Bug 549216
| Summary: | Rawhide rebuild of perl-XML-Parser for perl 5.10.1 fails in %check | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Robert Scheck <redhat-bugzilla> | ||||
| Component: | expat | Assignee: | Joe Orton <jorton> | ||||
| Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | high | Docs Contact: | |||||
| Priority: | low | ||||||
| Version: | rawhide | CC: | bugzilla-redhat, daniel.leidert.spam, jorton, kasal, lkundrak, mmaslano | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2010-02-09 09:42:45 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Robert Scheck
2009-12-20 23:13:35 UTC
Created attachment 379534 [details]
build.log
This is broken by expat-1.95.8-CVE-2009-3720.patch (of expat) package (and thus is a regression that affects EL-5, F-11 and F-12 as well) , with it XML::Parser fails to expand an entity. Haven't looked more into it though.
syntax error at line 2, column 3, byte 28:
<!ENTITY % foo "IGNORE">
<![%foo;[
==^
<!ATTLIST foo bar CDATA "baz">
]]>
(code)
use XML::Parser;
my $parser = new XML::Parser (
ErrorContext => 2,
NoLWP => 1,
ParseParamEnt => 1
);
open (DTD, '>foo.dtd');
print DTD <<EOF;
<!ENTITY % foo "IGNORE">
<![%foo;[
<!ATTLIST foo bar CDATA "baz">
]]>
EOF
close (DTD);
$parser->parse(<<EOF);
<?xml version="1.0" ?>
<!DOCTYPE foo SYSTEM 'foo.dtd' []>
<foo/>
EOF
This is a regression from the patch for CVE-2009-3560, not for CVE-2009-3720. The revised fix is here: http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?r1=1.164&r2=1.166. Please fix it as mentioned in previous comment. A fixed expat is already in the buildroot - can you retry the build? Failed with expat-devel-2.0.1-9.fc13.x86_64 in mentioned test. http://koji.fedoraproject.org/koji/taskinfo?taskID=1968773 Sorry about that, Marcela. There's now a revised fix built, can you retry your build? It works for me locally. If fails in my updated rawhide in test section. Still the same problem as in comment #2. What version of expat do you have? It should work with expat-2.0.1-10.fc13. Must be slow mirror. It does work with expat-2.0.1-10. Thanks. |