Debian Bug report logs - #733054
cvsweb: Does not work with Perl 5.18

version graph

Package: cvsweb; Maintainer for cvsweb is Daniel Leidert <>; Source for cvsweb is src:cvsweb (PTS, buildd, popcon).

Reported by: Mark Kamichoff <>

Date: Tue, 24 Dec 2013 16:00:01 UTC

Severity: important

Tags: patch

Found in version cvsweb/3:3.0.6-7

Fixed in version cvsweb/3:3.0.6-8

Done: Daniel Leidert <>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to, Daniel Leidert (dale) <>:
Bug#733054; Package cvsweb. (Tue, 24 Dec 2013 16:00:06 GMT) (full text, mbox, link).

Acknowledgement sent to Mark Kamichoff <>:
New Bug report received and forwarded. Copy sent to Daniel Leidert (dale) <>. (Tue, 24 Dec 2013 16:00:06 GMT) (full text, mbox, link).

Message #5 received at (full text, mbox, reply):

From: Mark Kamichoff <>
To: Debian Bug Tracking System <>
Subject: cvsweb: Does not work with Perl 5.18
Date: Tue, 24 Dec 2013 10:14:27 -0500
Package: cvsweb
Version: 3:3.0.6-7
Severity: important
Tags: patch


It appears that cvsweb has some issues with Perl 5.18 (5.14 works fine).
Specifically, it errors out with a slew of syntax errors when invoked
from Apache:

[Tue Dec 24 09:57:35.058676 2013] [cgi:error] [pid 17746] [client] AH01215: "my" variable $tmp masks earlier
declaration in same statement at /usr/lib/cgi-bin/cvsweb line 1340.
[Tue Dec 24 09:57:35.058741 2013] [cgi:error] [pid 17746] [client] AH01215: syntax error at /usr/lib/cgi-bin/cvsweb
line 1197, near "$v qw(hidecvsroot hidenonreadable)"
[Tue Dec 24 09:57:35.058767 2013] [cgi:error] [pid 17746] [client] AH01215: Global symbol "$v" requires explicit
package name at /usr/lib/cgi-bin/cvsweb line 1199.
[Tue Dec 24 09:57:35.058792 2013] [cgi:error] [pid 17746] [client] AH01215: Global symbol "$v" requires explicit
package name at /usr/lib/cgi-bin/cvsweb line 1199.
[Tue Dec 24 09:57:35.058811 2013] [cgi:error] [pid 17746] [client] AH01215: syntax error at /usr/lib/cgi-bin/cvsweb
line 1278, near "}"
[Tue Dec 24 09:57:35.058830 2013] [cgi:error] [pid 17746] [client] AH01215: syntax error at /usr/lib/cgi-bin/cvsweb
line 1291, near "}"
[Tue Dec 24 09:57:35.058848 2013] [cgi:error] [pid 17746] [client] AH01215: syntax error at /usr/lib/cgi-bin/cvsweb
line 1297, near "}"
[Tue Dec 24 09:57:35.058867 2013] [cgi:error] [pid 17746] [client] AH01215: syntax error at /usr/lib/cgi-bin/cvsweb
line 1304, near "}"
[Tue Dec 24 09:57:35.058885 2013] [cgi:error] [pid 17746] [client] AH01215: syntax error at /usr/lib/cgi-bin/cvsweb
line 1314, near "}"
[Tue Dec 24 09:57:35.058904 2013] [cgi:error] [pid 17746] [client] AH01215: syntax error at /usr/lib/cgi-bin/cvsweb
line 1338, near "}"
[Tue Dec 24 09:57:35.058925 2013] [cgi:error] [pid 17746] [client] AH01215: syntax error at /usr/lib/cgi-bin/cvsweb
line 1340, near ""$tmp,v" }"
[Tue Dec 24 09:57:35.058940 2013] [cgi:error] [pid 17746] [client] AH01215: /usr/lib/cgi-bin/cvsweb has too many

As a result, cvsweb produces an HTTP 500 error when accessed from a web

The NetBSD folks have worked around this by changing two lines in

The below patch does the same thing and is based on the version of
cvsweb that is included in the Debian package:

