Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.rc > #281926 > unrolled thread

Bug#964878: libgnupg-interface-perl: breaks monkeysphere-validation-agent

Back to article view | Back to linux.debian.bugs.rc

Contents

  Bug#964878: libgnupg-interface-perl: breaks monkeysphere-validation-agent Niko Tyni <ntyni@debian.org> - 2020-07-11 20:00 +0200
    Bug#964878: GnuPG::Interface doesn't work with Taint mode Andrew Ruthven <andrew@etc.gen.nz> - 2020-07-23 15:10 +0200
    Bug#964878: marked as done (libgnupg-interface-perl: breaks  monkeysphere-validation-agent) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2020-07-24 14:40 +0200

#281926 — Bug#964878: libgnupg-interface-perl: breaks monkeysphere-validation-agent

Package: libgnupg-interface-perl
Version: 1.00-1
Severity: serious
Affects: msva-perl, src:mod-gnutls
X-Debbugs-Cc: msva-perl@packages.debian.org, mod-gnutls@packages.debian.org

The new version of libgnupg-interface-perl breaks
/usr/bin/monkeysphere-validation-agent in msva-perl_0.9.2-1.

This also makes at least mod-gnutls fail to build in current sid.

Filing against libgnupg-interface-perl initially to prevent
accidental testing migration before this is solved.

  # monkeysphere-validation-agent 
  Insecure $ENV{PATH} while running with -T switch at /usr/share/perl5/GnuPG/Interface.pm line 336.
  Compilation failed in require at /usr/bin/monkeysphere-validation-agent line 22.
  BEGIN failed--compilation aborted at /usr/bin/monkeysphere-validation-agent line 22.
  Use of uninitialized value $line in pattern match (m//) at /usr/share/perl5/GnuPG/Interface.pm line 808.
  Use of uninitialized value $a in split at /usr/share/perl5/GnuPG/Interface.pm line 822.
  Use of uninitialized value $a in split at /usr/share/perl5/GnuPG/Interface.pm line 822.
  GnuPG Version 1.4 or 2.2+ required at /usr/share/perl5/Crypt/Monkeysphere/MSVA.pm line 50.
  Compilation failed in require at /usr/bin/monkeysphere-validation-agent line 22.
  BEGIN failed--compilation aborted at /usr/bin/monkeysphere-validation-agent line 22.
 
It would be good to have an autopkgtest check in msva-perl to spot
breakage such as this automatically.

-- 
Niko Tyni   ntyni@debian.org

[toc] | [next] | [standalone]

#282681 — Bug#964878: GnuPG::Interface doesn't work with Taint mode

Hey,

Because of the use of "exec", GnuPG::Interface isn't Taint safe. I've
prepared a patch and will hopefully have it uploaded soon.

Reported upstream with a patch here: 
https://rt.cpan.org/Ticket/Display.html?id=133041 .

Cheers,
Andrew

-- 
Andrew Ruthven, Wellington, New Zealand
andrew@etc.gen.nz              |
Catalyst Cloud:                | This space intentionally left blank
   https://catalystcloud.nz    |

[toc] | [prev] | [next] | [standalone]

#282792 — Bug#964878: marked as done (libgnupg-interface-perl: breaks monkeysphere-validation-agent)

[Multipart message — attachments visible in raw view] — view raw

Your message dated Fri, 24 Jul 2020 12:34:00 +0000
with message-id <E1jywtk-0008zM-L4@fasolo.debian.org>
and subject line Bug#964878: fixed in libgnupg-interface-perl 1.00-2
has caused the Debian Bug report #964878,
regarding libgnupg-interface-perl: breaks monkeysphere-validation-agent
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
964878: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=964878
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.rc

csiph-web