devel-Pragma.spec
+++ b/perl-Devel-Pragma.spec
@@ -1,23 +1,41 @@
 Name:   perl-Devel-Pragma
-Version:0.54
-Release:9%{?dist}
+Version:0.60
+Release:1%{?dist}
 Summary:Helper functions for developers of lexical pragmas
 License:GPL+ or Artistic
 Group:  Development/Libraries
 URL:http://search.cpan.org/dist/Devel-Pragma/
 Source0:
http://www.cpan.org/authors/id/C/CH/CHOCOLATE/Devel-Pragma-%{version}.tar.gz
-BuildRequires:  perl(B::Hooks::EndOfScope) = 0.09
-BuildRequires:  perl(B::Hooks::OP::Annotation) = 0.43
-BuildRequires:  perl(B::Hooks::OP::Check) = 0.18
+# Build
+BuildRequires:  perl
+BuildRequires:  perl(Config)
 BuildRequires:  perl(ExtUtils::Depends) = 0.302
 BuildRequires:  perl(ExtUtils::MakeMaker)
+BuildRequires:  perl(strict)
+BuildRequires:  perl(warnings)
+# Runtime
+BuildRequires:  perl(B::Hooks::OP::Annotation) = 0.44
+BuildRequires:  perl(B::Hooks::OP::Check) = 0.19
+BuildRequires:  perl(base)
+BuildRequires:  perl(Carp)
+BuildRequires:  perl(Exporter)
+BuildRequires:  perl(Lexical::SealRequireHints) = 0.007
+BuildRequires:  perl(Scalar::Util)
+BuildRequires:  perl(XSLoader)
+# Tests only
 BuildRequires:  perl(File::Spec)
+BuildRequires:  perl(lib)
 BuildRequires:  perl(Test::More)
-BuildRequires:  perl(Test::Pod)
 BuildRequires:  perl(vars)
-Requires:   perl(:MODULE_COMPAT_%(eval `%{__perl} -V:version`; echo 
$version))
+Requires:   perl(:MODULE_COMPAT_%(eval $(perl -V:version); echo 
$version))
+Requires:   perl(B::Hooks::OP::Annotation) = 0.44
+Requires:   perl(B::Hooks::OP::Check) = 0.19
+Requires:   perl(Lexical::SealRequireHints) = 0.007
 
 %{?perl_default_filter}
+%global __requires_exclude 
%{?__requires_exclude|%__requires_exclude|}^perl\\(B::Hooks::OP::Annotation\\)$
+%global __requires_exclude 
%{?__requires_exclude|%__requires_exclude|}^perl\\(B::Hooks::OP::Check\\)$
+%global __requires_exclude 
%{?__requires_exclude|%__requires_exclude|}^perl\\(Lexical::SealRequireHints\\)$
 
 %description
 This module provides helper functions for developers of lexical pragmas.
@@ -29,15 +47,11 @@ have improved support.
 %setup -q -n Devel-Pragma-%{version}
 
 %build
-%{__perl} Makefile.PL INSTALLDIRS=vendor OPTIMIZE=%{optflags} --skipdeps
+perl Makefile.PL INSTALLDIRS=vendor OPTIMIZE=%{optflags} NO_PACKLIST=1
 make %{?_smp_mflags}
 
 %install
 make pure_install DESTDIR=%{buildroot}
-
-find %{buildroot} -type f -name .packlist -exec rm -f {} \;
-find %{buildroot} -type f -name '*.bs' -size 0 -exec rm -f {} \;
-
 %{_fixperms} %{buildroot}/*
 
 %check
@@ -50,6 +64,9 @@ make test
 %{_mandir}/man3/*
 
 %changelog
+* Thu Nov 20 2014 Petr Šabata con...@redhat.com - 0.60-1
+- 0.60 bump
+
 * Fri Aug 29 2014 Jitka Plesnikova jples...@redhat.com - 0.54-9
 - Perl 5.20 rebuild
 
diff --git a/sources b/sources
index f4e75f4..3ce1ba7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-6f68dd87e2433f8640dea58be3e3e97d  Devel-Pragma-0.54.tar.gz
+495b5b3a230a9894940955edec252cc0  Devel-Pragma-0.60.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1163226] perl-Devel-Pragma-0.60 is available

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1163226

Petr Šabata psab...@redhat.com changed:

   What|Removed |Added

 Status|ASSIGNED|CLOSED
   Fixed In Version||perl-Devel-Pragma-0.60-1.fc
   ||22
 Resolution|--- |RAWHIDE
Last Closed||2014-11-20 05:56:31



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=7JrccssJ4ba=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166064] New: CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166064

Bug ID: 1166064
   Summary: CVE-2012-6662 jquery-ui: XSS vulnerability in default
content in Tooltip widget
   Product: Security Response
 Component: vulnerability
  Keywords: Security
  Severity: medium
  Priority: medium
  Assignee: security-response-t...@redhat.com
  Reporter: vkaig...@redhat.com
CC: aba...@redhat.com, aboko...@redhat.com,
and...@topdog.za.net, andrewniema...@gmail.com,
aort...@redhat.com, apatt...@redhat.com,
ape...@redhat.com, athma...@gmail.com,
ayo...@redhat.com, bazanlui...@gmail.com,
bkab...@redhat.com, bkear...@redhat.com,
blean...@redhat.com, brett.le...@gmail.com,
br...@wolff.to, cas...@casperlefantom.net,
cbill...@redhat.com, ccole...@redhat.com,
chat-to...@raveit.de, c...@plauener.de,
chr...@redhat.com, comzer...@fedoraproject.org,
cpell...@redhat.com, crobe...@redhat.com,
dajoh...@redhat.com, dal...@redhat.com, d...@danny.cz,
davi...@ultracar.co.uk, dclar...@redhat.com,
dev...@gunduz.org, dmcph...@redhat.com,
dridi.boukelmo...@gmail.com, echevemas...@gmail.com,
emman...@seyman.fr, erl...@lists.fedoraproject.org,
extras-orp...@fedoraproject.org, fa...@locati.cc,
f...@fcami.net, fed...@famillecollet.com,
frankl...@gmail.com, gbai...@lxpro.com,
gkot...@redhat.com, gmccu...@redhat.com,
herr...@owlriver.com, hho...@redhat.com,
hobbes1...@gmail.com, h...@trarbentley.net,
i...@cicku.me, i...@stingr.net, i...@ianweller.org,
iarn...@gmail.com, ipa-ma...@redhat.com,
iva...@gmail.com, jamieli...@fedoraproject.org,
jaswin...@kernel.org, jdeti...@redhat.com,
jdor...@redhat.com, jha...@redhat.com,
jia...@redhat.com, j...@sngx.net, jk...@redhat.com,
jml...@redhat.com, joc...@herr-schmitt.de,
joelsm...@redhat.com, joka...@fedoraproject.org,
joker...@redhat.com, jonathanstef...@gmail.com,
jor...@redhat.com, jpra...@redhat.com,
jrafa...@redhat.com, jsmith.fed...@gmail.com,
jstri...@redhat.com, jvl...@redhat.com,
karlthe...@gmail.com, katello-b...@redhat.com,
ke...@scrye.com, kseifr...@redhat.com,
ktdre...@ktdreyer.com, kwiz...@gmail.com,
leigh123li...@googlemail.com, lemen...@gmail.com,
l...@redhat.com, limburg...@gmail.com,
lmac...@redhat.com, lme...@redhat.com,
loganje...@gmail.com, lp...@redhat.com, l...@mit.edu,
mar...@redhat.com, m...@cs.wisc.edu,
mbar...@redhat.com, mbu...@redhat.com,
mc...@redhat.com, mcla...@redhat.com,
methe...@gmail.com, mhron...@redhat.com,
mic...@michel-slm.name, m...@cchtml.com,
miketwebs...@gmail.com, mko...@redhat.com,
mmasl...@redhat.com, mmcco...@redhat.com,
mmcc...@redhat.com, mmcgr...@redhat.com,
mru...@redhat.com, nelso...@red-tux.net,
nonamed...@gmail.com, nus...@fedoraproject.org,
obare...@redhat.com, oli...@linux-kernel.at,
or...@cora.nwra.com,
paulo.cesar.pereira.de.andr...@gmail.com,
pa...@zhukoff.net, perl-devel@lists.fedoraproject.org,
peter.bo...@gmail.com, phalli...@excelsiorsystems.net,
pmy...@redhat.com, prais...@redhat.com,
pro...@gmail.com, puiterw...@redhat.com,
pvikt...@redhat.com, pvobo...@redhat.com,
python-ma...@redhat.com, rb...@redhat.com,
rbry...@redhat.com, rcrit...@redhat.com,
rel...@redhat.com, rhos-ma...@redhat.com,
rnova...@redhat.com, robinlee.s...@gmail.com,
satya.komarag...@gmail.com, scle...@redhat.com,
sc...@foolishpride.org, sdod...@sdodson.com,
shawn.iwin...@gmail.com, smparr...@gmail.com,
sso...@redhat.com, sticks...@gmail.com, s...@lank.es,
tadej.ja...@tadej.hicsalta.si,
tchollingswo...@gmail.com, thomas.mosc...@gmx.de,
tho...@redhat.com, tim4...@gmail.com, t...@redhat.com,
 

[Bug 1166064] CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166064

Vasyl Kaigorodov vkaig...@redhat.com changed:

   What|Removed |Added

 Blocks||1162456



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=gsEIjUUhdWa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[perl-Devel-Pragma] Specify the minimum required version of EU::MM

2014-11-20 Thread Petr Šabata
commit a19b1a98272c3672130944b6e467ea50256ca4fb
Author: Petr Šabata con...@redhat.com
Date:   Thu Nov 20 12:15:24 2014 +0100

Specify the minimum required version of EU::MM

 perl-Devel-Pragma.spec |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/perl-Devel-Pragma.spec b/perl-Devel-Pragma.spec
index 7858926..b3a4981 100644
--- a/perl-Devel-Pragma.spec
+++ b/perl-Devel-Pragma.spec
@@ -10,7 +10,7 @@ Source0:
http://www.cpan.org/authors/id/C/CH/CHOCOLATE/Devel-Pragma-%{ver
 BuildRequires:  perl
 BuildRequires:  perl(Config)
 BuildRequires:  perl(ExtUtils::Depends) = 0.302
-BuildRequires:  perl(ExtUtils::MakeMaker)
+BuildRequires:  perl(ExtUtils::MakeMaker) = 6.76
 BuildRequires:  perl(strict)
 BuildRequires:  perl(warnings)
 # Runtime
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

File CPAN-Meta-Requirements-2.130.tar.gz uploaded to lookaside cache by pghmcfc

2014-11-20 Thread Paul Howarth
A file has been added to the lookaside cache for perl-CPAN-Meta-Requirements:

c25c8fb8b0e8ed0d6c41aaa9f4080683  CPAN-Meta-Requirements-2.130.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[perl-CPAN-Meta-Requirements] Update to 2.130

2014-11-20 Thread Paul Howarth
commit b3971df42a636a35279313099f18042b6bc963ac
Author: Paul Howarth p...@city-fan.org
Date:   Thu Nov 20 11:33:27 2014 +

