MDVSA-2011:008

Nom du paquet
perl-CGI
Date
2011-01-14
Advisory ID
MDVSA-2011:008
Affected versions
2009.0 x86_64 , MES5 i586 , 2010.0 x86_64 , 2010.1 i586 , 2010.0 i586 , 2009.0 i586 , CS4.0 i586 , CS4.0 x86_64 , MES5 x86_64 , 2010.1 x86_64

Problem description

A vulnerability has been found and corrected in perl-CGI:

Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote
attackers to inject arbitrary HTTP headers and conduct HTTP response
splitting attacks via unknown vectors. NOTE: this issue exists
because of an incomplete fix for CVE-2010-2761 (CVE-2010-4411).

Packages for 2009.0 are provided as of the Extended Maintenance
Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&products_id=490

The updated packages have been upgraded to the latest version (3.51)
which is not affected by this issue and in turn also brings many
bugfixes.

Updated packages

2009.0 x86_64

 34ad905b585ae65a43d0b5b6558d2421  2009.0/x86_64/perl-CGI-3.51-0.1mdv2009.0.noarch.rpm
 a271ca208b1336d3aa319559bb389ebc  2009.0/x86_64/perl-CGI-Fast-3.51-0.1mdv2009.0.noarch.rpm 
 1469b385e3c10d90c826d258ddde08c9  2009.0/SRPMS/perl-CGI-3.51-0.1mdv2009.0.src.rpm

MES5 i586

 ea731f274b34944018415f5a2eb46832  mes5/i586/perl-CGI-3.51-0.1mdvmes5.1.noarch.rpm
 09dd56560337d5e9e38333c31d661a68  mes5/i586/perl-CGI-Fast-3.51-0.1mdvmes5.1.noarch.rpm 
 3d62cd7c30734db326820428733ed201  mes5/SRPMS/perl-CGI-3.51-0.1mdvmes5.1.src.rpm

2010.0 x86_64

 f0a7e2f8075dfc90c038d4b37830ab8a  2010.0/x86_64/perl-CGI-3.510.0-0.1mdv2010.0.noarch.rpm
 04e05ae82eb715820e2618edce7f92c3  2010.0/x86_64/perl-CGI-Fast-3.510.0-0.1mdv2010.0.noarch.rpm 
 8461002129a736281b7cc9fa4107f65f  2010.0/SRPMS/perl-CGI-3.510.0-0.1mdv2010.0.src.rpm

2010.1 i586

 293331ebe73c80d14472bf4953d3a69c  2010.1/i586/perl-CGI-3.510.0-0.1mdv2010.2.noarch.rpm
 534416b0026b2f2f188a977f82179b52  2010.1/i586/perl-CGI-Fast-3.510.0-0.1mdv2010.2.noarch.rpm 
 8ee0047d12c98330fc0443a21e0ed46c  2010.1/SRPMS/perl-CGI-3.510.0-0.1mdv2010.2.src.rpm

2010.0 i586

 52136837cc7a00fec652eaf1e58d8f1e  2010.0/i586/perl-CGI-3.510.0-0.1mdv2010.0.noarch.rpm
 76ebfc4c892dd550b16d85dafcf83afb  2010.0/i586/perl-CGI-Fast-3.510.0-0.1mdv2010.0.noarch.rpm 
 8461002129a736281b7cc9fa4107f65f  2010.0/SRPMS/perl-CGI-3.510.0-0.1mdv2010.0.src.rpm

2009.0 i586

 bed288aa189137713e62bce50686aca3  2009.0/i586/perl-CGI-3.51-0.1mdv2009.0.noarch.rpm
 d457a05a1a4302adefec18b253754d1d  2009.0/i586/perl-CGI-Fast-3.51-0.1mdv2009.0.noarch.rpm 
 1469b385e3c10d90c826d258ddde08c9  2009.0/SRPMS/perl-CGI-3.51-0.1mdv2009.0.src.rpm

CS4.0 i586

 efd31847e0a6a505706182287895d645  corporate/4.0/i586/perl-CGI-3.51-0.1.20060mlcs4.noarch.rpm
 3aaad32e2fc342784e7d45e6f823776e  corporate/4.0/i586/perl-CGI-Fast-3.51-0.1.20060mlcs4.noarch.rpm 
 2280a0d4e37f810b66b85fb0dd370088  corporate/4.0/SRPMS/perl-CGI-3.51-0.1.20060mlcs4.src.rpm

CS4.0 x86_64

 2af8f248e81633a89b016dba03d9fb51  corporate/4.0/x86_64/perl-CGI-3.51-0.1.20060mlcs4.noarch.rpm
 1034cf1c1ab76b3803702197ea78ee8a  corporate/4.0/x86_64/perl-CGI-Fast-3.51-0.1.20060mlcs4.noarch.rpm 
 2280a0d4e37f810b66b85fb0dd370088  corporate/4.0/SRPMS/perl-CGI-3.51-0.1.20060mlcs4.src.rpm

MES5 x86_64

 4dae69bec8bd7e9d51a6728aac3e3cf5  mes5/x86_64/perl-CGI-3.51-0.1mdvmes5.1.noarch.rpm
 0fb4cfa2f3c5504207c2464cc8023cda  mes5/x86_64/perl-CGI-Fast-3.51-0.1mdvmes5.1.noarch.rpm 
 3d62cd7c30734db326820428733ed201  mes5/SRPMS/perl-CGI-3.51-0.1mdvmes5.1.src.rpm

2010.1 x86_64

 d3f759828dd9cab01abd54ebf9535e16  2010.1/x86_64/perl-CGI-3.510.0-0.1mdv2010.2.noarch.rpm
 b0d9480c99b01438f3f623f59cde6043  2010.1/x86_64/perl-CGI-Fast-3.510.0-0.1mdv2010.2.noarch.rpm 
 8ee0047d12c98330fc0443a21e0ed46c  2010.1/SRPMS/perl-CGI-3.510.0-0.1mdv2010.2.src.rpm

References