Re: StrawberryPerl and the OpenSSL "heartbleed" bug

The reason is simple - it does not build anymore as it is not able to find 
required pari source tarball at ftp://megrez.math.u-bordeaux.fr/pub/pari/unix/

Try: cpanm Math::Pari -v

...
Getting GP/PARI from ftp://megrez.math.u-bordeaux.fr/pub/pari/unix/
Not in this directory, now chdir('OLD')...
Did not find any file matching 
/((?:.*\/)?pari\W*(?!2\.(?:[3-9]|\d\d+)\.)(\d+\.\d+\.\d+).*\.t(?:ar\.)?gz)$/ via 
FTP
...
Not in this directory, trying 
`ftp://megrez.math.u-bordeaux.fr/pub/pari/unix/OLD/'...
Did not find any file matching 
/((?:.*\/)?pari\W*(?!2\.(?:[3-9]|\d\d+)\.)(\d+\.\d+\.\d+).*\.t(?:ar\.)?gz)$/ via 
FTP.
...

In January 2014 the installation worked so that's why it is included in 
5.18.2.1 and not in 5.18.2.2

Another trouble with Math::Pari (in fact it is a trouble with underlying 
pari library) is that it has never built correctly with 64bit compiler on 
MS Windows.

--
kmx

On 16.4.2014 22:07, [email protected] wrote:
> Any reason why 5.18.2.2 excludes Math::Pari?
>
> Math::Pari is used (a couple of levels down) by Net::SFTP. Net::SFTP is 
> the reason I converted TO Strawberry about three weeks ago.
>
> Please advise...
>
> -- 
> Matthew O. Persico
>
> Lazard
> 30 Rockefeller Plaza
> New York, NY 10112
> 212 632 6136
>
>
>
> From: kmx <[email protected]>
> To: [email protected]
> Date: 04/16/2014 01:31 AM
> Subject: Re: StrawberryPerl and the OpenSSL "heartbleed" bug
> ---------------------------------------------------------------------------
>
>
>
> Olivier,
>
> You can try updated strawberry perl from:
> _
> __http://strawberryperl.com/download/5.18.2.2/strawberry-perl-5.18.2.2-32bit.msi__
> __http://strawberryperl.com/download/5.18.2.2/strawberry-perl-5.18.2.2-64bit.msi__
> __http://strawberryperl.com/download/5.18.2.2/strawberry-perl-5.18.2.2-32bit.zip__
> __http://strawberryperl.com/download/5.18.2.2/strawberry-perl-5.18.2.2-64bit.zip__
> __http://strawberryperl.com/download/5.18.2.2/strawberry-perl-5.18.2.2-32bit-portable.zip__
> __http://strawberryperl.com/download/5.18.2.2/strawberry-perl-5.18.2.2-64bit-portable.zip_
>
> --
> kmx
>
> On 15.4.2014 0:36, kmx wrote:
> Hi,
>
> you can get updated openssl binaries from:
> - _http://strawberryperl.com/package/kmx/64_libs/gcc47-2014Q1/_
> - _http://strawberryperl.com/package/kmx/32_libs/gcc47-2014Q1/_
>
> I am considering releasing strawberry perl 5.18.2.2 (with new openssl) 
> before the end of April.
>
> --
> kmx
>
> On 12.4.2014 20:45, Olivier Mengué wrote:
> Hi,
>
> You have probably heard of the now famous "heartblead" bug of the OpenSSL 
> library.
> _http://heartbleed.com/_
>
> StrawberryPerl is bundled with a binary of the OpenSSL library so I'm 
> wondering if StrawberryPerl is affected by the bug.
>
> I had a look at the release notes of StrawberryPerl to look for the 
> version number of the OpenSSL and all versions of StrawberryPerl since at 
> least 5.16.0.1 have an OpenSSL in the range affected by the heartbleed bug.
>
> It would be helpful to have an official statement from the StrawberryPerl 
> team regarding this issue and to display it prominently on the 
> StrawberryPerl.com page.
>
> Olivier Mengué
> _https://metacpan.org/author/DOLMEN_
>
>