Update to 2.130

- New upstream release 2.130
  - from_string_hash can take optional constructor arguments
  - bad_version_hook callback gets module name as well as version string
  - undefined/empty versions given to from_string_hash or
add_string_requirement now carp and are coerced to 0 instead of being
fatal; this is more consistent with how the other requirement functions
work
- Provide six-digit version in a more robust way

 perl-CPAN-Meta-Requirements.spec |   32 +++-
 sources  |2 +-
 2 files changed, 24 insertions(+), 10 deletions(-)
---
diff --git a/perl-CPAN-Meta-Requirements.spec b/perl-CPAN-Meta-Requirements.spec
index d8799f0..b77e51b 100644
--- a/perl-CPAN-Meta-Requirements.spec
+++ b/perl-CPAN-Meta-Requirements.spec
@@ -1,5 +1,5 @@
 Name:   perl-CPAN-Meta-Requirements
-Version:2.129
+Version:2.130
 Release:1%{?dist}
 Summary:Set of version requirements for a CPAN dist
 License:GPL+ or Artistic
@@ -11,7 +11,7 @@ BuildArch:  noarch
 BuildRequires:  perl
 BuildRequires:  perl(ExtUtils::MakeMaker) = 6.17
 # Module
-# B not used at tests
+BuildRequires:  perl(B)
 BuildRequires:  perl(Carp)
 BuildRequires:  perl(Scalar::Util)
 BuildRequires:  perl(strict)
@@ -19,10 +19,10 @@ BuildRequires:  perl(version) = 0.88
 BuildRequires:  perl(warnings)
 # Test
 BuildRequires:  perl(File::Spec)
-BuildRequires:  perl(Scalar::Util)
 BuildRequires:  perl(Test::More)
 # Extra Tests (not run when bootstrapping due to circular build dependencies)
 %if !%{defined perl_bootstrap}  ! ( 0%{?rhel} )
+BuildRequires:  perl(CPAN::Meta) = 2.120900
 BuildRequires:  perl(English)
 BuildRequires:  perl(File::Temp)
 BuildRequires:  perl(IO::Handle)
@@ -43,15 +43,19 @@ BuildRequires:  perl(Test::Version) = 0.04
 # Runtime
 Requires:   perl(:MODULE_COMPAT_%(eval `perl -V:version`; echo $version))
 Requires:   perl(B)
-Requires:   perl(version)
-
-%{?perl_default_filter}
+Requires:   perl(version) = 0.88
 
 # CPAN-Meta-Requirements was split from CPAN-Meta
 Conflicts:  perl-CPAN-Meta  2.120921
-# and used to have six decimal places
-%global __provides_exclude 
%{?__provides_exclude:%__provides_exclude|}perl\\(CPAN::Meta::Requirements\\)
-Provides:   perl(CPAN::Meta::Requirements) = %{version}000
+
+# Had a six-digit version in a previous life
+%global six_digit_version %(echo %{version} | perl -p -e 
's/(.*)/sprintf(%.6f, $1)/e')
+
+# Provide the six-digit version of the module
+%if %{version} != %{six_digit_version}
+Provides:   perl(CPAN::Meta::Requirements) = %{six_digit_version}
+%global __provides_exclude ^perl\\(CPAN::Meta::Requirements\\)
+%endif
 
 %description
 A CPAN::Meta::Requirements object models a set of version constraints like
@@ -87,6 +91,16 @@ make test TEST_FILES=$(echo $(find xt/ -name '*.t'))
 %{_mandir}/man3/CPAN::Meta::Requirements.3*
 
 %changelog
+* Thu Nov 20 2014 Paul Howarth p...@city-fan.org - 2.130-1
+- Update to 2.130
+  - from_string_hash can take optional constructor arguments
+  - bad_version_hook callback gets module name as well as version string
+  - undefined/empty versions given to from_string_hash or
+add_string_requirement now carp and are coerced to 0 instead of being
+fatal; this is more consistent with how the other requirement functions
+work
+- Provide six-digit version in a more robust way
+
 * Fri Nov 14 2014 Paul Howarth p...@city-fan.org - 2.129-1
 - Update to 2.129
   - from_string_hash can now accept v-strings as hash values
diff --git a/sources b/sources
index ddedb0e..6eadfe7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-59af66365efa7fdcb1a904b84585e11e  CPAN-Meta-Requirements-2.129.tar.gz
+c25c8fb8b0e8ed0d6c41aaa9f4080683  CPAN-Meta-Requirements-2.130.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[perl-CPAN-Meta-Requirements] Created tag perl-CPAN-Meta-Requirements-2.130-1.fc22

2014-11-20 Thread Paul Howarth
The lightweight tag 'perl-CPAN-Meta-Requirements-2.130-1.fc22' was created 
pointing to:

 b3971df... Update to 2.130
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

File Devel-REPL-1.003026.tar.gz uploaded to lookaside cache by psabata

2014-11-20 Thread Petr Šabata
A file has been added to the lookaside cache for perl-Devel-REPL:

2404861ed071ee7af1d4574d7a3b9b90  Devel-REPL-1.003026.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[perl-Devel-REPL] 1.003026 bump

2014-11-20 Thread Petr Šabata
commit d37bc8c1129c2cd77ed98798f371ec071c45c6da
Author: Petr Šabata con...@redhat.com
Date:   Thu Nov 20 12:51:08 2014 +0100

1.003026 bump

 .gitignore   |1 +
 perl-Devel-REPL.spec |   63 +
 sources  |2 +-
 3 files changed, 44 insertions(+), 22 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 35701c8..0f143e8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@ Devel-REPL-1.003011.tar.gz
 /Devel-REPL-1.003013.tar.gz
 /Devel-REPL-1.003014.tar.gz
 /Devel-REPL-1.003015.tar.gz
+/Devel-REPL-1.003026.tar.gz
diff --git a/perl-Devel-REPL.spec b/perl-Devel-REPL.spec
index 3a875f8..8d34a73 100644
--- a/perl-Devel-REPL.spec
+++ b/perl-Devel-REPL.spec
@@ -1,36 +1,56 @@
 Name:   perl-Devel-REPL
-Version:1.003015
-Release:5%{?dist}
+Version:1.003026
+Release:1%{?dist}
 Summary:Modern perl interactive shell
 License:GPL+ or Artistic
 Group:  Development/Libraries
 URL:http://search.cpan.org/dist/Devel-REPL/
 Source0:
http://search.cpan.org/CPAN/authors/id/E/ET/ETHER/Devel-REPL-%{version}.tar.gz
 BuildArch:  noarch
+# Build
+BuildRequires:  perl
+BuildRequires:  perl(ExtUtils::MakeMaker) = 6.76
+BuildRequires:  perl(strict)
+BuildRequires:  perl(warnings)
+# Runtime
 BuildRequires:  perl(App::Nopaste)
+BuildRequires:  perl(B::Concise) = 0.62
 BuildRequires:  perl(B::Keywords)
-BuildRequires:  perl(CPAN)
-BuildRequires:  perl(Data::Dumper::Concise)
 BuildRequires:  perl(Data::Dump::Streamer)
-BuildRequires:  perl(ExtUtils::MakeMaker)
+BuildRequires:  perl(Data::Dumper::Concise)
+BuildRequires:  perl(Devel::Peek)
 BuildRequires:  perl(File::HomeDir)
 BuildRequires:  perl(File::Next)
+BuildRequires:  perl(File::Spec)
 BuildRequires:  perl(Lexical::Persistence)
 BuildRequires:  perl(Module::Refresh)
-BuildRequires:  perl(Moose) = 0.93
-BuildRequires:  perl(MooseX::Getopt) = 0.18
-BuildRequires:  perl(MooseX::Object::Pluggable) = 0.0009
+BuildRequires:  perl(Module::Runtime)
+BuildRequires:  perl(Moose)
+BuildRequires:  perl(Moose::Meta::Role)
+BuildRequires:  perl(Moose::Role)
+BuildRequires:  perl(Moose::Util::TypeConstraints)
+BuildRequires:  perl(MooseX::Getopt)
+BuildRequires:  perl(MooseX::Object::Pluggable)
 BuildRequires:  perl(namespace::autoclean)
 BuildRequires:  perl(PPI)
+BuildRequires:  perl(PPI::Dumper)
+BuildRequires:  perl(Scalar::Util)
 BuildRequires:  perl(Sys::SigAction)
-BuildRequires:  perl(Task::Weaken)
+BuildRequires:  perl(Term::ANSIColor)
+BuildRequires:  perl(Term::ReadLine)
+BuildRequires:  perl(Time::HiRes)
+# Tests only
+BuildRequires:  perl(File::Spec::Functions)
+BuildRequires:  perl(if)
+BuildRequires:  perl(List::Util)
+BuildRequires:  perl(Test::Fatal)
 BuildRequires:  perl(Test::More)
-# undetected requires
+BuildRequires:  perl(version)
+Requires:   perl(:MODULE_COMPAT_%(eval $(perl -V:version); echo 
$version))
 Requires:   perl(App::Nopaste)
-Requires:   perl(MooseX::Getopt) = 0.18
-Requires:   perl(MooseX::Object::Pluggable) = 0.0009
-Requires:   perl(Task::Weaken)
-Requires:   perl(:MODULE_COMPAT_%(eval `%{__perl} -V:version`; echo 
$version))
+Requires:   perl(Moose::Meta::Role)
+Requires:   perl(MooseX::Getopt)
+Requires:   perl(MooseX::Object::Pluggable)
 
 %{?perl_default_filter}
 
@@ -43,26 +63,27 @@ of code without the need to create a temporary source code 
file.
 %setup -q -n Devel-REPL-%{version}
 
 %build
-%{__perl} Makefile.PL INSTALLDIRS=vendor
+perl Makefile.PL INSTALLDIRS=vendor NO_PACKLIST=1
 make %{?_smp_mflags}
 
 %install
-make pure_install DESTDIR=$RPM_BUILD_ROOT
-
-find $RPM_BUILD_ROOT -type f -name .packlist -exec rm -f {} \;
-
-%{_fixperms} $RPM_BUILD_ROOT/*
+make pure_install DESTDIR=%{buildroot}
+%{_fixperms} %{buildroot}/*
 
 %check
 make test
 
 %files
-%doc Changes README examples
+%license LICENSE
+%doc Changes CONTRIBUTING README examples
 %{perl_vendorlib}/*
 %{_bindir}/*
 %{_mandir}/man3/*
 
 %changelog
+* Thu Nov 20 2014 Petr Šabata con...@redhat.com - 1.003026-1
+- 1.003026 bump
+
 * Mon Sep 01 2014 Jitka Plesnikova jples...@redhat.com - 1.003015-5
 - Perl 5.20 rebuild
 
diff --git a/sources b/sources
index e950c48..8fb6d33 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-fdb68c780c4ba447be8c619e2a489c2e  Devel-REPL-1.003015.tar.gz
+2404861ed071ee7af1d4574d7a3b9b90  Devel-REPL-1.003026.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1163227] perl-Devel-REPL-1.003026 is available

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1163227

Petr Šabata psab...@redhat.com changed:

   What|Removed |Added

 Status|ASSIGNED|CLOSED
   Fixed In Version||perl-Devel-REPL-1.003026-1.
   ||fc22
 Resolution|--- |RAWHIDE
Last Closed||2014-11-20 06:52:42



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=n50anRWhCSa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166041] CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041



--- Comment #1 from leigh scott leigh123li...@googlemail.com ---
I fail to see how this affects cinnamon as it doesn't use jQuery.ui.dialog

$ repoquery -q --whatprovides */jquery.ui.dialog.js 
mediawiki-0:1.23.6-1.fc20.noarch
sagemath-notebook-0:5.12-1.fc20.x86_64
mediawiki-0:1.21.2-2.fc20.noarch
python-XStatic-jquery-ui-0:1.10.4.1-1.fc20.noarch
sagemath-notebook-0:6.1.1-5.fc20.x86_64
drupal7-jquery_update-0:2.3-2.fc20.noarch
drupal7-jquery_update-0:2.4-1.fc20.noarch

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=FHZSjWjVGPa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166115] New: CVE-2012-6662 mojomojo: jquery-ui: XSS vulnerability in default content in Tooltip widget [fedora-all]

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166115

Bug ID: 1166115
   Summary: CVE-2012-6662 mojomojo: jquery-ui: XSS vulnerability
in default content in Tooltip widget [fedora-all]
   Product: Fedora
   Version: 20
 Component: mojomojo
  Keywords: Security, SecurityTracking
  Severity: medium
  Priority: medium
  Assignee: extras-orp...@fedoraproject.org
  Reporter: vkaig...@redhat.com
QA Contact: extras...@fedoraproject.org
CC: extras-orp...@fedoraproject.org, iarn...@gmail.com,
perl-devel@lists.fedoraproject.org
Blocks: 1166064 (CVE-2012-6662)




This is an automatically created tracking bug!  It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.

