Bug 736613

Summary: fcgi package contains embedded copy of FCGI module
Product: [Fedora] Fedora EPEL Reporter: Jan Lieskovsky <jlieskov>
Component: perl-FCGIAssignee: Iain Arnell <iarnell>
Status: CLOSED WONTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: el6CC: cweyl, iarnell, jlieskov, mmaslano, opensource, perl-devel, tremble
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
URL: http://search.cpan.org/dist/FCGI/FCGI.PL
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 736612
: 736759 (view as bug list) Environment:
Last Closed: 2011-09-09 04:07:26 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
Bug Depends On: 736612    
Bug Blocks: 736759    

Description Jan Lieskovsky 2011-09-08 08:59:44 UTC
+++ This bug was initially created as a clone of Bug #736612 +++

Description of problem:
The fcgi package in EPEL-6 contains embedded copy of perl Fast CGI (FCGI) module from CPAN:
[1] http://search.cpan.org/dist/FCGI/FCGI.PL

But there already is dedicated, system perl-FCGI package, present in EPEL-6.
Thus fcgi package should depend on perl-FCGI package, rather than using its own embbedded copy (so in case of security flaw in perl-FCGI, the fcgi package won't need to be updated too).

Version-Release number of selected component (if applicable):
fcgi-2.4.0-10.el6.src.rpm

How reproducible:
Always

Steps to Reproduce:
1. # pwd
../BUILD/fcgi-2.4.0
2. fcgi-2.4.0]# cd perl/
3. perl]# ls
aclocal.m4  configure     echo.PL           FCGI.PL  Makefile.PL  oldinterface.pod  remote.PL    typemap
ChangeLog   configure.in  fcgi_config.h.in  FCGI.XL  MANIFEST     README            threaded.PL  version.pm
  
Actual results:
Own copy of CPAN FCGI module is embbeded in fcgi package.

Expected results:
EPEL-6 fcgi package uses system perl-FCGI package.

Comment 1 Till Maas 2011-09-08 15:52:55 UTC
fcgi does not use but provide the perl module in a sub package fcgi-perl. Afaics perl-FCGI needs to obsolete fcgi-perl according to these Guidelines:

https://fedoraproject.org/wiki/Packaging:Guidelines#Renaming.2FReplacing_Existing_Packages
https://fedoraproject.org/wiki/Package_Renaming_Process#Re-review_required

Since the perl-FCGI maintainer is the co-maintainer of fcgi wrt. the -perl subpackage, I reassign this bug to perl-FCGI to take care of removing the -perl subpackage from fcgi and addding the proper Provides/Obsoletes etc to perl-FCGI. Also any provenpackager is welcome to perform the required changes to fcgi-perl.

Btw. fcgi-perl exists in EPEL 5, too.

Comment 2 Iain Arnell 2011-09-09 04:07:26 UTC
I've cherry-picked the fix for bug 736612 to el6 branch (and fixed the license tag). Since perl-FCGI already obsoletes fcgi-perl package, I don't think it's necessary to push an update for this.