--------------------------------------------------------------------- Fedora Legacy Test Update Notification FEDORALEGACY-2006-176731 Bugzilla https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=176731 2006-02-08 ---------------------------------------------------------------------
Name : perl Versions : rh9: perl-5.8.0-90.0.13.legacy Versions : fc1: perl-5.8.3-17.5.legacy Versions : fc2: perl-5.8.3-19.5.legacy Summary : The Perl programming language. Description : Perl is a high-level programming language commonly used for system administration utilities and Web programming. --------------------------------------------------------------------- Update Information: Updated perl packages that fix a security flaw are now available. Perl is a high-level programming language commonly used for system administration utilities and Web programming. An integer overflow bug was found in Perl's format string processor. It is possible for an attacker to cause perl to crash or execute arbitrary code if the attacker is able to process a malicious format string. This issue is only exploitable through a script which passes arbitrary untrusted strings to the format string processor. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3962 to this issue. Note that this vulnerability do not affect perl packages in Red Hat Linux 7.3 Users of perl are advised to upgrade to these packages which contain a backported patch and are not vulnerable to this issue. --------------------------------------------------------------------- Changelogs rh9: * Sat Jan 28 2006 David Eisenstein <[EMAIL PROTECTED]> 2:5.8.0-90.0.13.legacy - Integrate fix for CVE-2005-3962 - Perl Format String Vulnerability, bugzilla Bug #176731. fc1: * Thu Jan 26 2006 David Eisenstein <[EMAIL PROTECTED]> 3:5.8.3-17.5.legacy - Integrate fix for CVE-2005-3962 - Perl Format String Vulnerability, bugzilla Bug #176731. fc2: * Sat Jan 28 2006 David Eisenstein <[EMAIL PROTECTED]> 3:5.8.3-19.5.legacy - Replace broken perl-5.8.3-findbin-selinux.patch with better patch by Jose Pedro Oliveira so perl will not fail "lib/FindBin" test. See Bugzilla Bug #176731 comment 2. * Sat Jan 28 2006 David Eisenstein <[EMAIL PROTECTED]> 3:5.8.3-19.4.legacy - Integrate fix for CVE-2005-3962 - Perl Format String Vulnerability, bugzilla Bug #176731. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedoralegacy.org/ (sha1sums) rh9: 4d2401a09f2cc0b126df88659bd9e259a528146d redhat/9/updates-testing/i386/perl-5.8.0-90.0.13.legacy.i386.rpm 3b5448a2a8d8241a85c4c54ad5d5deb4b9d466d4 redhat/9/updates-testing/i386/perl-CGI-2.81-90.0.13.legacy.i386.rpm 40a05fcf3a7d128e7fa79b00022d54d0542bd3af redhat/9/updates-testing/i386/perl-CPAN-1.61-90.0.13.legacy.i386.rpm 5444ce68de7e8f0b1b051a15a1658c7d497be61b redhat/9/updates-testing/i386/perl-DB_File-1.804-90.0.13.legacy.i386.rpm 76ff3cdbe78a2e7c92c1f95760906fd396f974bf redhat/9/updates-testing/i386/perl-suidperl-5.8.0-90.0.13.legacy.i386.rpm 62fbcae6dd839fd18aabcf5c9fcc6babfd844d94 redhat/9/updates-testing/SRPMS/perl-5.8.0-90.0.13.legacy.src.rpm fc1: 3267a9d83ac3cadcfa650b1625cf5c458adb5540 fedora/1/updates-testing/i386/perl-5.8.3-17.5.legacy.i386.rpm 2445d66c7ced8bccc7d875a21404216a0cd5cdb6 fedora/1/updates-testing/i386/perl-suidperl-5.8.3-17.5.legacy.i386.rpm 297a649694e03e67b13cfbac7ae8211554cea44b fedora/1/updates-testing/SRPMS/perl-5.8.3-17.5.legacy.src.rpm fc2: 772f9571df3a0eab7749bb0d162311f4cd539879 fedora/2/updates-testing/i386/perl-5.8.3-19.5.legacy.i386.rpm 83cf2b36b48760eb1f99a042214eead7a9650d38 fedora/2/updates-testing/i386/perl-suidperl-5.8.3-19.5.legacy.i386.rpm 260cf2c8b759afe09f205318e1fd78cabdeefcb0 fedora/2/updates-testing/SRPMS/perl-5.8.3-19.5.legacy.src.rpm --------------------------------------------------------------------- Please test and comment in bugzilla.
signature.asc
Description: OpenPGP digital signature
-- fedora-legacy-list mailing list fedora-legacy-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-legacy-list