For comments that are specific to the vulnerability please use bugs filed
against the Security Response product referenced in the Blocks field.

For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs

When submitting as an update, use the fedpkg template provided in the next
comment(s).  This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.

Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.

NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time.  If you need to fix the versions independent of each other,
you may clone this bug as appropriate.

[bug automatically created by: add-tracking-bugs]


Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1166064
[Bug 1166064] CVE-2012-6662 jquery-ui: XSS vulnerability in default content
in Tooltip widget
-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=JaUWctHQYIa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166115] CVE-2012-6662 mojomojo: jquery-ui: XSS vulnerability in default content in Tooltip widget [fedora-all]

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166115



--- Comment #1 from Vasyl Kaigorodov vkaig...@redhat.com ---

Use the following template to for the 'fedpkg update' request to submit an
update for this issue as it contains the top-level parent bug(s) as well as
this tracking bug.  This will ensure that all associated bugs get updated
when new packages are pushed to stable.

=

# bugfix, security, enhancement, newpackage (required)
type=security

# testing, stable
request=testing

# Bug numbers: 1234,9876
bugs=1166064,1166115

# Description of your update
notes=Security fix for CVE-2012-6662

# Enable request automation based on the stable/unstable karma thresholds
autokarma=True
stable_karma=3
unstable_karma=-3

# Automatically close bugs when this marked as stable
close_bugs=True

# Suggest that users restart after update
suggest_reboot=False

==

Additionally, you may opt to use the bodhi update submission link instead:

https://admin.fedoraproject.org/updates/new/?type_=securitybugs=1166064,1166115

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=QfaVkBv4eXa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166064] CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166064
Bug 1166064 depends on bug 1166104, which changed state.

Bug 1166104 Summary: CVE-2012-6662 fityk: jquery-ui: XSS vulnerability in 
default content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166104

   What|Removed |Added

 Status|NEW |CLOSED
 Resolution|--- |NOTABUG



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=0vOoCnGFh1a=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166041] CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041

Vasyl Kaigorodov vkaig...@redhat.com changed:

   What|Removed |Added

 Whiteboard|impact=moderate,public=2010 |impact=moderate,public=2010
   |0903,reported=20141120,sour |0903,reported=20141120,sour
   |ce=internet,cvss2=4.3/AV:N/ |ce=internet,cvss2=4.3/AV:N/
   |AC:M/Au:N/C:N/I:P/A:N,fedor |AC:M/Au:N/C:N/I:P/A:N,fedor
   |a-all/asterisk-gui=affected |a-all/asterisk-gui=affected
   |,fedora-all/beacon=affected |,fedora-all/beacon=affected
   |,fedora-all/blender=affecte |,fedora-all/blender=affecte
   |d,fedora-all/bodhi=affected |d,fedora-all/bodhi=affected
   |,fedora-all/cacti=affected, |,fedora-all/cacti=affected,
   |fedora-all/calibre=affected |fedora-all/calibre=affected
   |,fedora-all/cinnamon=affect |,fedora-all/cinnamon=notaff
   |ed,fedora-all/ckeditor=affe |ected,fedora-all/ckeditor=a
   |cted,fedora-all/cobbler=aff |ffected,fedora-all/cobbler=
   |ected,fedora-all/couchdb=af |affected,fedora-all/couchdb
   |fected,fedora-all/cumin=aff |=affected,fedora-all/cumin=
   |ected,fedora-all/django-typ |affected,fedora-all/django-
   |epad=affected,fedora-all/dl |typepad=affected,fedora-all
   |=affected,fedora-all/dokuwi |/dl=affected,fedora-all/dok
   |ki=affected,fedora-all/drup |uwiki=affected,fedora-all/d
   |al6=affected,fedora-all/dru |rupal6=affected,fedora-all/
   |pal7=affected,fedora-all/dr |drupal7=affected,fedora-all
   |upal7-jquery_update=affecte |/drupal7-jquery_update=affe
   |d,fedora-all/fish=affected, |cted,fedora-all/fish=affect
   |fedora-all/fityk=affected,f |ed,fedora-all/fityk=affecte
   |edora-all/freeipa=affected, |d,fedora-all/freeipa=affect
   |fedora-all/gallery3=affecte |ed,fedora-all/gallery3=affe
   |d,fedora-all/global=affecte |cted,fedora-all/global=affe
   |d,fedora-all/graphite-web=a |cted,fedora-all/graphite-we
   |ffected,fedora-all/hotot=af |b=affected,fedora-all/hotot
   |fected,fedora-all/ikiwiki=a |=affected,fedora-all/ikiwik
   |ffected,fedora-all/libgda=a |i=affected,fedora-all/libgd
   |ffected,fedora-all/mediawik |a=affected,fedora-all/media
   |i=affected,fedora-all/mojom |wiki=affected,fedora-all/mo
   |ojo=affected,fedora-all/nod |jomojo=affected,fedora-all/
   |ejs-should=affected,fedora- |nodejs-should=affected,fedo
   |all/OpenLP=affected,fedora- |ra-all/OpenLP=affected,fedo
   |all/openslides=affected,fed |ra-all/openslides=affected,
   |ora-all/openteacher=affecte |fedora-all/openteacher=affe
   |d,fedora-all/orbited=affect |cted,fedora-all/orbited=aff
   |ed,fedora-all/perl-Mojolici |ected,fedora-all/perl-Mojol
   |ous=affected,fedora-all/php |icious=affected,fedora-all/
   |PgAdmin=affected,fedora-all |phpPgAdmin=affected,fedora-
   |/python-backlash=affected,f |all/python-backlash=affecte
   |edora-all/python-django=aff |d,fedora-all/python-django=
   |ected,fedora-all/python-dja |affected,fedora-all/python-
   |ngo-debug-toolbar=affected, |django-debug-toolbar=affect
   |fedora-all/python-django-ty |ed,fedora-all/python-django
   |pepadapp=affected,fedora-al |-typepadapp=affected,fedora
   |l/python-django14=affected, |-all/python-django14=affect
   |fedora-all/python-django15= |ed,fedora-all/python-django
   |affected,fedora-all/python- |15=affected,fedora-all/pyth
   |flask-debugtoolbar=affected |on-flask-debugtoolbar=affec
   |,fedora-all/python-pebl=aff |ted,fedora-all/python-pebl=
   |ected,fedora-all/python-sph |affected,fedora-all/python-
   |inx=affected,fedora-all/pyt |sphinx=affected,fedora-all/
   |hon-tw-jquery=affected,fedo |python-tw-jquery=affected,f
   |ra-all/python-tw2-jqplugins |edora-all/python-tw2-jqplug
   |-flot=affected,fedora-all/p |ins-flot=affected,fedora-al
   |ython-tw2-jquery=affected,f |l/python-tw2-jquery=affecte
   |edora-all/python-werkzeug=a |d,fedora-all/python-werkzeu
   |ffected,fedora-all/python-X |g=affected,fedora-all/pytho
   |Static-jQuery=affected,fedo |n-XStatic-jQuery

[Bug 1166041] CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041

Vasyl Kaigorodov vkaig...@redhat.com changed:

   What|Removed |Added

 Whiteboard|impact=moderate,public=2010 |impact=moderate,public=2010
   |0903,reported=20141120,sour |0903,reported=20141120,sour
   |ce=internet,cvss2=4.3/AV:N/ |ce=internet,cvss2=4.3/AV:N/
   |AC:M/Au:N/C:N/I:P/A:N,fedor |AC:M/Au:N/C:N/I:P/A:N,fedor
   |a-all/asterisk-gui=affected |a-all/asterisk-gui=affected
   |,fedora-all/beacon=affected |,fedora-all/beacon=affected
   |,fedora-all/blender=affecte |,fedora-all/blender=affecte
   |d,fedora-all/bodhi=affected |d,fedora-all/bodhi=affected
   |,fedora-all/cacti=affected, |,fedora-all/cacti=affected,
   |fedora-all/calibre=affected |fedora-all/calibre=affected
   |,fedora-all/cinnamon=notaff |,fedora-all/cinnamon=notaff
   |ected,fedora-all/ckeditor=a |ected,fedora-all/ckeditor=a
   |ffected,fedora-all/cobbler= |ffected,fedora-all/cobbler=
   |affected,fedora-all/couchdb |affected,fedora-all/couchdb
   |=affected,fedora-all/cumin= |=affected,fedora-all/cumin=
   |affected,fedora-all/django- |affected,fedora-all/django-
   |typepad=affected,fedora-all |typepad=affected,fedora-all
   |/dl=affected,fedora-all/dok |/dl=affected,fedora-all/dok
   |uwiki=affected,fedora-all/d |uwiki=affected,fedora-all/d
   |rupal6=affected,fedora-all/ |rupal6=affected,fedora-all/
   |drupal7=affected,fedora-all |drupal7=affected,fedora-all
   |/drupal7-jquery_update=affe |/drupal7-jquery_update=affe
   |cted,fedora-all/fish=affect |cted,fedora-all/fish=affect
   |ed,fedora-all/fityk=affecte |ed,fedora-all/fityk=notaffe
   |d,fedora-all/freeipa=affect |cted,fedora-all/freeipa=aff
   |ed,fedora-all/gallery3=affe |ected,fedora-all/gallery3=a
   |cted,fedora-all/global=affe |ffected,fedora-all/global=a
   |cted,fedora-all/graphite-we |ffected,fedora-all/graphite
   |b=affected,fedora-all/hotot |-web=affected,fedora-all/ho
   |=affected,fedora-all/ikiwik |tot=affected,fedora-all/iki
   |i=affected,fedora-all/libgd |wiki=affected,fedora-all/li
   |a=affected,fedora-all/media |bgda=affected,fedora-all/me
   |wiki=affected,fedora-all/mo |diawiki=affected,fedora-all
   |jomojo=affected,fedora-all/ |/mojomojo=affected,fedora-a
   |nodejs-should=affected,fedo |ll/nodejs-should=affected,f
   |ra-all/OpenLP=affected,fedo |edora-all/OpenLP=affected,f
   |ra-all/openslides=affected, |edora-all/openslides=affect
   |fedora-all/openteacher=affe |ed,fedora-all/openteacher=a
   |cted,fedora-all/orbited=aff |ffected,fedora-all/orbited=
   |ected,fedora-all/perl-Mojol |affected,fedora-all/perl-Mo
   |icious=affected,fedora-all/ |jolicious=affected,fedora-a
   |phpPgAdmin=affected,fedora- |ll/phpPgAdmin=affected,fedo
   |all/python-backlash=affecte |ra-all/python-backlash=affe
   |d,fedora-all/python-django= |cted,fedora-all/python-djan
   |affected,fedora-all/python- |go=affected,fedora-all/pyth
   |django-debug-toolbar=affect |on-django-debug-toolbar=aff
   |ed,fedora-all/python-django |ected,fedora-all/python-dja
   |-typepadapp=affected,fedora |ngo-typepadapp=affected,fed
   |-all/python-django14=affect |ora-all/python-django14=aff
   |ed,fedora-all/python-django |ected,fedora-all/python-dja
   |15=affected,fedora-all/pyth |ngo15=affected,fedora-all/p
   |on-flask-debugtoolbar=affec |ython-flask-debugtoolbar=af
   |ted,fedora-all/python-pebl= |fected,fedora-all/python-pe
   |affected,fedora-all/python- |bl=affected,fedora-all/pyth
   |sphinx=affected,fedora-all/ |on-sphinx=affected,fedora-a
   |python-tw-jquery=affected,f |ll/python-tw-jquery=affecte
   |edora-all/python-tw2-jqplug |d,fedora-all/python-tw2-jqp
   |ins-flot=affected,fedora-al |lugins-flot=affected,fedora
   |l/python-tw2-jquery=affecte |-all/python-tw2-jquery=affe
   |d,fedora-all/python-werkzeu |cted,fedora-all/python-werk
   |g=affected,fedora-all/pytho |zeug=affected,fedora-all/py
   |n-XStatic-jQuery=affected,f |thon-XStatic-jQuery

