Bug 2130625 (perl-Inline-epel9) - Please branch and build perl-Inline in epel9
Summary: Please branch and build perl-Inline in epel9
Keywords:
Status: CLOSED ERRATA
Alias: perl-Inline-epel9
Product: Fedora EPEL
Classification: Fedora
Component: perl-Inline
Version: epel9
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Jitka Plesnikova
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On: perl-Inline-Files-epel9 perl-TestML-epel9
Blocks: 2130616
TreeView+ depends on / blocked
 
Reported: 2022-09-28 18:01 UTC by Michel Lind
Modified: 2022-11-21 01:13 UTC (History)
9 users (show)

Fixed In Version: perl-Inline-0.86-10.el9
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-11-21 01:13:41 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Michel Lind 2022-09-28 18:01:18 UTC
Please branch and build perl-Inline in epel9.

If you do not wish to maintain perl-Inline in epel9,
or do not think you will be able to do this in a timely manner,
the EPEL Packagers SIG would be happy to be a co-maintainer of the package;
please add the epel-packagers-sig group through
https://src.fedoraproject.org/rpms/perl-Inline/addgroup
and grant it commit access, or collaborator access on epel* branches.

I would also be happy to be a co-maintainer (FAS: salimma);
please add me through https://src.fedoraproject.org/rpms/perl-Inline/adduser

Comment 1 Jitka Plesnikova 2022-09-29 11:54:03 UTC
https://pagure.io/releng/fedora-scm-requests/issue/47825

Comment 2 Fedora Update System 2022-11-11 13:04:38 UTC
FEDORA-EPEL-2022-a935feca4a has been submitted as an update to Fedora EPEL 9. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-a935feca4a

Comment 3 Fedora Update System 2022-11-13 01:28:07 UTC
FEDORA-EPEL-2022-a935feca4a has been pushed to the Fedora EPEL 9 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-a935feca4a

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 4 Petr Pisar 2022-11-14 14:56:26 UTC
perl-Inline-0.86-10.el9 damages multi-line environment variables.

A reproducer with perl-Inline-C:

$ rm -rf _Inline; perl -Ilib -e 'use Inline Config => UNTAINT => 1; use Inline C => q{void foo(void) { return; }};'
In Inline::env_untaint() : Blindly untainting tainted fields in %ENV.
In Inline::check_config_file(): Blindly untainting Inline configuration file information.
In Inline::env_untaint() : Blindly untainting tainted fields in %ENV.
In Inline::obj_untaint() : Blindly untainting tainted fields in Inline object.
sh: which: line 1: syntax error: unexpected end of file
sh: error importing function definition for `which'
sh: which: line 1: syntax error: unexpected end of file
sh: error importing function definition for `which'
sh: which: line 1: syntax error: unexpected end of file
sh: error importing function definition for `which'

The error messages come from bash because BASH_FUNC_which%%=() shell function set in /etc/profile.d/which2.sh (which-2.21-28.el9). It's not reproducible in Fedora 38 because "which" package stopped defining the shell function.

The environment variable is damaged in Inline::env_untaint() with this regular expression:

      for (keys %ENV) {
          ($ENV{$_}) = $ENV{$_} =~ /(.*)/;
      }

That was confirmed with a debugging warnings around the regexp:

UNTAIN BEFORE: BASH_FUNC_which%%=() {  ( alias;
 eval ${which_declare} ) | /usr/bin/which --tty-only --read-alias --read-functions --show-tilde --show-dot $@
} at ../../perl-Inline/Inline-0.86/lib/Inline.pm line 1089.
UNTAIN AFTER: BASH_FUNC_which%%=() {  ( alias; at ../../perl-Inline/Inline-0.86/lib/Inline.pm line 1091.

A pure Inline reproducer:

$ perl -Ilib -e 'use Inline; $ENV{foo}="a\nb"; Inline::env_untaint(); print "<$ENV{foo}>\n"'
In Inline::env_untaint() : Blindly untainting tainted fields in %ENV.
<a>

A fix is posted at <https://github.com/ingydotnet/inline-pm/pull/80>.

Comment 5 Fedora Update System 2022-11-21 01:13:41 UTC
FEDORA-EPEL-2022-a935feca4a has been pushed to the Fedora EPEL 9 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.