Your message dated Wed, 20 Jul 2011 20:00:17 +0000 with message-id <e1qjcwl-00086v...@franck.debian.org> and subject line Bug#631529: fixed in perl 5.10.1-17squeeze2 has caused the Debian Bug report #631529, regarding Missing fix for CVE-2010-1447 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 631529: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631529 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: perl Severity: grave Tags: security Hi Perl maintainers, it turns out that CVE-2010-1447 is still missing in Lenny and Squeeze. It was originally attributed to Postgres, but it was later found out that Perl is affected as well. The attached patch is still needed in both Lenny and Squeeze. Cheers, MoritzFix for CVE-2010-1447 --- perl-5.10.0/ext/Opcode/Safe.pm +++ perl-5.10.0/ext/Opcode/Safe.pm @@ -338,6 +338,7 @@ sub reval { ? Opcode::_safe_call_sv($root, $obj->{Mask}, $evalsub) : scalar Opcode::_safe_call_sv($root, $obj->{Mask}, $evalsub); _clean_stash($root.'::') if $sg != sub_generation(); + $obj->wrap_code_refs_within(@subret); return (wantarray) ? @subret : $subret[0]; } @@ -416,6 +417,7 @@ sub rdo { ? Opcode::_safe_call_sv($root, $obj->{Mask}, $evalsub) : scalar Opcode::_safe_call_sv($root, $obj->{Mask}, $evalsub); _clean_stash($root.'::') if $sg != sub_generation(); + $obj->wrap_code_refs_within(@subret); return (wantarray) ? @subret : $subret[0]; } @@ -629,9 +631,9 @@ expression evaluated, or a return statement may be used, just as with subroutines and B<eval()>. The context (list or scalar) is determined by the caller as usual. -This behaviour differs from the beta distribution of the Safe extension -where earlier versions of perl made it hard to mimic the return -behaviour of the eval() command and the context was always scalar. +If the return value of reval() is (or contains) any code reference, +those code references are wrapped to be themselves executed always +in the compartment. See L</wrap_code_refs_within>. The formerly undocumented STRICT argument sets strictness: if true 'use strict;' is used, otherwise it uses 'no strict;'. B<Note>: if
--- End Message ---
--- Begin Message ---Source: perl Source-Version: 5.10.1-17squeeze2 We believe that the bug you reported is fixed in the latest version of perl, which is due to be installed in the Debian FTP archive: libcgi-fast-perl_5.10.1-17squeeze2_all.deb to main/p/perl/libcgi-fast-perl_5.10.1-17squeeze2_all.deb libperl-dev_5.10.1-17squeeze2_i386.deb to main/p/perl/libperl-dev_5.10.1-17squeeze2_i386.deb libperl5.10_5.10.1-17squeeze2_i386.deb to main/p/perl/libperl5.10_5.10.1-17squeeze2_i386.deb perl-base_5.10.1-17squeeze2_i386.deb to main/p/perl/perl-base_5.10.1-17squeeze2_i386.deb perl-debug_5.10.1-17squeeze2_i386.deb to main/p/perl/perl-debug_5.10.1-17squeeze2_i386.deb perl-doc_5.10.1-17squeeze2_all.deb to main/p/perl/perl-doc_5.10.1-17squeeze2_all.deb perl-modules_5.10.1-17squeeze2_all.deb to main/p/perl/perl-modules_5.10.1-17squeeze2_all.deb perl-suid_5.10.1-17squeeze2_i386.deb to main/p/perl/perl-suid_5.10.1-17squeeze2_i386.deb perl_5.10.1-17squeeze2.debian.tar.gz to main/p/perl/perl_5.10.1-17squeeze2.debian.tar.gz perl_5.10.1-17squeeze2.dsc to main/p/perl/perl_5.10.1-17squeeze2.dsc perl_5.10.1-17squeeze2_i386.deb to main/p/perl/perl_5.10.1-17squeeze2_i386.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 631...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Dominic Hargreaves <d...@earth.li> (supplier of updated perl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 26 Jun 2011 16:10:22 +0100 Source: perl Binary: perl-base libcgi-fast-perl perl-doc perl-modules perl-debug perl-suid libperl5.10 libperl-dev perl Architecture: source all i386 Version: 5.10.1-17squeeze2 Distribution: stable-security Urgency: low Maintainer: Niko Tyni <nt...@debian.org> Changed-By: Dominic Hargreaves <d...