Package: perl Version: 5.8.7-8 Severity: grave Tags: security Justification: user security hole
An integer overflow in perl's format string code may allow remote code execution in application using that specific functionality. Please see http://www.dyadsecurity.com/perl-0002.html for more details and a patch. Cheers, Moritz -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.14-2-686 Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages perl depends on: ii libc6 2.3.5-8.1 GNU C Library: Shared libraries an ii libdb4.3 4.3.29-1 Berkeley v4.3 Database Libraries [ ii libgdbm3 1.8.3-2 GNU dbm database routines (runtime ii perl-base 5.8.7-8 The Pathologically Eclectic Rubbis ii perl-modules 5.8.7-8 Core Perl modules Versions of packages perl recommends: ii perl-doc 5.8.7-8 Perl documentation -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]