Bug 736613 - fcgi package contains embedded copy of FCGI module
Summary: fcgi package contains embedded copy of FCGI module
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora EPEL
Classification: Fedora
Component: perl-FCGI
Version: el6
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
Assignee: Iain Arnell
QA Contact: Fedora Extras Quality Assurance
URL: http://search.cpan.org/dist/FCGI/FCGI.PL
Whiteboard:
Depends On: 736612
Blocks: 736759
TreeView+ depends on / blocked
 
Reported: 2011-09-08 08:59 UTC by Jan Lieskovsky
Modified: 2011-09-09 04:07 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 736612
: 736759 (view as bug list)
Environment:
Last Closed: 2011-09-09 04:07:26 UTC


Attachments (Terms of Use)

Description Jan Lieskovsky 2011-09-08 08:59:44 UTC
+++ This bug was initially created as a clone of Bug #736612 +++

Description of problem:
The fcgi package in EPEL-6 contains embedded copy of perl Fast CGI (FCGI) module from CPAN:
[1] http://search.cpan.org/dist/FCGI/FCGI.PL

But there already is dedicated, system perl-FCGI package, present in EPEL-6.
Thus fcgi package should depend on perl-FCGI package, rather than using its own embbedded copy (so in case of security flaw in perl-FCGI, the fcgi package won't need to be updated too).

Version-Release number of selected component (if applicable):
fcgi-2.4.0-10.el6.src.rpm

How reproducible:
Always

Steps to Reproduce:
1. # pwd
../BUILD/fcgi-2.4.0
2. fcgi-2.4.0]# cd perl/
3. perl]# ls
aclocal.m4  configure     echo.PL           FCGI.PL  Makefile.PL  oldinterface.pod  remote.PL    typemap
ChangeLog   configure.in  fcgi_config.h.in  FCGI.XL  MANIFEST     README            threaded.PL  version.pm
  
Actual results:
Own copy of CPAN FCGI module is embbeded in fcgi package.

Expected results:
EPEL-6 fcgi package uses system perl-FCGI package.

Comment 1 Till Maas 2011-09-08 15:52:55 UTC
fcgi does not use but provide the perl module in a sub package fcgi-perl. Afaics perl-FCGI needs to obsolete fcgi-perl according to these Guidelines:

https://fedoraproject.org/wiki/Packaging:Guidelines#Renaming.2FReplacing_Existing_Packages
https://fedoraproject.org/wiki/Package_Renaming_Process#Re-review_required

Since the perl-FCGI maintainer is the co-maintainer of fcgi wrt. the -perl subpackage, I reassign this bug to perl-FCGI to take care of removing the -perl subpackage from fcgi and addding the proper Provides/Obsoletes etc to perl-FCGI. Also any provenpackager is welcome to perform the required changes to fcgi-perl.

Btw. fcgi-perl exists in EPEL 5, too.

Comment 2 Iain Arnell 2011-09-09 04:07:26 UTC
I've cherry-picked the fix for bug 736612 to el6 branch (and fixed the license tag). Since perl-FCGI already obsoletes fcgi-perl package, I don't think it's necessary to push an update for this.


Note You need to log in before you can comment on or make changes to this bug.