Bug#1014293: libcpan-reporter-smoker-perl: FTBFS with Perl 5.36: tries to smoke the whole CPAN during build

Niko Tyni ntyni at debian.org
Sun Jul 3 15:15:50 BST 2022


Source: libcpan-reporter-smoker-perl
Version: 0.29-2
Tags: ftbfs upstream
User: debian-perl at lists.debian.org
Usertags: perl-5.36-transition

This package fails to build from source with Perl 5.36 (currently in
experimental.)

Build log at

  http://perl.debian.net/rebuild-logs/perl-5.36-throwaway/libcpan-reporter-smoker-perl_0.29-2/libcpan-reporter-smoker-perl_0.29-2_amd64-2022-06-13T03:37:58Z.build

It looks like the build times out because the test suite
tries to test the whole CPAN. I believe this is because
of the recent mitigations for CPAN checksums vulnerabilities.

  http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html

   [CPAN.pm 2.29] now ignores any previously configured urllist and only
   uses cpan.org. If you want it to honour the urllist parameter instead,
   you must set the new pushy_https parameter to false.

I assume but haven't tested that setting pushy_https => 0 in
t/data/MyConfig.pm will fix this.

Upstream is most probably affected similarly as there are no test reports
for CPAN-Reporter-Smoker since Perl 5.35.6.
-- 
Niko Tyni   ntyni at debian.org



More information about the pkg-perl-maintainers mailing list