File Dir-Self-0.11.tar.gz uploaded to lookaside cache by psabata

2014-11-20 Thread Petr Šabata
A file has been added to the lookaside cache for perl-Dir-Self:

e484446c3aa042737c0b7cbd0fb2f904  Dir-Self-0.11.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[perl-Dir-Self] 0.11 bump

2014-11-20 Thread Petr Šabata
commit a4663646c229c772abb04da962ed994f684422d3
Author: Petr Šabata con...@redhat.com
Date:   Thu Nov 20 13:37:35 2014 +0100

0.11 bump

 .gitignore |1 +
 perl-Dir-Self.spec |   37 ++---
 sources|2 +-
 3 files changed, 20 insertions(+), 20 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 8473d74..b33ecff 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 Dir-Self-0.10.tar.gz
+/Dir-Self-0.11.tar.gz
diff --git a/perl-Dir-Self.spec b/perl-Dir-Self.spec
index b294f66..c31f9dc 100644
--- a/perl-Dir-Self.spec
+++ b/perl-Dir-Self.spec
@@ -1,18 +1,24 @@
 Name:   perl-Dir-Self
-Version:0.10
-Release:12%{?dist}
+Version:0.11
+Release:1%{?dist}
 Summary:A __DIR__ constant for the directory your source file is in
 License:GPL+ or Artistic
 Group:  Development/Libraries
 URL:http://search.cpan.org/dist/Dir-Self/
 Source0:
http://www.cpan.org/authors/id/M/MA/MAUKE/Dir-Self-%{version}.tar.gz
-BuildRoot:  %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 BuildArch:  noarch
-BuildRequires:  perl(ExtUtils::MakeMaker)
+# Build
+BuildRequires:  perl
+BuildRequires:  perl(ExtUtils::MakeMaker) = 6.76
+BuildRequires:  perl(strict)
+# Runtime
+BuildRequires:  perl(Carp)
+BuildRequires:  perl(File::Spec)
+# Tests only
+BuildRequires:  perl(lib)
 BuildRequires:  perl(Test::More)
-Requires:   perl(:MODULE_COMPAT_%(eval `%{__perl} -V:version`; echo 
$version))
-
-%{?perl_default_filter}
+Requires:   perl(:MODULE_COMPAT_%(eval $(perl -V:version); echo 
$version))
+Requires:   perl(Carp)
 
 %description
 Perl has two pseudo-constants describing the current location in your
@@ -23,32 +29,25 @@ to the directory your source file is in, as an absolute 
pathname.
 %setup -q -n Dir-Self-%{version}
 
 %build
-%{__perl} Makefile.PL INSTALLDIRS=vendor
+perl Makefile.PL INSTALLDIRS=vendor NO_PACKLIST=1
 make %{?_smp_mflags}
 
 %install
-rm -rf $RPM_BUILD_ROOT
-
 make pure_install DESTDIR=$RPM_BUILD_ROOT
-
-find $RPM_BUILD_ROOT -type f -name .packlist -exec rm -f {} \;
-find $RPM_BUILD_ROOT -depth -type d -exec rmdir {} 2/dev/null \;
-
 %{_fixperms} $RPM_BUILD_ROOT/*
 
 %check
 make test
 
-%clean
-rm -rf $RPM_BUILD_ROOT
-
 %files
-%defattr(-,root,root,-)
-%doc README
+%doc Changes README
 %{perl_vendorlib}/*
 %{_mandir}/man3/*
 
 %changelog
+* Thu Nov 20 2014 Petr Šabata con...@redhat.com - 0.11-1
+- 0.11 bump
+
 * Tue Aug 26 2014 Jitka Plesnikova jples...@redhat.com - 0.10-12
 - Perl 5.20 rebuild
 
diff --git a/sources b/sources
index 5d290db..9c2eb4e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-ec6e6588d9caa5a20d1ba090be42c8ee  Dir-Self-0.10.tar.gz
+e484446c3aa042737c0b7cbd0fb2f904  Dir-Self-0.11.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1163228] perl-Dir-Self-0.11 is available

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1163228

Petr Šabata psab...@redhat.com changed:

   What|Removed |Added

 Status|ASSIGNED|CLOSED
   Fixed In Version||perl-Dir-Self-0.11-1.fc22
 Resolution|--- |RAWHIDE
Last Closed||2014-11-20 07:39:23



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=U5VocoPwxUa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

File File-Modified-0.09.tar.gz uploaded to lookaside cache by psabata

2014-11-20 Thread Petr Šabata
A file has been added to the lookaside cache for perl-File-Modified:

9eda150b1f8ab00a6809326b4389e9f2  File-Modified-0.09.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[perl-File-Modified] Perl 5.20 rebuild

2014-11-20 Thread Petr Šabata
commit a15e850c2a275653135c43cd4c0b0b10f3817a58
Author: Petr Šabata con...@redhat.com
Date:   Thu Nov 20 13:58:07 2014 +0100

Perl 5.20 rebuild

 .gitignore  |1 +
 perl-File-Modified.spec |   56 +++---
 sources |2 +-
 tests.patch |   31 --
 4 files changed, 20 insertions(+), 70 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 87a10fc..b5c5597 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 File-Modified-0.07.tar.gz
+/File-Modified-0.09.tar.gz
diff --git a/perl-File-Modified.spec b/perl-File-Modified.spec
index fa5b002..ae05fc3 100644
--- a/perl-File-Modified.spec
+++ b/perl-File-Modified.spec
@@ -1,26 +1,26 @@
 Name:   perl-File-Modified
-Version:0.07
-Release:20%{?dist}
+Version:0.09
+Release:1%{?dist}
 Summary:Checks intelligently if files have changed
 License:GPL+ or Artistic
 Group:  Development/Libraries
 URL:http://search.cpan.org/dist/File-Modified/
-Source0:
http://www.cpan.org/authors/id/C/CO/CORION/File-Modified-%{version}.tar.gz
-BuildRoot:  %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Source0:
http://www.cpan.org/authors/id/N/NE/NEILB/File-Modified-%{version}.tar.gz
 BuildArch:  noarch
-Requires:   perl(:MODULE_COMPAT_%(eval `%{__perl} -V:version`; echo 
$version))
-
-# make TODO tests fail properly :)
-Patch0: tests.patch
-
-# core
-BuildRequires:  perl(ExtUtils::MakeMaker)
-BuildRequires:  perl(Test::More)
+# Build
+BuildRequires:  perl
+BuildRequires:  perl(ExtUtils::MakeMaker) = 6.76
+# Runtime
+BuildRequires:  perl(base)
 BuildRequires:  perl(Digest::MD5)
-# tests
+BuildRequires:  perl(strict)
+BuildRequires:  perl(warnings)
+# Tests only
+BuildRequires:  perl(Test::More)
 BuildRequires:  perl(Digest::MD2)
 BuildRequires:  perl(Digest::SHA1)
-BuildRequires:  perl(Test::Exception)
+Requires:   perl(:MODULE_COMPAT_%(eval $(perl -V:version); echo 
$version))
+Requires:   perl(Digest::MD5)
 
 %description
 The Modified module is intended as a simple method for programs to detect
@@ -31,42 +31,22 @@ cannot be loaded.
 
 %prep
 %setup -q -n File-Modified-%{version}
-%patch0
-
-# source cleanup
-find . -type f -exec chmod -c -x {} \;
+find . -type f -exec chmod -c -x {} +
 sed -i 's/\r//' README bug.txt
 
-# hey, you guys shouldn't be here!
-# http://rt.cpan.org/Ticket/Display.html?id=26843
-find . -type f -name .cvsignore -exec rm -v {} \;
-sed -i '/^.*cvsignore$/d' MANIFEST
-
 %build
-%{__perl} Makefile.PL INSTALLDIRS=vendor
+perl Makefile.PL INSTALLDIRS=vendor NO_PACKLIST=1
 make %{?_smp_mflags}
 
 %install
-rm -rf %{buildroot}
-
-make pure_install PERL_INSTALL_ROOT=%{buildroot}
-
-find %{buildroot} -type f -name .packlist -exec rm -f {} \;
-find %{buildroot} -depth -type d -exec rmdir {} 2/dev/null \;
-
+make pure_install DESTDIR=%{buildroot}
 %{_fixperms} %{buildroot}/*
 
 %check
-# we expect two tests to be skipped -- perl(Digest) is _always_ installed
 make test
 
-%clean
-rm -rf %{buildroot}
-
 %files
-%defattr(-,root,root,-)
-# note: example/ deliberately left out -- useless
-%doc bug.txt Changes MANIFEST.skip README t/
+%doc bug.txt Changes README example
 %{perl_vendorlib}/*
 %{_mandir}/man3/*
 
diff --git a/sources b/sources
index b706420..bfed6cc 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-271a991b96ccbdaeb7098272c9f97d51  File-Modified-0.07.tar.gz
+9eda150b1f8ab00a6809326b4389e9f2  File-Modified-0.09.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166064] CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166064
Bug 1166064 depends on bug 1166117, which changed state.

Bug 1166117 Summary: CVE-2012-6662 OpenLP: jquery-ui: XSS vulnerability in 
default content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166117

   What|Removed |Added

 Status|NEW |CLOSED
 Resolution|--- |NOTABUG



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=KAUmWRI74la=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[perl-File-Modified] Let's add a changelog entry, too

2014-11-20 Thread Petr Šabata
commit e05de3007ea790c008ccc9bfb9bfb029a8d0c2a4
Author: Petr Šabata con...@redhat.com
Date:   Thu Nov 20 14:25:26 2014 +0100

Let's add a changelog entry, too

 perl-File-Modified.spec |3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)
---
diff --git a/perl-File-Modified.spec b/perl-File-Modified.spec
index ae05fc3..9359dbd 100644
--- a/perl-File-Modified.spec
+++ b/perl-File-Modified.spec
@@ -51,6 +51,9 @@ make test
 %{_mandir}/man3/*
 
 %changelog
+* Thu Nov 20 2014 Petr Šabata con...@redhat.com - 0.09-1
+- 0.09 bump
+
 * Thu Aug 28 2014 Jitka Plesnikova jples...@redhat.com - 0.07-20
 - Perl 5.20 rebuild
 
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1163232] perl-File-Modified-0.09 is available

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1163232

Petr Šabata psab...@redhat.com changed:

   What|Removed |Added

 Status|ASSIGNED|CLOSED
   Fixed In Version||perl-File-Modified-0.09-1.f
   ||c22
 Resolution|--- |RAWHIDE
Last Closed||2014-11-20 08:42:02



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=aGuDnzIQS0a=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166064] CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166064

Vasyl Kaigorodov vkaig...@redhat.com changed:

