From jkeen at verizon.net Mon Jan 3 09:55:28 2005 From: jkeen at verizon.net (James Keenan) Date: Mon Jan 3 09:55:31 2005 Subject: [Neworleans-pm] ExtUtils::ModuleMaker: new draft version Message-ID: I have uploaded a new draft version, 0.3207, of ExtUtils::ModuleMaker. This is the module for creating CPAN-compliant distributions which I discussed in my talk to neworleans.pm last month. The new version can be found at http://mysite.verizon.net/jkeen/perl/nolatalk/ExtUtils-ModuleMaker -0.3207.tar.gz Like the version I presented in New Orleans, this should merely be considered a *draft* version of EU::MM until such time as my revisions are accepted by Geoff Avery, the module's author. Unlike the version I presented in New Orleans, this version's modulemaker command-line utility should run without emitting warnings of uninitialized values. Correcting this problem required changing the interface to EU::MM::new() to take a hash reference rather than a list of hash-like key-value pairs. I would welcome feedback from all of you on these revisions -- particularly by trying out the modulemaker utility and letting me know if any more warnings appear or there are clumsy points to the interface. Thank you very much. Jim Keenan From estrabd at yahoo.com Wed Jan 5 16:23:21 2005 From: estrabd at yahoo.com (Brett D. Estrade) Date: Wed Jan 5 16:23:32 2005 Subject: [Neworleans-pm] irc? Message-ID: <1104963801.10597.212090321@webmail.messagingengine.com> Is there a nopm irc channel? http://www.brettsbsd.net/~estrabd From joey at joeykelly.net Wed Jan 5 17:39:11 2005 From: joey at joeykelly.net (Joey Kelly) Date: Wed Jan 5 17:32:15 2005 Subject: [Neworleans-pm] irc? In-Reply-To: <1104963801.10597.212090321@webmail.messagingengine.com> References: <1104963801.10597.212090321@webmail.messagingengine.com> Message-ID: <200501051739.11057.joey@joeykelly.net> On Wednesday 05 January 2005 4:23 pm, Brett D. Estrade spake: > Is there a nopm irc channel? Which do you want? #nopm or #nolapm? Join both on irc.freenode.net and let's figure it out. -- Joey Kelly < Minister of the Gospel | Linux Consultant > http://joeykelly.net "I may have invented it, but Bill made it famous." --- David Bradley, the IBM employee that invented CTRL-ALT-DEL From estrabd at yahoo.com Fri Jan 7 08:45:18 2005 From: estrabd at yahoo.com (Brett D. Estrade) Date: Fri Jan 7 08:45:31 2005 Subject: [Neworleans-pm] irc Message-ID: <1105109118.2002.212220269@webmail.messagingengine.com> Joey has kindly set up #nopm at irc.freenode.org; I'll update the wiki :) I am perlfan ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ http://www.brettsbsd.net/~estrabd From estrabd at yahoo.com Fri Jan 7 08:49:53 2005 From: estrabd at yahoo.com (Brett D. Estrade) Date: Fri Jan 7 08:50:00 2005 Subject: [Neworleans-pm] wiki Message-ID: <1105109393.2410.212220595@webmail.messagingengine.com> I updated info to include the irc channel; also I noticed the december meeting summary was not posted - if someone sends it to me, I will gladly do it. Brett ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ http://www.brettsbsd.net/~estrabd From glim at mycybernet.net Mon Jan 24 18:33:00 2005 From: glim at mycybernet.net (glim@mycybernet.net) Date: Mon Jan 24 18:32:43 2005 Subject: [Neworleans-pm] Yet Another Perl Conference North America 2005 announces call-for-papers Message-ID: YAPC::NA 2005 (Yet Another Perl Conference, North America) has just released its call-for-papers; potential and aspiring speakers can submit a presentation proposal via: http://yapc.org/America/cfp-2005.shtml The dates of the conference are Monday - Wednesday 27-29 June 2005. The location will be in downtown Toronto, Ontario, Canada. (Note that a different date block was previously announced, but has been moved to accomodate venue availability.) The close of the call-for-papers is April 18, 2005 at 11:59 pm. If you have any questions regarding the call-for-papers or speaking at YAPC::NA 2005 please email na-author@yapc.org We would love to hear from potential sponsors. Please contact the organizers at na-sponsor@yapc.org to learn about the benefits of sponsorship. Other information regarding the conference (e.g. venue, registration specifics) will be announced soon. We look forward to your submissions and a great conference! From estrabd at yahoo.com Thu Jan 27 05:51:39 2005 From: estrabd at yahoo.com (Brett D. Estrade) Date: Thu Jan 27 05:51:53 2005 Subject: [Neworleans-pm] [Full-Disclosure] [ GLSA 200501-38 ] Perl: rmtree and DBI tmpfile vulnerabilities Message-ID: <1106833899.22755.213705991@webmail.messagingengine.com> http://lists.netsys.com/pipermail/full-disclosure/2005-January/031237.html Synopsis ======== The Perl DBI library and File::Path::rmtree function are vulnerable to symlink attacks. Background ========== Perl is a cross platform programming language. The DBI is the standard database interface module for Perl. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-perl/dbi <= 1.38 *>= 1.37-r1 >= 1.38-r1 2 dev-lang/perl <= 5.8.6-r1 >= 5.8.6-r2 *>= 5.8.5-r3 *>= 5.8.4-r2 *>= 5.8.2-r2 ------------------------------------------------------------------- 2 affected packages on all of their supported architectures. ------------------------------------------------------------------- Description =========== Javier Fernandez-Sanguino Pena discovered that the DBI library creates temporary files in an insecure, predictable way (CAN-2005-0077). Paul Szabo found out that "File::Path::rmtree" also handles temporary files insecurely (CAN-2004-0452). ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ http://www.brettsbsd.net/~estrabd