Bug#1012704: libmath-bigint-perl: busy loop with bignum bitwise operations

[Roland Rosenfeld]

On Mo, 19 Sep 2022, Niko Tyni wrote:

> The bug is not specific to any Perl versions but seems to be fully
> contained in Math::BigInt / Math::BigFloat.  The versions of those
> modules that ship with Perl 5.34.0 (Math::BigInt 1.999818) and Perl
> 5.36.0 (Math::BigInt 1.999830) are not affected by the bug, but you
> have the newer separate libmath-bigint-perl package installed where the
> bug triggers.
> 
> It seems to have regressed upstream around 1.999832 (where it started
> to spit errors) and 1.999834 (where the errors became infinite recursion.)
> The first version in Debian that had the bug was 1.999835-1, which
> fits your upgrade timeline.
> 
> So I'm reassigning this once more. Also raising the severity as this looks
> rather Bad.

Since it first wasn't clear to me (and maybe others): There are two
versions of Math::BigInt available in bookworm at the moment:
- 1.999830 in perl-modules-5.36
- 1.999837 in libmath-bigint-perl

Since 1.999837 breaks at least ipcalc, it may be better to remove
libmath-bigint-perl 1.999837 from bookworm than releasing with a
broken version.

Since this means a fallback to 1.999830 from perl-modules-5.36, this
should not be an issue.

Greetings
Roland