   What|Removed |Added

 Depends On||1166086
 Depends On||1166087
 Depends On||1166088
 Depends On||1166089
 Depends On||1166090
 Depends On||1166091
 Depends On||1166092
 Depends On||1166093
 Depends On||1166094
 Depends On||1166095
 Depends On||1166096
 Depends On||1166097
 Depends On||1166098
 Depends On||1166099
 Depends On||1166100
 Depends On||1166101
 Depends On||1166102
 Depends On||1166103
 Depends On||1166104
 Depends On||1166105
 Depends On||1166106
 Depends On||1166107
 Depends On||1166109
 Depends On||1166111
 Depends On||1166112
 Depends On||1166113
 Depends On||1166114
 Depends On||1166115
 Depends On||1166116
 Depends On||1166117

Yohan Graterol yohangratero...@gmail.com changed:

   What|Removed |Added

 CC|yohangratero...@gmail.com   |

Dominic Cleal dcl...@redhat.com changed:

   What|Removed |Added

 CC||dcl...@redhat.com



--- Comment #1 from Dominic Cleal dcl...@redhat.com ---
Regarding products that ship rubygem-jquery-ui-rails (or ruby193-) such as
Satellite 6 or OpenStack, versions 4.0.0 or higher of jquery-ui-rails contain
jquery-ui 1.10.0, so should not be vulnerable if newer than 4.0.0.

jquery-ui-rails is essentially a redistribution of jquery-ui and has a version
scheme of its own:
https://github.com/joliss/jquery-ui-rails/blob/master/VERSIONS.md


Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1166086
[Bug 1166086] CVE-2012-6662 asterisk-gui: jquery-ui: XSS vulnerability in
default content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166087
[Bug 1166087] CVE-2012-6662 beacon: jquery-ui: XSS vulnerability in default
content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166088
[Bug 1166088] CVE-2012-6662 blender: jquery-ui: XSS vulnerability in
default content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166089
[Bug 1166089] CVE-2012-6662 bodhi: jquery-ui: XSS vulnerability in default
content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166090
[Bug 1166090] CVE-2012-6662 cacti: jquery-ui: XSS vulnerability in default
content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166091
[Bug 1166091] CVE-2012-6662 calibre: jquery-ui: XSS vulnerability in
default content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166092
[Bug 1166092] CVE-2012-6662 cinnamon: jquery-ui: XSS vulnerability in
default content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166093
[Bug 1166093] CVE-2012-6662 ckeditor: jquery-ui: XSS vulnerability in
default content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166094
[Bug 1166094] CVE-2012-6662 cobbler: jquery-ui: XSS vulnerability in
default content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166095
[Bug 1166095] CVE-2012-6662 couchdb: jquery-ui: XSS vulnerability in
default content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166096
[Bug 1166096] CVE-2012-6662 cumin: jquery-ui: XSS vulnerability in default
content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166097
[Bug 1166097] CVE-2012-6662 django-typepad: jquery-ui: XSS vulnerability in
default content in Tooltip widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1166098
[Bug 1166098] CVE-2012-6662 dl: 

[Bug 1165013] perl owns dirs and ships dirs it should own nor ship

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1165013



--- Comment #3 from Petr Pisar ppi...@redhat.com ---
The /usr/lib64/perl5/machine has unknown purpose. It comes from upstream but I
could find what creates the directory. I will keep it there.

Because the spec file change is quite large, I do not want to port it to Fedora
21 just to fix this aesthetic issue. I hope you will understand.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=Qa2xGsiUnUa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1165013] perl owns dirs and ships dirs it should own nor ship

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1165013



--- Comment #4 from Petr Pisar ppi...@redhat.com ---
s/I could find/I could not find/

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=9gJkUlGqHOa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[perl] Sub-package encoding module

2014-11-20 Thread Petr Pisar
commit 298a1674990afb6ce3d5cf523c9479bbf0030ff9
Author: Petr Písař ppi...@redhat.com
Date:   Wed Nov 19 10:21:14 2014 +0100

Sub-package encoding module

 perl.spec |   49 +++--
 1 files changed, 43 insertions(+), 6 deletions(-)
---
diff --git a/perl.spec b/perl.spec
index 14b37c6..c5c9739 100644
--- a/perl.spec
+++ b/perl.spec
@@ -30,7 +30,7 @@
 Name:   perl
 Version:%{perl_version}
 # release number must be even higher, because dual-lived modules will be 
broken otherwise
-Release:313%{?dist}
+Release:314%{?dist}
 Epoch:  %{perl_epoch}
 Summary:Practical Extraction and Report Language
 Group:  Development/Languages
@@ -716,6 +716,35 @@ Conflicts:  perl  4:5.16.2-256
 The Encode module provides the interface between Perl strings and the rest
 of the system. Perl strings are sequences of characters.
 
+%package -n perl-encoding
+Summary:Write your Perl script in non-ASCII or non-UTF-8
+Group:  Development/Libraries
+License:GPL+ or Artistic
+Epoch:  2
+Version:2.60
+# Keeping this sub-package arch-specific because it installs files into
+# arch-specific directories.
+Requires:   %perl_compat
+Requires:   perl(Carp)
+# Config not needed on perl ≥ 5.008
+# Consider Filter::Util::Call as mandatory, bug #1165183, CPAN RT#100427
+Requires:   perl(Filter::Util::Call)
+# I18N::Langinfo is optional
+# PerlIO::encoding is optional
+Requires:   perl(utf8)
+Conflicts:  perl-Encode  2:2.60-314
+
+%description -n perl-encoding
+With the encoding pragma, you can write your Perl script in any encoding you
+like (so long as the Encode module supports it) and still enjoy Unicode
+support.
+
+However, this encoding module is deprecated under perl 5.18. It uses
+a mechanism provided by perl that is deprecated under 5.18 and higher, and may
+be removed in a future version.
+
+The easiest and the best alternative is to write your script in UTF-8.
+
 %package Encode-devel
 Summary:Character encodings in Perl
 Group:  Development/Libraries
@@ -1893,7 +1922,7 @@ Requires:   perl-Archive-Tar, perl-autodie, 
perl-B-Debug,
 Requires:   perl-Compress-Raw-Bzip2,
 Requires:   perl-Carp, perl-Compress-Raw-Zlib, perl-CGI, perl-constant,
 Requires:   perl-CPAN, perl-CPAN-Meta, perl-CPAN-Meta-Requirements,
-Requires:   perl-CPAN-Meta-YAML, perl-Encode
+Requires:   perl-CPAN-Meta-YAML, perl-Encode, perl-encoding
 Requires:   perl-Data-Dumper, perl-DB_File, perl-Devel-PPPort,
 Requires:   perl-Digest, perl-Digest-MD5,
 Requires:   perl-Digest-SHA, perl-Env, perl-Exporter, perl-experimental
@@ -2392,13 +2421,15 @@ sed \
 
 # Encode
 %exclude %{_bindir}/piconv
-%exclude %{archlib}/encoding.pm
 %exclude %{archlib}/Encode*
 %exclude %{archlib}/auto/Encode*
 %exclude %{_mandir}/man1/piconv.1*
-%exclude %{_mandir}/man3/encoding.3*
 %exclude %{_mandir}/man3/Encode*.3*
 
+# encoding
+%exclude %{archlib}/encoding.pm
+%exclude %{_mandir}/man3/encoding.3*
+
 # Encode-devel
 %exclude %{_bindir}/enc2xs
 %exclude %{privlib}/Encode/*.e2x
@@ -3054,16 +3085,18 @@ sed \
 %if %{dual_life} || %{rebuild_from_scratch}
 %files Encode
 %{_bindir}/piconv
-%{archlib}/encoding.pm
 %{archlib}/Encode*
 %{archlib}/auto/Encode*
 %{privlib}/Encode
 %exclude %{privlib}/Encode/*.e2x
 %exclude %{privlib}/Encode/encode.h
 %{_mandir}/man1/piconv.1*
-%{_mandir}/man3/encoding.3*
 %{_mandir}/man3/Encode*.3*
 
+%files encoding
+%{archlib}/encoding.pm
+%{_mandir}/man3/encoding.3*
+
 %files Encode-devel
 %{_bindir}/enc2xs
 %{privlib}/Encode/*.e2x
@@ -3625,6 +3658,10 @@ sed \
 
 # Old changelog entries are preserved in CVS.
 %changelog
+* Wed Nov 19 2014 Petr Pisar ppi...@redhat.com - 4:5.20.1-314
+- Consider Filter::Util::Call dependency as mandatory (bug #1165183)
+- Sub-package encoding module
+
 * Thu Nov 13 2014 Petr Pisar ppi...@redhat.com - 4:5.20.1-313
 - Freeze epoch at perl-Pod-Checker and perl-Pod-Usage (bug #1163490)
 - Remove bundled perl-ExtUtils-Command (bug #1158536)
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[perl] Own upper directories by each package and remove empty directories

2014-11-20 Thread Petr Pisar
commit 46308c06eb68b0ad6d11f6b7993983a9fde4cd9c
Author: Petr Písař ppi...@redhat.com
Date:   Thu Nov 20 15:40:01 2014 +0100

Own upper directories by each package and remove empty directories

Standard @INC directories are exceptions.
machine directory has unknown origin but comes from upstream. Lets
keep it there now.

 checkemptydirs |   11 +++
 perl.spec  |  271 +---
 2 files changed, 209 insertions(+), 73 deletions(-)
---
diff --git a/checkemptydirs b/checkemptydirs
new file mode 100755
index 000..a68335f
--- /dev/null
+++ b/checkemptydirs
@@ -0,0 +1,11 @@
+#!/bin/bash
+for P in $@; do
+echo Empty directories in RPM package $P:
+
+for D in $(rpm -qlvp $P | \
+perl -ne \
+'if (/\Adrwx/) {$n=${[split /\s+/]}[8]; print qq{$n\n}}' | \
+sort -f); do
+test $(rpm -qlp $P | grep -c -F $D/) == 0  echo $D;
+done
+done
diff --git a/perl.spec b/perl.spec
index c5c9739..8216fdf 100644
--- a/perl.spec
+++ b/perl.spec
@@ -2262,6 +2262,7 @@ sed \
 
 
 # libs
+%exclude %dir %{archlib}/CORE
 %exclude %{archlib}/CORE/libperl.so
 %exclude %{_libdir}/libperl.so.*
 %exclude %{perl_vendorarch}
@@ -2292,12 +2293,12 @@ sed \
 %exclude %{_mandir}/man1/psed.1*
 %exclude %{_mandir}/man1/s2p.1*
 
-
 # Archive-Tar
 %exclude %{_bindir}/ptar
 %exclude %{_bindir}/ptardiff
 %exclude %{_bindir}/ptargrep
-%exclude %{privlib}/Archive/Tar/
+%exclude %dir %{privlib}/Archive
+%exclude %{privlib}/Archive/Tar
 %exclude %{privlib}/Archive/Tar.pm
 %exclude %{_mandir}/man1/ptar.1*
 %exclude %{_mandir}/man1/ptardiff.1*
@@ -2322,7 +2323,7 @@ sed \
 %exclude %{_mandir}/man3/Carp.*
 
 # CGI
-%exclude %{privlib}/CGI/
+%exclude %{privlib}/CGI
 %exclude %{privlib}/CGI.pm
 %exclude %{_mandir}/man3/CGI.3*
 %exclude %{_mandir}/man3/CGI::*.3*
@@ -2333,8 +2334,9 @@ sed \
 
 # CPAN
 %exclude %{_bindir}/cpan
+%exclude %dir %{privlib}/App
 %exclude %{privlib}/App/Cpan.pm
-%exclude %{privlib}/CPAN/
+%exclude %{privlib}/CPAN
 %exclude %{privlib}/CPAN.pm
 %exclude %{_mandir}/man1/cpan.1*
 %exclude %{_mandir}/man3/App::Cpan.*
@@ -2342,7 +2344,9 @@ sed \
 %exclude %{_mandir}/man3/CPAN:*
 