@earth.li> Description: libcgi-fast-perl - CGI::Fast Perl module libperl-dev - Perl library: development files libperl5.10 - shared Perl library perl - Larry Wall's Practical Extraction and Report Language perl-base - minimal Perl system perl-debug - debug-enabled Perl interpreter perl-doc - Perl documentation perl-modules - Core Perl modules perl-suid - runs setuid Perl scripts Closes: 631529 Changes: perl (5.10.1-17squeeze2) stable-security; urgency=low . * [SECURITY] CVE-2010-1447: further Safe.pm fixes for breaking out of safe compartment using subroutine references (Closes: #631529) Checksums-Sha1: 1e72de11db1e31c1b122349f7151b500dee8e907 1422 perl_5.10.1-17squeeze2.dsc 7f17a83bda41a24c10d9929f8352f2bad73fa0d3 116450 perl_5.10.1-17squeeze2.debian.tar.gz b3bc80ce4ad735c00e6456c009ca6967d8c93a58 52780 libcgi-fast-perl_5.10.1-17squeeze2_all.deb bde537d527a58036d60fa3c70e0eb3dfd2df7403 7188450 perl-doc_5.10.1-17squeeze2_all.deb de49deadafec8ce5bd6101c59a69e05d1053ba92 3490048 perl-modules_5.10.1-17squeeze2_all.deb 12489318d45af25785500fe5970402c2be612232 980020 perl-base_5.10.1-17squeeze2_i386.deb 6261b2e963236032baf458118d04210cd26617c3 6630538 perl-debug_5.10.1-17squeeze2_i386.deb 8091d4d1848e96fdd6df9fe8c2966acfecf203cb 32812 perl-suid_5.10.1-17squeeze2_i386.deb d09ca4d058afd82a0671599923bd2080b584116a 632860 libperl5.10_5.10.1-17squeeze2_i386.deb d534b45ce878a7fa6c6b454cf3563a9c2924f193 2344576 libperl-dev_5.10.1-17squeeze2_i386.deb e1cda8c4a0816e4a787616d4a3784209a3ea03a3 3779812 perl_5.10.1-17squeeze2_i386.deb Checksums-Sha256: 070034c9393eb83456ad48d966fb0907584538afb48d76a4c99aa62ec5cf7c55 1422 perl_5.10.1-17squeeze2.dsc 35734672c73fceeb61e2b97d4b28db52b59ebb5267bf2017d62ce416cca92782 116450 perl_5.10.1-17squeeze2.debian.tar.gz 8f8080f044db3638154229c7a128e74fcad909674b39765059cbe5718fb78054 52780 libcgi-fast-perl_5.10.1-17squeeze2_all.deb a2ede571668e0d4ea9693a40c35e557024dab8789163e2d821956b42345fcc9e 7188450 perl-doc_5.10.1-17squeeze2_all.deb a02debd5eef6a9c41764b9170837200dd8c266dae5008a3b38a4b9251108f52c 3490048 perl-modules_5.10.1-17squeeze2_all.deb 56de870961c14dc4afb4bf69c79f3605002bbd275611dec6d3f378105ec8a4c7 980020 perl-base_5.10.1-17squeeze2_i386.deb c3c6f3cd7281b3f4e257888a5852aff59dc6bda72e5fae31657abf998c4a115e 6630538 perl-debug_5.10.1-17squeeze2_i386.deb c048a8a5152f14e7d46c84b94036a15949f7f0f90462bed80ae0488033bffd3c 32812 perl-suid_5.10.1-17squeeze2_i386.deb 3e7889cc93fe1851a4d518abee8126b0541e72c8eded0217a90dd6cb7ccde4a5 632860 libperl5.10_5.10.1-17squeeze2_i386.deb a2fc52def97f73025b49efdc81acdee2d755163b7da44da7ffb2494eaaad2122 2344576 libperl-dev_5.10.1-17squeeze2_i386.deb 95d3702c8dfb1ae59a3a53c11df1b28c033efc38eda5c94fc72b63394bd764f6 3779812 perl_5.10.1-17squeeze2_i386.deb Files: c4eca2ad3d134ceacbf4e3c3c4f0ef10 1422 perl standard perl_5.10.1-17squeeze2.dsc 5642720990ea6ddbe1766cc05c7b5a10 116450 perl standard perl_5.10.1-17squeeze2.debian.tar.gz a37b28b28b9fa72cfaf024148100acc1 52780 perl optional libcgi-fast-perl_5.10.1-17squeeze2_all.deb 321b5a69524112c3ab049f28bca839b9 7188450 doc optional perl-doc_5.10.1-17squeeze2_all.deb 1b7085ff3f2e23724fa1efce6924b28b 3490048 perl standard perl-modules_5.10.1-17squeeze2_all.deb b3a55d438e975d815f0b7bfaabef9ca4 980020 perl required perl-base_5.10.1-17squeeze2_i386.deb b7be7b97992de6c16da61964eaea7af2 6630538 debug extra perl-debug_5.10.1-17squeeze2_i386.deb fec9683c52ef33cac947d21e4398bf80 32812 perl optional perl-suid_5.10.1-17squeeze2_i386.deb d30d7a0330bd33790c60d402a9ebbfdc 632860 libs optional libperl5.10_5.10.1-17squeeze2_i386.deb 0814324dd4b1c2e822415cb7139263ca 2344576 libdevel optional libperl-dev_5.10.1-17squeeze2_i386.deb 059a09702a58e5f679abc1cafaa46ee6 3779812 perl standard perl_5.10.1-17squeeze2_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iD8DBQFODNhMYzuFKFF44qURAhEAAKCcvVKogBVaOBj1SoWNnBbtoRdD9QCfc9t/ qTnVtSEX8a38Fa0HGTIwvAk= =appy -----END PGP SIGNATURE-----
--- End Message ---
