Bug 736759 - fcgi package contains embedded copy of FCGI module
Summary: fcgi package contains embedded copy of FCGI module
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora EPEL
Classification: Fedora
Component: perl-FCGI
Version: el5
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
Assignee: Iain Arnell
QA Contact: Fedora Extras Quality Assurance
URL: http://search.cpan.org/dist/FCGI/FCGI.PL
Whiteboard:
Depends On: 736612 736613
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-09-08 15:55 UTC by Till Maas
Modified: 2011-09-09 03:26 UTC (History)
7 users (show)

Fixed In Version:
Clone Of: 736613
Environment:
Last Closed: 2011-09-09 03:26:27 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Till Maas 2011-09-08 15:55:17 UTC
+++ This bug was initially created as a clone of Bug #736613 +++

+++ This bug was initially created as a clone of Bug #736612 +++

Description of problem:
The fcgi package in EPEL-6 contains embedded copy of perl Fast CGI (FCGI) module from CPAN:
[1] http://search.cpan.org/dist/FCGI/FCGI.PL

But there already is dedicated, system perl-FCGI package, present in EPEL-6.
Thus fcgi package should depend on perl-FCGI package, rather than using its own embbedded copy (so in case of security flaw in perl-FCGI, the fcgi package won't need to be updated too).

Version-Release number of selected component (if applicable):
fcgi-2.4.0-10.el6.src.rpm

How reproducible:
Always

Steps to Reproduce:
1. # pwd
../BUILD/fcgi-2.4.0
2. fcgi-2.4.0]# cd perl/
3. perl]# ls
aclocal.m4  configure     echo.PL           FCGI.PL  Makefile.PL  oldinterface.pod  remote.PL    typemap
ChangeLog   configure.in  fcgi_config.h.in  FCGI.XL  MANIFEST     README            threaded.PL  version.pm
  
Actual results:
Own copy of CPAN FCGI module is embbeded in fcgi package.

Expected results:
EPEL-6 fcgi package uses system perl-FCGI package.

--- Additional comment from opensource till.name on 2011-09-08 17:52:55 CEST ---

fcgi does not use but provide the perl module in a sub package fcgi-perl. Afaics perl-FCGI needs to obsolete fcgi-perl according to these Guidelines:

https://fedoraproject.org/wiki/Packaging:Guidelines#Renaming.2FReplacing_Existing_Packages
https://fedoraproject.org/wiki/Package_Renaming_Process#Re-review_required

Since the perl-FCGI maintainer is the co-maintainer of fcgi wrt. the -perl subpackage, I reassign this bug to perl-FCGI to take care of removing the -perl subpackage from fcgi and addding the proper Provides/Obsoletes etc to perl-FCGI. Also any provenpackager is welcome to perform the required changes to fcgi-perl.

Btw. fcgi-perl exists in EPEL 5, too.

Comment 1 Iain Arnell 2011-09-09 03:26:27 UTC
But perl-FCGI does not exist in EL5, so there's no library duplication. It's okay for fcgi-perl to provide Perl's FCGI module here.


Note You need to log in before you can comment on or make changes to this bug.