Bug 736759

Summary: fcgi package contains embedded copy of FCGI module
Product: [Fedora] Fedora EPEL Reporter: Till Maas <opensource>
Component: perl-FCGIAssignee: Iain Arnell <iarnell>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: el5CC: cweyl, iarnell, jlieskov, mmaslano, opensource, perl-devel, tremble
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
URL: http://search.cpan.org/dist/FCGI/FCGI.PL
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 736613 Environment:
Last Closed: 2011-09-09 03:26:27 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 736612, 736613    
Bug Blocks:    

Description Till Maas 2011-09-08 15:55:17 UTC 
+++ This bug was initially created as a clone of Bug #736613 +++

+++ This bug was initially created as a clone of Bug #736612 +++

Description of problem:
The fcgi package in EPEL-6 contains embedded copy of perl Fast CGI (FCGI) module from CPAN:
[1] http://search.cpan.org/dist/FCGI/FCGI.PL

But there already is dedicated, system perl-FCGI package, present in EPEL-6.
Thus fcgi package should depend on perl-FCGI package, rather than using its own embbedded copy (so in case of security flaw in perl-FCGI, the fcgi package won't need to be updated too).

Version-Release number of selected component (if applicable):
fcgi-2.4.0-10.el6.src.rpm

How reproducible:
Always

Steps to Reproduce:
1. # pwd
../BUILD/fcgi-2.4.0
2. fcgi-2.4.0]# cd perl/
3. perl]# ls
aclocal.m4  configure     echo.PL           FCGI.PL  Makefile.PL  oldinterface.pod  remote.PL    typemap
ChangeLog   configure.in  fcgi_config.h.in  FCGI.XL  MANIFEST     README            threaded.PL  version.pm
  
Actual results:
Own copy of CPAN FCGI module is embbeded in fcgi package.

Expected results:
EPEL-6 fcgi package uses system perl-FCGI package.

--- Additional comment from opensource till.name on 2011-09-08 17:52:55 CEST ---

fcgi does not use but provide the perl module in a sub package fcgi-perl. Afaics perl-FCGI needs to obsolete fcgi-perl according to these Guidelines:

https://fedoraproject.org/wiki/Packaging:Guidelines#Renaming.2FReplacing_Existing_Packages
https://fedoraproject.org/wiki/Package_Renaming_Process#Re-review_required

Since the perl-FCGI maintainer is the co-maintainer of fcgi wrt. the -perl subpackage, I reassign this bug to perl-FCGI to take care of removing the -perl subpackage from fcgi and addding the proper Provides/Obsoletes etc to perl-FCGI. Also any provenpackager is welcome to perform the required changes to fcgi-perl.

Btw. fcgi-perl exists in EPEL 5, too.
Comment 1 Iain Arnell 2011-09-09 03:26:27 UTC 
But perl-FCGI does not exist in EL5, so there's no library duplication. It's okay for fcgi-perl to provide Perl's FCGI module here.