Paketname
perl
Datum
2008-08-11
Advisory ID
MDVSA-2008:165
Betroffene Versionen
2008.1 x86_64 , 2008.1 i586

Problembeschreibung

The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly
check permissions before performing a chmod, which allows local users
to modify the permissions of arbitrary files via a symlink attack.

The updated packages have been patched to fix this.

Aktualisierte Pakete

2008.1 x86_64

 9cbac47b99f5619c99c0bf127036728f  2008.1/x86_64/perl-5.10.0-13.1mdv2008.1.x86_64.rpm
 28affc527b9b3fa016a15a8b334c12ad  2008.1/x86_64/perl-base-5.10.0-13.1mdv2008.1.x86_64.rpm
 8a1015ddbf192d5d288c27eb887c2ea0  2008.1/x86_64/perl-devel-5.10.0-13.1mdv2008.1.x86_64.rpm
 9e42182860712bed39366687feaebfa7  2008.1/x86_64/perl-doc-5.10.0-13.1mdv2008.1.x86_64.rpm
 89f28b330583f90b4655f77e9740cc88  2008.1/x86_64/perl-suid-5.10.0-13.1mdv2008.1.x86_64.rpm 
 894e08eab70f76a470e5faaccd35c684  2008.1/SRPMS/perl-5.10.0-13.1mdv2008.1.src.rpm

2008.1 i586

 a94542e9e9504a4d11be4acb0977cbca  2008.1/i586/perl-5.10.0-13.1mdv2008.1.i586.rpm
 95515e6c74da5d6b28e954d68a3c06f2  2008.1/i586/perl-base-5.10.0-13.1mdv2008.1.i586.rpm
 b39451214d71c3cc151ce1c2c2e6969c  2008.1/i586/perl-devel-5.10.0-13.1mdv2008.1.i586.rpm
 0ed618fc4dda3f804bd051af35d1073e  2008.1/i586/perl-doc-5.10.0-13.1mdv2008.1.i586.rpm
 5c8292c188b1cfbd9509013060a8832e  2008.1/i586/perl-suid-5.10.0-13.1mdv2008.1.i586.rpm 
 894e08eab70f76a470e5faaccd35c684  2008.1/SRPMS/perl-5.10.0-13.1mdv2008.1.src.rpm

Referenzen