Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread Alexandr Ciornii
A specially created server ( http://blog.meldium.com/home/2014/4/10/testing-for-reverse-heartbleed , in Russian: http://www.xakep.ru/post/62350/default.asp ) can send similar request to client. But such attack has low probability. 2014-04-16 15:40 GMT+03:00 matthew.pers...@lazard.com: Does it

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread Matthew . Persico
Any reason why 5.18.2.2 excludes Math::Pari? Math::Pari is used (a couple of levels down) by Net::SFTP. Net::SFTP is the reason I converted TO Strawberry about three weeks ago. Please advise... -- Matthew O. Persico Lazard 30 Rockefeller Plaza New York, NY 10112 212 632 6136 From: kmx

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread kmx
The reason is simple - it does not build anymore as it is not able to find required pari source tarball at ftp://megrez.math.u-bordeaux.fr/pub/pari/unix/ Try: cpanm Math::Pari -v ... Getting GP/PARI from ftp://megrez.math.u-bordeaux.fr/pub/pari/unix/ Not in this directory, now chdir('OLD')...

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread Jan Dubois
On Wed, Apr 16, 2014 at 1:46 PM, kmx k...@atlas.cz wrote: The reason is simple - it does not build anymore as it is not able to find required pari source tarball at ftp://megrez.math.u-bordeaux.fr/pub/pari/unix/ Here is a quick-and-dirty patch to work around this (but hard-wires you to 2.1.7):

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread kmx
Excellent, I have put patched version at http://strawberryperl.com/package/kmx/perl-modules-patched/Math-Pari-2.01080605_patched.tar.gz Simply run: cpanm http://strawberryperl.com/package/kmx/perl-modules-patched/Math-Pari-2.01080605_patched.tar.gz -v -- kmx On 16.4.2014 22:50, Jan Dubois

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread Olivier Mengué
2014-04-16 15:04 GMT+02:00 Alexandr Ciornii alexcho...@gmail.com: A specially created server ( http://blog.meldium.com/home/2014/4/10/testing-for-reverse-heartbleed , in Russian: http://www.xakep.ru/post/62350/default.asp ) can send similar request to client. But such attack has low

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread Matthew . Persico
Suggestion - maybe you can pull the file that is being fetched (I assume its pari217.exe) and install it locally once and for all? If the pari lib is found locally, will the build bother to attempt to go out and get it? I worry that someday, pari217.exe will disappear. -- Matthew O. Persico

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread Jan Dubois
On Wed, Apr 16, 2014 at 2:35 PM, matthew.pers...@lazard.com wrote: Suggestion - maybe you can pull the file that is being fetched (I assume its pari217.exe) and install it locally once and for all? If the pari lib is found locally, will the build bother to attempt to go out and get it? It is