MDVSA-2012:180
- Package name
- perl-CGI
- Date
- 2012-12-17
- Advisory ID
- MDVSA-2012:180
- Affected versions
- MES5 i586 , 2011 i586 , MES5 x86_64 , 2011 x86_64
Problem description
A vulnerability was discovered and corrected in perl-CGI:
CGI.pm module before 3.63 for Perl does not properly escape newlines in
(1) Set-Cookie or (2) P3P headers, which might allow remote attackers
to inject arbitrary headers into responses from applications that
use CGI.pm (CVE-2012-5526).
The updated packages have been patched to correct this issue.
Updated packages
MES5 i586
a6bd38e4026b761ea997b42cc18d9029 mes5/i586/perl-CGI-3.51-0.2mdvmes5.2.noarch.rpm b8e3c4744defe3fa9a16c905c7f913f1 mes5/i586/perl-CGI-Fast-3.51-0.2mdvmes5.2.noarch.rpm 1e39d250391ff10be35989efaff40d7d mes5/SRPMS/perl-CGI-3.51-0.2mdvmes5.2.src.rpm
2011 i586
50cf86029ab55cafdf1dd097fe1460a8 2011/i586/perl-CGI-3.530.0-1.1-mdv2011.0.noarch.rpm 1434cb67b81527de2bcd1b58372467bb 2011/i586/perl-CGI-Fast-3.530.0-1.1-mdv2011.0.noarch.rpm 1567128bd2cc583cac6a794470cf3770 2011/SRPMS/perl-CGI-3.530.0-1.1.src.rpm
MES5 x86_64
33edeefe1e2c87b6de23ef34be0923ec mes5/x86_64/perl-CGI-3.51-0.2mdvmes5.2.noarch.rpm 4ddf1030bcf2e335a91e067773761648 mes5/x86_64/perl-CGI-Fast-3.51-0.2mdvmes5.2.noarch.rpm 1e39d250391ff10be35989efaff40d7d mes5/SRPMS/perl-CGI-3.51-0.2mdvmes5.2.src.rpm
2011 x86_64
0100f923c13c18560a14ef3e9fa8f3c8 2011/x86_64/perl-CGI-3.530.0-1.1-mdv2011.0.noarch.rpm bcce1db379d664a30f1085bde2db72e5 2011/x86_64/perl-CGI-Fast-3.530.0-1.1-mdv2011.0.noarch.rpm 1567128bd2cc583cac6a794470cf3770 2011/SRPMS/perl-CGI-3.530.0-1.1.src.rpm