Bug 2492991 - perl-HTTP-Date-6.08 is available
Summary: perl-HTTP-Date-6.08 is available
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: perl-HTTP-Date
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Michal Josef Spacek
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-06-25 16:10 UTC by Upstream Release Monitoring
Modified: 2026-07-30 00:59 UTC (History)
3 users (show)

Fixed In Version: perl-HTTP-Date-6.08-1.fc44 perl-HTTP-Date-6.08-1.fc43
Clone Of:
Environment:
Last Closed: 2026-07-17 00:53:58 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
Update to 6.07 (#2492991) (1.08 KB, patch)
2026-06-25 16:10 UTC, Upstream Release Monitoring
no flags Details | Diff
Update to 6.08 (#2492991) (1.08 KB, patch)
2026-07-09 03:00 UTC, Upstream Release Monitoring
no flags Details | Diff

Description Upstream Release Monitoring 2026-06-25 16:10:13 UTC
Releases retrieved: 6.07
Upstream release that is considered latest: 6.07
Current version/release in rawhide: 6.06-8.fc44
URL: http://search.cpan.org/dist/HTTP-Date/

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/2976/


To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/perl-HTTP-Date

Comment 1 Upstream Release Monitoring 2026-06-25 16:10:22 UTC
Created attachment 2146639 [details]
Update to 6.07 (#2492991)

Comment 2 Upstream Release Monitoring 2026-06-25 16:15:38 UTC
the-new-hotness/release-monitoring.org's scratch build of perl-HTTP-Date-6.07-1.fc44.src.rpm for rawhide failed http://koji.fedoraproject.org/koji/taskinfo?taskID=147021151

Comment 3 Upstream Release Monitoring 2026-07-09 03:00:01 UTC
Releases retrieved: 6.08
Upstream release that is considered latest: 6.08
Current version/release in rawhide: 6.06-8.fc44
URL: http://search.cpan.org/dist/HTTP-Date/

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/2976/


To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/perl-HTTP-Date

Comment 4 Upstream Release Monitoring 2026-07-09 03:00:09 UTC
Created attachment 2148103 [details]
Update to 6.08 (#2492991)

Comment 5 Upstream Release Monitoring 2026-07-09 03:08:10 UTC
the-new-hotness/release-monitoring.org's scratch build of perl-HTTP-Date-6.08-1.fc44.src.rpm for rawhide failed http://koji.fedoraproject.org/koji/taskinfo?taskID=147579242

Comment 6 Michal Josef Spacek 2026-07-13 17:47:29 UTC
Changes:


6.08      2026-07-09 02:04:21Z
    - [SECURITY] Reject input longer than 64 characters in parse_date()
      to prevent quadratic regex backtracking (a denial of service) on
      hostile date strings. Fixes CVE-2026-14741. (Olaf Alders)
6.07      2026-06-25 15:12:09Z
    - Add test with Time::Zone (GH#25) (Michal Josef Špaček)
    - Add test with bad Time::Zone string (GH#26) (Michal Josef Špaček)
    - Add tests with negative time (GH#26) (Michal Josef Špaček)
    - Replace all instances of \d with [0-9] in regular expressions to
      reject non-ASCII Unicode digits, with a regression test (GH#27)
      (Robert Rothenberg)
    - Reject malformed ISO 8601 timezones with a doubled colon (GH#31)
      (Olaf Alders)
    - Document day/month/year ordering for numeric dates (GH#32) (Olaf
      Alders)

Comment 7 Fedora Update System 2026-07-14 07:21:00 UTC
FEDORA-2026-8cec3cbf5b (perl-HTTP-Date-6.08-1.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-8cec3cbf5b

Comment 8 Fedora Update System 2026-07-14 07:21:37 UTC
FEDORA-2026-b1bdb7c518 (perl-HTTP-Date-6.08-1.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-b1bdb7c518

Comment 9 Fedora Update System 2026-07-15 01:24:06 UTC
FEDORA-2026-8cec3cbf5b has been pushed to the Fedora 44 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-8cec3cbf5b`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-8cec3cbf5b

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 10 Fedora Update System 2026-07-15 01:41:55 UTC
FEDORA-2026-b1bdb7c518 has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-b1bdb7c518`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-b1bdb7c518

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 11 Fedora Update System 2026-07-17 00:53:58 UTC
FEDORA-2026-8cec3cbf5b (perl-HTTP-Date-6.08-1.fc44) has been pushed to the Fedora 44 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 12 Fedora Update System 2026-07-30 00:59:39 UTC
FEDORA-2026-b1bdb7c518 (perl-HTTP-Date-6.08-1.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.