--- cvsweb.orig	2013-12-24 09:58:09.333520125 -0500
+++ cvsweb	2013-12-24 09:58:50.222171067 -0500
@@ -1194,7 +1194,7 @@
 <legend>General options</legend>
 <input type="hidden" name="copt" value="1" />
-    for my $v qw(hidecvsroot hidenonreadable) {
+    for my $v (qw(hidecvsroot hidenonreadable)) {
       printf(qq{<input type="hidden" name="%s" value="%s" />\n},
              $v, $input{$v} || 0);
@@ -2953,7 +2953,7 @@
   print "<br />\n";
   print '<i>';
-  if (defined @mytz) {
+  if (@mytz) {
     my ($est) = $mytz[(localtime($date{$_}))[8]];
     print scalar localtime($date{$_}), " $est</i> (";
   } else {


- Mark

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cvsweb depends on:
ii  apache2              2.4.6-3
ii  apache2-bin [httpd]  2.4.6-3
ii  cvs                  2:1.12.13+real-11
ii  libipc-run-perl      0.92-1
ii  libmime-tools-perl   5.503-1
ii  liburi-perl          1.60-1
ii  rcs                  5.9.1-2

cvsweb recommends no packages.

Versions of packages cvsweb suggests:
pn  cvsgraph                      <none>
pn  enscript                      <none>
pn  libmime-types-perl            <none>
ii  perl [libcompress-zlib-perl]  5.18.1-4
ii  zip                           3.0-7

-- no debconf information

Reply sent to Daniel Leidert <>:
You have taken responsibility. (Tue, 17 Feb 2015 18:21:12 GMT) (full text, mbox, link).

Notification sent to Mark Kamichoff <>:
Bug acknowledged by developer. (Tue, 17 Feb 2015 18:21:12 GMT) (full text, mbox, link).

Message #10 received at (full text, mbox, reply):

From: Daniel Leidert <>
Subject: Bug#733054: fixed in cvsweb 3:3.0.6-8
Date: Tue, 17 Feb 2015 18:18:30 +0000
Source: cvsweb
Source-Version: 3:3.0.6-8

We believe that the bug you reported is fixed in the latest version of
cvsweb, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
Daniel Leidert <> (supplier of updated cvsweb package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing

Hash: SHA256

Format: 1.8
Date: Tue, 17 Feb 2015 18:56:37 +0100
Source: cvsweb
Binary: cvsweb
Architecture: source all
Version: 3:3.0.6-8
Distribution: unstable
Urgency: medium
Maintainer: Daniel Leidert <>
Changed-By: Daniel Leidert <>
 cvsweb     - CGI interface to your CVS repository
Closes: 733054
 cvsweb (3:3.0.6-8) unstable; urgency=medium
   * debian/control (Vcs-Browser, Vcs-Svn): Relocated to collab-maint.
     (DM-Upload-Allowed): Obsolete and dropped.
   * debian/patches/733054_perl_518.patch: Added (closes: #733054).
     - Added Perl 5.18 compatibility and fixed errors.
   * debian/patches/series: Adjusted.
 8784bb2d048515f98dc90870d882fe4c87f39aa5 1847 cvsweb_3.0.6-8.dsc
 7b2a47658e15b8ef3495c085d9235fe2bafeb1fd 12940 cvsweb_3.0.6-8.debian.tar.xz
 ed3569ac8f5d8ca84ae606dd4b660a7c10f88e57 60670 cvsweb_3.0.6-8_all.deb
 b039159694a0f1fcbf3d0ec61ad850322a2752880338b7dbabb45572d024e518 1847 cvsweb_3.0.6-8.dsc
 51793b490f468b45f8f4cc6e97810e4e39a922a0d8901589707cfb76a399002e 12940 cvsweb_3.0.6-8.debian.tar.xz
 057488d7dcc47bba38cdc1446793641834dca489cc83a300437149f7f1fcc083 60670 cvsweb_3.0.6-8_all.deb
 73ba12fc6a498593e69da90ca1ea2df6 1847 vcs optional cvsweb_3.0.6-8.dsc
 8372c7f70a42ad147bf7b7a0f8cdf31d 12940 vcs optional cvsweb_3.0.6-8.debian.tar.xz
 a64e663231eb69b930479b89c86eee17 60670 vcs optional cvsweb_3.0.6-8_all.deb

Version: GnuPG v1


Bug archived. Request was from Debbugs Internal Request <> to (Mon, 23 Mar 2015 07:28:10 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <>. Last modified: Mon Mar 26 03:18:35 2018; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.