 # CPAN-Meta
+%exclude %dir %{privlib}/CPAN
 %exclude %{privlib}/CPAN/Meta.pm
+%exclude %dir %{privlib}/CPAN/Meta
 %exclude %{privlib}/CPAN/Meta/Converter.pm
 %exclude %{privlib}/CPAN/Meta/Feature.pm
 %exclude %{privlib}/CPAN/Meta/History.pm
@@ -2352,30 +2356,39 @@ sed \
 %exclude %{_mandir}/man3/CPAN::Meta*
 
 # CPAN-Meta-Requirements
+%exclude %dir %{privlib}/CPAN
+%exclude %dir %{privlib}/CPAN/Meta
 %exclude %{privlib}/CPAN/Meta/Requirements.pm
 %exclude %{_mandir}/man3/CPAN::Meta::Requirements.3*
 
 # CPAN-Meta-YAML
+%exclude %dir %{privlib}/CPAN
+%exclude %dir %{privlib}/CPAN/Meta
 %exclude %{privlib}/CPAN/Meta/YAML.pm
 %exclude %{_mandir}/man3/CPAN::Meta::YAML*
 
 # Parse-CPAN-Meta
-%exclude %dir %{privlib}/Parse/
-%exclude %dir %{privlib}/Parse/CPAN/
+%exclude %dir %{privlib}/Parse
+%exclude %dir %{privlib}/Parse/CPAN
 %exclude %{privlib}/Parse/CPAN/Meta.pm
 %exclude %{_mandir}/man3/Parse::CPAN::Meta.3*
 
-
 # Compress-Raw-Bzip2
 %exclude %dir %{archlib}/Compress
+%exclude %dir %{archlib}/Compress/Raw
 %exclude %{archlib}/Compress/Raw/Bzip2.pm
+%exclude %dir %{archlib}/auto/Compress
+%exclude %dir %{archlib}/auto/Compress/Raw
+%exclude %{archlib}/auto/Compress/Raw/Bzip2
 %exclude %{_mandir}/man3/Compress::Raw::Bzip2*
 
 # Compress-Raw-Zlib
-%exclude %{archlib}/Compress/Raw/
-%exclude %{archlib}/auto/Compress
-%exclude %{archlib}/auto/Compress/Raw/
-%exclude %{archlib}/auto/Compress/Raw/Zlib/
+%exclude %dir %{archlib}/Compress
+%exclude %dir %{archlib}/Compress/Raw
+%exclude %{archlib}/Compress/Raw/Zlib.pm
+%exclude %dir %{archlib}/auto/Compress
+%exclude %dir %{archlib}/auto/Compress/Raw
+%exclude %{archlib}/auto/Compress/Raw/Zlib
 %exclude %{_mandir}/man3/Compress::Raw::Zlib*
 
 # Data-Dumper
@@ -2408,14 +2421,18 @@ sed \
 %exclude %{_mandir}/man3/Digest::file.3*
 
 # Digest-MD5
+%exclude %dir %{archlib}/Digest
 %exclude %{archlib}/Digest/MD5.pm
-%exclude %{archlib}/auto/Digest/MD5/
+%exclude %dir %{archlib}/auto/Digest
+%exclude %{archlib}/auto/Digest/MD5
 %exclude %{_mandir}/man3/Digest::MD5.3*
 
 # Digest-SHA
 %exclude %{_bindir}/shasum
+%exclude %dir %{archlib}/Digest
 %exclude %{archlib}/Digest/SHA.pm
-%exclude %{archlib}/auto/Digest/SHA/
+%exclude %dir %{archlib}/auto/Digest
+%exclude %{archlib}/auto/Digest/SHA
 %exclude %{_mandir}/man1/shasum.1*
 %exclude %{_mandir}/man3/Digest::SHA.3*
 
@@ -2423,6 +2440,7 @@ sed \
 %exclude %{_bindir}/piconv
 %exclude %{archlib}/Encode*
 %exclude %{archlib}/auto/Encode*
+%exclude %{privlib}/Encode
 %exclude %{_mandir}/man1/piconv.1*
 %exclude %{_mandir}/man3/Encode*.3*
 
@@ -2432,6 +2450,7 @@ sed \
 
 # Encode-devel
 %exclude %{_bindir}/enc2xs
+%exclude %dir %{privlib}/Encode
 %exclude %{privlib}/Encode/*.e2x
 %exclude %{privlib}/Encode/encode.h
 %exclude %{_mandir}/man1/enc2xs.1*
@@ -2449,7 

[Bug 1166041] CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041

Vincent Danen vda...@redhat.com changed:

   What|Removed |Added

 Depends On||1166229



--- Comment #3 from Vincent Danen vda...@redhat.com ---

Created freeipa tracking bugs for this issue:

Affects: fedora-all [bug 1166229]


Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1166229
[Bug 1166229] CVE-2010-5312 freeipa: jquery-ui: XSS vulnerability in
jQuery.ui.dialog title option [fedora-all]
-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=Mv9FU7mADHa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1165013] perl owns dirs and ships dirs it should own nor ship

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1165013



--- Comment #5 from Ralf Corsepius rc040...@freenet.de ---
(In reply to Petr Pisar from comment #3)
 Because the spec file change is quite large, I do not want to port it to
 Fedora 21 just to fix this aesthetic issue. I hope you will understand.

I am unsure about what to do. Why? I tripped over this issue when cleaning up
after having upgraded from fc20 to fc21, which - as usual with Fedora upgrades
- exposed many issues on directory ownership. One of these was this.

That said, I feel this bug should be ported to f21 to avoid other users from
tripping over this issue. However, I agree in sofar, this bug is mostly
cosmetic and doesn't cause any mal-function. 

So, I'd propose, we should backport it from rawhide to fc21 (and may-be older
releases), such that it gets inherited during the next update.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=hO2kD9FUO3a=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166041] CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041

Vincent Danen vda...@redhat.com changed:

   What|Removed |Added

 Whiteboard|impact=moderate,public=2010 |impact=moderate,public=2010
   |0903,reported=20141120,sour |0903,reported=20141120,sour
   |ce=internet,cvss2=4.3/AV:N/ |ce=internet,cvss2=4.3/AV:N/
   |AC:M/Au:N/C:N/I:P/A:N,fedor |AC:M/Au:N/C:N/I:P/A:N,fedor
   |a-all/asterisk-gui=affected |a-all/asterisk-gui=affected
   |,fedora-all/beacon=affected |,fedora-all/beacon=affected
   |,fedora-all/blender=affecte |,fedora-all/blender=affecte
   |d,fedora-all/bodhi=affected |d,fedora-all/bodhi=affected
   |,fedora-all/cacti=affected, |,fedora-all/cacti=affected,
   |fedora-all/calibre=affected |fedora-all/calibre=affected
   |,fedora-all/cinnamon=notaff |,fedora-all/cinnamon=notaff
   |ected,fedora-all/ckeditor=a |ected,fedora-all/ckeditor=a
   |ffected,fedora-all/cobbler= |ffected,fedora-all/cobbler=
   |affected,fedora-all/couchdb |affected,fedora-all/couchdb
   |=affected,fedora-all/cumin= |=affected,fedora-all/cumin=
   |affected,fedora-all/django- |affected,fedora-all/django-
   |typepad=affected,fedora-all |typepad=affected,fedora-all
   |/dl=affected,fedora-all/dok |/dl=affected,fedora-all/dok
   |uwiki=affected,fedora-all/d |uwiki=affected,fedora-all/d
   |rupal6=affected,fedora-all/ |rupal6=affected,fedora-all/
   |drupal7=affected,fedora-all |drupal7=affected,fedora-all
   |/drupal7-jquery_update=affe |/drupal7-jquery_update=affe
   |cted,fedora-all/fish=affect |cted,fedora-all/fish=affect
   |ed,fedora-all/fityk=notaffe |ed,fedora-all/fityk=notaffe
   |cted,fedora-all/freeipa=aff |cted,fedora-all/freeipa=aff
   |ected,fedora-all/gallery3=a |ected,fedora-all/gallery3=a
   |ffected,fedora-all/global=a |ffected,fedora-all/global=a
   |ffected,fedora-all/graphite |ffected,fedora-all/graphite
   |-web=affected,fedora-all/ho |-web=affected,fedora-all/ho
   |tot=affected,fedora-all/iki |tot=affected,fedora-all/iki
   |wiki=affected,fedora-all/li |wiki=affected,fedora-all/li
   |bgda=affected,fedora-all/me |bgda=affected,fedora-all/me
   |diawiki=affected,fedora-all |diawiki=affected,fedora-all
   |/mojomojo=affected,fedora-a |/mojomojo=affected,fedora-a
   |ll/nodejs-should=affected,f |ll/nodejs-should=affected,f
   |edora-all/OpenLP=affected,f |edora-all/OpenLP=affected,f
   |edora-all/openslides=affect |edora-all/openslides=affect
   |ed,fedora-all/openteacher=a |ed,fedora-all/openteacher=a
   |ffected,fedora-all/orbited= |ffected,fedora-all/orbited=
   |affected,fedora-all/perl-Mo |affected,fedora-all/perl-Mo
   |jolicious=affected,fedora-a |jolicious=affected,fedora-a
   |ll/phpPgAdmin=affected,fedo |ll/phpPgAdmin=affected,fedo
   |ra-all/python-backlash=affe |ra-all/python-backlash=affe
   |cted,fedora-all/python-djan |cted,fedora-all/python-djan
   |go=affected,fedora-all/pyth |go=affected,fedora-all/pyth
   |on-django-debug-toolbar=aff |on-django-debug-toolbar=aff
   |ected,fedora-all/python-dja |ected,fedora-all/python-dja
   |ngo-typepadapp=affected,fed |ngo-typepadapp=affected,fed
   |ora-all/python-django14=aff |ora-all/python-django14=aff
   |ected,fedora-all/python-dja |ected,fedora-all/python-dja
   |ngo15=affected,fedora-all/p |ngo15=affected,fedora-all/p
   |ython-flask-debugtoolbar=af |ython-flask-debugtoolbar=af
   |fected,fedora-all/python-pe |fected,fedora-all/python-pe
   |bl=affected,fedora-all/pyth |bl=affected,fedora-all/pyth
   |on-sphinx=affected,fedora-a |on-sphinx=affected,fedora-a
   |ll/python-tw-jquery=affecte |ll/python-tw-jquery=affecte
   |d,fedora-all/python-tw2-jqp |d,fedora-all/python-tw2-jqp
   |lugins-flot=affected,fedora |lugins-flot=affected,fedora
   |-all/python-tw2-jquery=affe |-all/python-tw2-jquery=affe
   |cted,fedora-all/python-werk |cted,fedora-all/python-werk
   |zeug=affected,fedora-all/py |zeug=affected,fedora-all/py
   |thon-XStatic-jQuery=affecte |thon-XStatic-jQuery

[Bug 1166064] CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166064

Vincent Danen vda...@redhat.com changed:

