Monday 1st March 2010
Fedora Project
Updated libpng10 for Fedora 11 and 12 to 1.0.53 as this version has better resistance to decompression bombs
Local Packages
Updated moin to 1.9.2, fixing various security bugs including CVE-2010-0668 (major security issues in miscellaneous parts of moin) and CVE-2010-0669 (incomplete user profile input sanitizing)
Updated perl-MLDBM to 2.03, which resolves CPAN RT#54911 (test failure in t/storable_dbfile.t) but introduces a new build problem on old perls as a result of switching to a Module::Build-based installer; it's not at all obvious from the failure mode what the problem is:
$ perl Makefile.PL INSTALLDIRS=vendor Checking if your kit is complete... Looks good Writing Makefile for MLDBM $ make perl "-Iblib/arch" "-Iblib/lib" Build.PL Build Can't locate Module/Build.pm in @INC (@INC contains: blib/arch blib/lib /usr/lib/perl5/5.8.5/i386-linux-thread-multi /usr/lib/perl5/5.8.5 /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.4/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl/5.8.4 /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/site_perl/5.8.2 /usr/lib/perl5/site_perl/5.8.1 /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.4/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl/5.8.4 /usr/lib/perl5/vendor_perl/5.8.3 /usr/lib/perl5/vendor_perl/5.8.2 /usr/lib/perl5/vendor_perl/5.8.1 /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl .) at Build.PL line 2. BEGIN failed--compilation aborted at Build.PL line 2.
- However, as I've seen it before, I knew that this patch would resolve it:
--- MLDBM-2.03/Makefile.PL 2010-02-26 23:37:19.000000000 +0000 +++ MLDBM-2.03/Makefile.PL 2010-03-01 12:40:11.469691866 +0000 @@ -18,6 +18,7 @@ BUILD_REQUIRES => { 'Test::More' => 0, }, + 'PL_FILES' => {}, ); sub WriteMakefile1 { #Written by Alexandr Ciornii, version 0.21. Added by eumm-upgrade.This looks like the problem described in CPAN RT#45111 and but that should have been fixed in Module::Build 0.33 - MLDBM was built with Module::Build 0.36
Renamed libtidyp to tidyp (upstream name change) and made the package split like the tidy package, which of course it's a fork of
Rebuilt perl-Net-CIDR, perl-Net-CIDR-Lite, perl-Net-Server and perl-Number-Compare for perl 5.10.1 in devel branches