Fedora Account System
Red Hat Associate
Red Hat Customer
Releases retrieved: 6.03 Upstream release that is considered latest: 6.03 Current version/release in rawhide: 6.02-43.fc44 URL: http://search.cpan.org/dist/WWW-RobotRules/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/3506/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/perl-WWW-RobotRules
Scratch build failed. Details below: BuilderException: Build failed: Command '['rpmbuild', '-D', '_sourcedir .', '-D', '_topdir .', '-bs', '/var/tmp/thn-e06uke9q/perl-WWW-RobotRules.spec']' returned non-zero exit status 1. StdOut: Building target platforms: noarch Building for target noarch setting SOURCE_DATE_EPOCH=1779494400 error: Bad file: WWW-RobotRules-6.03.tar.gz: No such file or directory RPM build errors: Bad file: WWW-RobotRules-6.03.tar.gz: No such file or directory Traceback: File "/usr/local/lib/python3.14/site-packages/hotness/use_cases/package_scratch_build_use_case.py", line 55, in build result = self.builder.build(request.package, request.opts) File "/usr/local/lib/python3.14/site-packages/hotness/builders/koji.py", line 251, in build raise BuilderException( str(exc), value=output, std_out=std_out, std_err=std_err ) If you think this issue is caused by some bug in the-new-hotness, please report it on the-new-hotness issue tracker: https://github.com/fedora-infra/the-new-hotness/issues
Created attachment 2142424 [details] Update to 6.03 (#2480875)
Changes: 6.03 2026-05-23 02:23:28Z - Doing a proper version bump. For rawhide, F44 and F43
There was accidental change from 6.02 to 6.02: 6.02 2026-05-21 14:45:27Z - WWW::RobotRules::AnyDBM_File::agent() no longer truncates the on-disk cache through an untie/tie(O_TRUNC) sequence. Stale-data reset now goes through the tied-hash CLEAR, eliminating a symlink-follow race that a local attacker with write access to the cache directory could exploit to overwrite arbitrary files writable by the crawler user. - The on-disk cache file mode has been tightened from 0640 to 0600. - t/rules-dbm.t has been hardened against symlink attacks on its tempfile during package builds. - A new SECURITY CONSIDERATIONS POD section documents the residual caller-trust requirement: the constructor's tie still follows symlinks because AnyDBM_File cannot portably plumb O_NOFOLLOW, so the caller must store the cache file in a directory writable only by the user that runs the code. - References: CWE-377, CWE-378, CWE-379.
Many changes in module, only for Fedora Rawhide.