   What|Removed |Added

 Whiteboard|impact=moderate,public=2012 |impact=moderate,public=2012
   |1127,reported=20141120,sour |1127,reported=20141120,sour
   |ce=internet,cvss2=4.3/AV:N/ |ce=internet,cvss2=4.3/AV:N/
   |AC:M/Au:N/C:N/I:P/A:N,fedor |AC:M/Au:N/C:N/I:P/A:N,fedor
   |a-all/asterisk-gui=affected |a-all/asterisk-gui=affected
   |,fedora-all/beacon=affected |,fedora-all/beacon=affected
   |,fedora-all/blender=affecte |,fedora-all/blender=affecte
   |d,fedora-all/bodhi=affected |d,fedora-all/bodhi=affected
   |,fedora-all/cacti=affected, |,fedora-all/cacti=affected,
   |fedora-all/calibre=affected |fedora-all/calibre=affected
   |,fedora-all/cinnamon=affect |,fedora-all/cinnamon=affect
   |ed,fedora-all/ckeditor=affe |ed,fedora-all/ckeditor=affe
   |cted,fedora-all/cobbler=aff |cted,fedora-all/cobbler=aff
   |ected,fedora-all/couchdb=af |ected,fedora-all/couchdb=af
   |fected,fedora-all/cumin=aff |fected,fedora-all/cumin=aff
   |ected,fedora-all/django-typ |ected,fedora-all/django-typ
   |epad=affected,fedora-all/dl |epad=affected,fedora-all/dl
   |=affected,fedora-all/dokuwi |=affected,fedora-all/dokuwi
   |ki=affected,fedora-all/drup |ki=affected,fedora-all/drup
   |al6=affected,fedora-all/dru |al6=affected,fedora-all/dru
   |pal7=affected,fedora-all/dr |pal7=affected,fedora-all/dr
   |upal7-jquery_update=affecte |upal7-jquery_update=affecte
   |d,fedora-all/fish=affected, |d,fedora-all/fish=affected,
   |fedora-all/fityk=affected,f |fedora-all/fityk=affected,f
   |edora-all/freeipa=affected, |edora-all/freeipa=affected,
   |fedora-all/gallery3=affecte |fedora-all/gallery3=affecte
   |d,fedora-all/global=affecte |d,fedora-all/global=affecte
   |d,fedora-all/graphite-web=a |d,fedora-all/graphite-web=a
   |ffected,fedora-all/hotot=af |ffected,fedora-all/hotot=af
   |fected,fedora-all/ikiwiki=a |fected,fedora-all/ikiwiki=a
   |ffected,fedora-all/libgda=a |ffected,fedora-all/libgda=a
   |ffected,fedora-all/mediawik |ffected,fedora-all/mediawik
   |i=affected,fedora-all/mojom |i=affected,fedora-all/mojom
   |ojo=affected,fedora-all/nod |ojo=affected,fedora-all/nod
   |ejs-should=affected,fedora- |ejs-should=affected,fedora-
   |all/OpenLP=affected,fedora- |all/OpenLP=affected,fedora-
   |all/openslides=affected,fed |all/openslides=affected,fed
   |ora-all/openteacher=affecte |ora-all/openteacher=affecte
   |d,fedora-all/orbited=affect |d,fedora-all/orbited=affect
   |ed,fedora-all/perl-Mojolici |ed,fedora-all/perl-Mojolici
   |ous=affected,fedora-all/php |ous=affected,fedora-all/php
   |PgAdmin=affected,fedora-all |PgAdmin=affected,fedora-all
   |/python-backlash=affected,f |/python-backlash=affected,f
   |edora-all/python-django=aff |edora-all/python-django=aff
   |ected,fedora-all/python-dja |ected,fedora-all/python-dja
   |ngo-debug-toolbar=affected, |ngo-debug-toolbar=affected,
   |fedora-all/python-django-ty |fedora-all/python-django-ty
   |pepadapp=affected,fedora-al |pepadapp=affected,fedora-al
   |l/python-django14=affected, |l/python-django14=affected,
   |fedora-all/python-django15= |fedora-all/python-django15=
   |affected,fedora-all/python- |affected,fedora-all/python-
   |flask-debugtoolbar=affected |flask-debugtoolbar=affected
   |,fedora-all/python-pebl=aff |,fedora-all/python-pebl=aff
   |ected,fedora-all/python-sph |ected,fedora-all/python-sph
   |inx=affected,fedora-all/pyt |inx=affected,fedora-all/pyt
   |hon-tw-jquery=affected,fedo |hon-tw-jquery=affected,fedo
   |ra-all/python-tw2-jqplugins |ra-all/python-tw2-jqplugins
   |-flot=affected,fedora-all/p |-flot=affected,fedora-all/p
   |ython-tw2-jquery=affected,f |ython-tw2-jquery=affected,f
   |edora-all/python-werkzeug=a |edora-all/python-werkzeug=a
   |ffected,fedora-all/python-X |ffected,fedora-all/python-X
   |Static-jQuery=affected,fedo |Static-jQuery=affected

[Bug 1166064] CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166064

Vincent Danen vda...@redhat.com changed:

   What|Removed |Added

 Depends On||1166242



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=wZIsPrPw7Ea=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166041] CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041

Vincent Danen vda...@redhat.com changed:

   What|Removed |Added

 Depends On||1166242



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=fP4tItcmEma=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166041] CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041

Vincent Danen vda...@redhat.com changed:

   What|Removed |Added

 Depends On||1166241



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=dxhgR27F99a=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166064] CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166064

Vincent Danen vda...@redhat.com changed:

   What|Removed |Added

 Depends On||1166241



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=E5LECAKnria=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166041] CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041



--- Comment #6 from Athmane Madjoudj athma...@gmail.com ---
Does this affected only packages with bundled jquery ui, or jquery in general.

For example: sticky-notes has jquery (min) and jquery.cookie but not jquery ui
(or code from it), does that make it vulnerable to this issue.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=cyc46xPq4za=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166041] CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041



--- Comment #7 from Orion Poplawski or...@cora.nwra.com ---
What version of jquery was this issue introduced in?  cobbler bundles jquery ui
1.8.18 and I'm not seeing the patched code in it, although it's hard for me to
search in the minimized js.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=676ysX2KyFa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1165013] perl owns dirs and ships dirs it should own nor ship

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1165013

Petr Pisar ppi...@redhat.com changed:

   What|Removed |Added

 Status|ASSIGNED|CLOSED
   Fixed In Version||perl-5.20.1-314.fc22
 Resolution|--- |RAWHIDE
Last Closed||2014-11-20 11:26:57



--- Comment #6 from Petr Pisar ppi...@redhat.com ---
petr@dhcp-0-146:~/fedora/perl $ git show --stat
commit 46308c06eb68b0ad6d11f6b7993983a9fde4cd9c
Author: Petr Písař ppi...@redhat.com
Date:   Thu Nov 20 15:40:01 2014 +0100

Own upper directories by each package and remove empty directories

Standard @INC directories are exceptions.
machine directory has unknown origin but comes from upstream. Lets
keep it there now.

 checkemptydirs |  11 +++
 perl.spec  | 271 +
 2 files changed, 209 insertions(+), 73 deletions(-)

To exclude empty directories, one has to own them by all sub-packages which
installs there. The set of sub-packages differs between Fedora 22 and 21.
Reviewing them again is not worth for the few directories.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=Dj3oHLQX3Ja=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

File CPAN-Meta-2.143240.tar.gz uploaded to lookaside cache by pghmcfc

2014-11-20 Thread Paul Howarth
A file has been added to the lookaside cache for perl-CPAN-Meta:

c07f73197dc3ba869d131e94d1ab93fb  CPAN-Meta-2.143240.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[perl-CPAN-Meta] Update to 2.143240

2014-11-20 Thread Paul Howarth
commit 2251b0b466c6903bc69d8cd8ad6f8dbf8f019e0d
Author: Paul Howarth p...@city-fan.org
Date:   Thu Nov 20 16:48:53 2014 +

Update to 2.143240

- New upstream release 2.143240
  - Give correct path in nested merges such as resources
  - Removed strings test that should have been removed when
CPAN::Meta::Requirements was removed to a separate dist

 perl-CPAN-Meta.spec |   21 ++---
 sources |2 +-
 2 files changed, 19 insertions(+), 4 deletions(-)
---
diff --git a/perl-CPAN-Meta.spec b/perl-CPAN-Meta.spec
index 9abd5c5..41a864a 100644
--- a/perl-CPAN-Meta.spec
+++ b/perl-CPAN-Meta.spec
@@ -1,6 +1,6 @@
 Name:   perl-CPAN-Meta
 Summary:Distribution metadata for a CPAN dist
-Version:2.142690
+Version:2.143240
 Release:1%{?dist}
 License:GPL+ or Artistic
 Group:  Development/Libraries
@@ -65,18 +65,33 @@ make test
 %doc Changes CONTRIBUTING history README Todo t/
 %{perl_vendorlib}/CPAN/
 %{_mandir}/man3/CPAN::Meta.3*
-%{_mandir}/man3/CPAN::Meta::History*.3*
 %{_mandir}/man3/CPAN::Meta::Converter.3*
 %{_mandir}/man3/CPAN::Meta::Feature.3*
 %{_mandir}/man3/CPAN::Meta::History.3*
+%{_mandir}/man3/CPAN::Meta::History::Meta_1_0.3*
+%{_mandir}/man3/CPAN::Meta::History::Meta_1_1.3*
+%{_mandir}/man3/CPAN::Meta::History::Meta_1_2.3*
+%{_mandir}/man3/CPAN::Meta::History::Meta_1_3.3*
+%{_mandir}/man3/CPAN::Meta::History::Meta_1_4.3*
 %{_mandir}/man3/CPAN::Meta::Merge.3*
 %{_mandir}/man3/CPAN::Meta::Prereqs.3*
 %{_mandir}/man3/CPAN::Meta::Spec.3*
 %{_mandir}/man3/CPAN::Meta::Validator.3*
 
 %changelog
+* Thu Nov 20 2014 Paul Howarth p...@city-fan.org - 2.143240-1
+- Update to 2.143240
+  - Give correct path in nested merges such as resources
+  - Removed strings test that should have been removed when
+CPAN::Meta::Requirements was removed to a separate dist
+
 * Tue Nov 11 2014 Petr Šabata con...@redhat.com - 2.142690-1
-- 2.142690 bump
+ - Update to 2.142690
+  - Fixed use of incorrect method in CPAN::Meta::Merge implementation
+  - Clarified documentation that no_index is a list of exclusions, and that
+indexers should generally exclude 'inc', 'xt' and 't' as well
+  - CPAN::Meta::History::Meta_1_0 through 1_4 are added as a permanent
+record of 1.x versions of the metaspec
 
 * Wed Aug 27 2014 Jitka Plesnikova jples...@redhat.com - 2.142060-2
 - Perl 5.20 rebuild
diff --git a/sources b/sources
index 4f7a0de..2681d7b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-753bcb213e794e1e39e5a1c6ed8ddf02  CPAN-Meta-2.142690.tar.gz
+c07f73197dc3ba869d131e94d1ab93fb  CPAN-Meta-2.143240.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166041] CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041

Wolfgang Ulbrich chat-to...@raveit.de changed:

   What|Removed |Added

 CC||vda...@redhat.com
  Flags||needinfo?(vda...@redhat.com
   ||)



--- Comment #8 from Wolfgang Ulbrich chat-to...@raveit.de ---
Why did you add my email address again?
I do not maintain or co-maintain any package which use jquery ui.
And cinnamon isn't affected.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=MBDvKtp4tya=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

File ExtUtils-Manifest-1.69.tar.gz uploaded to lookaside cache by ppisar

2014-11-20 Thread Petr Pisar
A file has been added to the lookaside cache for perl-ExtUtils-Manifest:

cb001f834cc0f0e992d8c780eace6f2f  ExtUtils-Manifest-1.69.tar.gz
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[perl-CPAN-Meta] Created tag perl-CPAN-Meta-2.143240-1.fc22

2014-11-20 Thread Paul Howarth
The lightweight tag 'perl-CPAN-Meta-2.143240-1.fc22' was created pointing to:

 2251b0b... Update to 2.143240
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1166064] CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166064

Vasyl Kaigorodov vkaig...@redhat.com changed:

   What|Removed |Added

 CC|chat-to...@raveit.de|
 Whiteboard|impact=moderate,public=2012 |impact=moderate,public=2012
   |1127,reported=20141120,sour |1127,reported=20141120,sour
   |ce=internet,cvss2=4.3/AV:N/ |ce=internet,cvss2=4.3/AV:N/
   |AC:M/Au:N/C:N/I:P/A:N,fedor |AC:M/Au:N/C:N/I:P/A:N,fedor
   |a-all/asterisk-gui=affected |a-all/asterisk-gui=affected
   |,fedora-all/beacon=affected |,fedora-all/beacon=affected
   |,fedora-all/blender=affecte |,fedora-all/blender=affecte
   |d,fedora-all/bodhi=affected |d,fedora-all/bodhi=affected
   |,fedora-all/cacti=affected, |,fedora-all/cacti=affected,
   |fedora-all/calibre=affected |fedora-all/calibre=affected
   |,fedora-all/cinnamon=affect |,fedora-all/cinnamon=notaff
   |ed,fedora-all/ckeditor=affe |ected,fedora-all/ckeditor=a
   |cted,fedora-all/cobbler=aff |ffected,fedora-all/cobbler=
   |ected,fedora-all/couchdb=af |affected,fedora-all/couchdb
   |fected,fedora-all/cumin=aff |=affected,fedora-all/cumin=
   |ected,fedora-all/django-typ |affected,fedora-all/django-
   |epad=affected,fedora-all/dl |typepad=affected,fedora-all
   |=affected,fedora-all/dokuwi |/dl=affected,fedora-all/dok
   |ki=affected,fedora-all/drup |uwiki=affected,fedora-all/d
   |al6=affected,fedora-all/dru |rupal6=affected,fedora-all/
   |pal7=affected,fedora-all/dr |drupal7=affected,fedora-all
   |upal7-jquery_update=affecte |/drupal7-jquery_update=affe
   |d,fedora-all/fish=affected, |cted,fedora-all/fish=affect
   |fedora-all/fityk=affected,f |ed,fedora-all/fityk=affecte
   |edora-all/freeipa=affected, |d,fedora-all/freeipa=affect
   |fedora-all/gallery3=affecte |ed,fedora-all/gallery3=affe
   |d,fedora-all/global=affecte |cted,fedora-all/global=affe
   |d,fedora-all/graphite-web=a |cted,fedora-all/graphite-we
   |ffected,fedora-all/hotot=af |b=affected,fedora-all/hotot
   |fected,fedora-all/ikiwiki=a |=affected,fedora-all/ikiwik
   |ffected,fedora-all/libgda=a |i=affected,fedora-all/libgd
   |ffected,fedora-all/mediawik |a=affected,fedora-all/media
   |i=affected,fedora-all/mojom |wiki=affected,fedora-all/mo
   |ojo=affected,fedora-all/nod |jomojo=affected,fedora-all/
   |ejs-should=affected,fedora- |nodejs-should=affected,fedo
   |all/OpenLP=affected,fedora- |ra-all/OpenLP=affected,fedo
   |all/openslides=affected,fed |ra-all/openslides=affected,
   |ora-all/openteacher=affecte |fedora-all/openteacher=affe
   |d,fedora-all/orbited=affect |cted,fedora-all/orbited=aff
   |ed,fedora-all/perl-Mojolici |ected,fedora-all/perl-Mojol
   |ous=affected,fedora-all/php |icious=affected,fedora-all/
   |PgAdmin=affected,fedora-all |phpPgAdmin=affected,fedora-
   |/python-backlash=affected,f |all/python-backlash=affecte
   |edora-all/python-django=aff |d,fedora-all/python-django=
   |ected,fedora-all/python-dja |affected,fedora-all/python-
   |ngo-debug-toolbar=affected, |django-debug-toolbar=affect
   |fedora-all/python-django-ty |ed,fedora-all/python-django
   |pepadapp=affected,fedora-al |-typepadapp=affected,fedora
   |l/python-django14=affected, |-all/python-django14=affect
   |fedora-all/python-django15= |ed,fedora-all/python-django
   |affected,fedora-all/python- |15=affected,fedora-all/pyth
   |flask-debugtoolbar=affected |on-flask-debugtoolbar=affec
   |,fedora-all/python-pebl=aff |ted,fedora-all/python-pebl=
   |ected,fedora-all/python-sph |affected,fedora-all/python-
   |inx=affected,fedora-all/pyt |sphinx=affected,fedora-all/
   |hon-tw-jquery=affected,fedo |python-tw-jquery=affected,f
   |ra-all/python-tw2-jqplugins |edora-all/python-tw2-jqplug
   |-flot=affected,fedora-all/p |ins-flot=affected,fedora-al
   |ython-tw2-jquery=affected,f |l/python-tw2-jquery=affecte
   |edora-all/python-werkzeug=a |d,fedora-all/python-werkzeu
   |ffected,fedora-all/python-X |g=affected,fedora-all/pytho

[Bug 1166041] CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1166041

Pavel Zhukov pa...@zhukoff.net changed:

   What|Removed |Added

 CC|pa...@zhukoff.net   |

Vasyl Kaigorodov vkaig...@redhat.com changed:

   What|Removed |Added

 CC|chat-to...@raveit.de|
  Flags|needinfo?(vda...@redhat.com |
   |)   |



--- Comment #9 from Vasyl Kaigorodov vkaig...@redhat.com ---
(In reply to Wolfgang Ulbrich from comment #8)
 Why did you add my email address again?
 I do not maintain or co-maintain any package which use jquery ui.
 And cinnamon isn't affected.

Sorry for the noise, Wolfgang. It's another issue, and another bug which is
treated separately - I'm marking cinnamon as notaffected here as well.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=PqDKwHoYBva=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1157488] perl-DBD-CSV-0.45 is available

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1157488

Petr Pisar ppi...@redhat.com changed:

   What|Removed |Added

 CC||ppi...@redhat.com
   Fixed In Version||perl-DBD-CSV-0.45-1.fc22



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=NxrZhk5nYAa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 751886] CVE-2011-4115 perl-Parallel-ForkManager: insecure temporary file usage

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=751886

Ján Rusnačko jrusn...@redhat.com changed:

   What|Removed |Added

 CC||jrusn...@redhat.com
 Whiteboard|impact=low,public=20110518, |impact=low,public=20110518,
   |reported=2007,source=ge |reported=2007,source=ge
   |ntoo,cvss2=1.9/AV:L/AC:M/Au |ntoo,cvss2=1.9/AV:L/AC:M/Au
   |:N/C:N/I:P/A:N,fedora-all/p |:N/C:N/I:P/A:N,fedora-all/p
   |erl-Parallel-ForkManager=af |erl-Parallel-ForkManager=af
   |fected,epel-5/perl-Parallel |fected,epel-5/perl-Parallel
   |-ForkManager=notaffected,ep |-ForkManager=notaffected,ep
   |el-6/perl-Parallel-ForkMana |el-6/perl-Parallel-ForkMana
   |ger=affected|ger=affected,cwe=CWE-377



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=SXiluKUXwYa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 758866] CVE-2011-4363 perl-Proc-ProcessTable: unsafe temporary file usage

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=758866

Ján Rusnačko jrusn...@redhat.com changed:

   What|Removed |Added

 CC||jrusn...@redhat.com
 Whiteboard|impact=low,public=2030, |impact=low,public=2030,
   |reported=2030,source=de |reported=2030,source=de
   |bian,cvss2=3.3/AV:L/AC:M/Au |bian,cvss2=3.3/AV:L/AC:M/Au
   |:N/C:N/I:P/A:P,epel-all/per |:N/C:N/I:P/A:P,epel-all/per
   |l-Proc-ProcessTable=affecte |l-Proc-ProcessTable=affecte
   |d,fedora-all/perl-Proc-Proc |d,fedora-all/perl-Proc-Proc
   |essTable=affected   |essTable=affected,cwe=CWE-3
   ||77



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=kguuQHueVka=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 818386] CVE-2012-2451 perl-Config-IniFiles: insecure temporary file usage

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=818386

Ján Rusnačko jrusn...@redhat.com changed:

   What|Removed |Added

 CC||jrusn...@redhat.com
 Whiteboard|impact=low,public=20120502, |impact=low,public=20120502,
   |reported=20120502,source=os |reported=20120502,source=os
   |s-sec,cvss2=1.9/AV:L/AC:M/A |s-sec,cvss2=1.9/AV:L/AC:M/A
   |u:N/C:N/I:P/A:N,fedora-all/ |u:N/C:N/I:P/A:N,fedora-all/
   |perl-Config-IniFiles=affect |perl-Config-IniFiles=affect
   |ed,epel-all/perl-Config-Ini |ed,epel-all/perl-Config-Ini
   |Files=affected,rhn_satellit |Files=affected,rhn_satellit
   |e_5.4/perl-Config-IniFiles= |e_5.4/perl-Config-IniFiles=
   |wontfix,rhn_proxy_5.3/perl- |wontfix,rhn_proxy_5.3/perl-
   |Config-IniFiles=wontfix |Config-IniFiles=wontfix,cwe
   ||=CWE-377



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=K5vhvYysjNa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1062424] CVE-2014-1875 perl-Capture-Tiny: insecure temporary file usage

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1062424

Ján Rusnačko jrusn...@redhat.com changed:

   What|Removed |Added

 CC||jrusn...@redhat.com
 Whiteboard|impact=low,public=20140206, |impact=low,public=20140206,
   |reported=20140206,source=os |reported=20140206,source=os
   |s-sec,cvss2=1.9/AV:L/AC:M/A |s-sec,cvss2=1.9/AV:L/AC:M/A
   |u:N/C:N/I:P/A:N,rhel-7/perl |u:N/C:N/I:P/A:N,rhel-7/perl
   |-Capture-Tiny=affected,rhsc |-Capture-Tiny=affected,rhsc
   |l-1/perl516-perl-Capture-Ti |l-1/perl516-perl-Capture-Ti
   |ny=affected,fedora-all/perl |ny=affected,fedora-all/perl
   |-Capture-Tiny=affected  |-Capture-Tiny=affected,cwe=
   ||(CWE-377CWE-732)



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=22F3ONQwpJa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1074720] CVE-2014-2277 perltidy: insecure temporary file creation

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1074720

Ján Rusnačko jrusn...@redhat.com changed:

   What|Removed |Added

 CC||jrusn...@redhat.com
 Whiteboard|impact=low,public=20140303, |impact=low,public=20140303,
   |reported=20140304,source=de |reported=20140304,source=de
   |bian,cvss2=2.1/AV:L/AC:L/Au |bian,cvss2=2.1/AV:L/AC:L/Au
   |:N/C:N/I:P/A:N,rhel-6/perlt |:N/C:N/I:P/A:N,rhel-6/perlt
   |idy=defer,rhel-7/perltidy=d |idy=defer,rhel-7/perltidy=d
   |efer,fedora-all/perltidy=af |efer,fedora-all/perltidy=af
   |fected,epel-5/perltidy=affe |fected,epel-5/perltidy=affe
   |cted|cted,cwe=(CWE-377CWE-367)



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=NahMGpLdhRa=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

[Bug 1135624] CVE-2014-5509 perl-Clipboard: insecure temporary file usage

2014-11-20 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1135624

Ján Rusnačko jrusn...@redhat.com changed:

   What|Removed |Added

 CC||jrusn...@redhat.com
 Whiteboard|impact=low,public=20140829, |impact=low,public=20140829,
   |reported=20140829,source=os |reported=20140829,source=os
   |s-security,cvss2=2.1/AV:L/A |s-security,cvss2=2.1/AV:L/A
   |C:L/Au:N/C:N/I:P/A:N,fedora |C:L/Au:N/C:N/I:P/A:N,fedora
   |-all/perl-Clipboard=affecte |-all/perl-Clipboard=affecte
   |d,epel-7/perl-Clipboard=aff |d,epel-7/perl-Clipboard=aff
   |ected   |ected,cwe=CWE-377



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=LIEvawDN5ga=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

  1   2   >