Nome do pacote
perl
Data
2011-05-18
ID Alerta
MDVSA-2011:091
Versões afetadas
2009.0 x86_64 , MES5 i586 , 2010.1 i586 , 2009.0 i586 , MES5 x86_64 , 2010.1 x86_64

Descrição do problema

A vulnerability has been found and corrected in perl:

The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl
5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11,
do not apply the taint attribute to the return value upon processing
tainted input, which might allow context-dependent attackers to bypass
the taint protection mechanism via a crafted string (CVE-2011-1487).

Packages for 2009.0 are provided as of the Extended Maintenance
Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&products_id=490

The updated packages have been patched to correct this issue.

Pacotes atualizados

2009.0 x86_64

 d2967b835c46d4a50799f687e63537c2  2009.0/x86_64/perl-5.10.0-25.3mdv2009.0.x86_64.rpm
 21fb8ac662f6f9cc95e144799c3eeea7  2009.0/x86_64/perl-base-5.10.0-25.3mdv2009.0.x86_64.rpm
 0307aa3f955e16707bff7eaec5ca57a5  2009.0/x86_64/perl-devel-5.10.0-25.3mdv2009.0.x86_64.rpm
 958e3ebf4bb38459ff3d21d38119df68  2009.0/x86_64/perl-doc-5.10.0-25.3mdv2009.0.x86_64.rpm
 a14c1467114914387ceddf49093f6bc5  2009.0/x86_64/perl-suid-5.10.0-25.3mdv2009.0.x86_64.rpm 
 1f77907edc97bdcf531167624d550f28  2009.0/SRPMS/perl-5.10.0-25.3mdv2009.0.src.rpm

MES5 i586

 184b241715dfb45ab0462b4c162a7f80  mes5/i586/perl-5.10.0-25.3mdvmes5.2.i586.rpm
 3a1b3fcdc01c9e057ad9e188948d7e4e  mes5/i586/perl-base-5.10.0-25.3mdvmes5.2.i586.rpm
 a6560d89ae718928aecbb8084dfc37d6  mes5/i586/perl-devel-5.10.0-25.3mdvmes5.2.i586.rpm
 beff68da2c44504c13eaa935f1febd94  mes5/i586/perl-doc-5.10.0-25.3mdvmes5.2.i586.rpm
 25fa94fb16affee8234d0b393318238c  mes5/i586/perl-suid-5.10.0-25.3mdvmes5.2.i586.rpm 
 b7595e3b4c5c860bd6cde2d9148e36a7  mes5/SRPMS/perl-5.10.0-25.3mdvmes5.2.src.rpm

2010.1 i586

 6a0a7a6bda22faddbaddb2c66c1b11be  2010.1/i586/perl-5.10.1-10.1mdv2010.2.i586.rpm
 e798818652a1441aaad1f0add4af3fc2  2010.1/i586/perl-base-5.10.1-10.1mdv2010.2.i586.rpm
 e05a85dacf0addcc34a80f785778ffe7  2010.1/i586/perl-devel-5.10.1-10.1mdv2010.2.i586.rpm
 881b5bfbc78edeef78d3e69783c9583b  2010.1/i586/perl-doc-5.10.1-10.1mdv2010.2.i586.rpm
 c96eb3207cb689bdf7bdd25d91198c00  2010.1/i586/perl-suid-5.10.1-10.1mdv2010.2.i586.rpm 
 7f53e901f0d6a3298da34c4886b3002a  2010.1/SRPMS/perl-5.10.1-10.1mdv2010.2.src.rpm

2009.0 i586

 2a65372592d0aa2c0cef14fa13ba5077  2009.0/i586/perl-5.10.0-25.3mdv2009.0.i586.rpm
 6f58332a55ba293deadfbb80827f3df2  2009.0/i586/perl-base-5.10.0-25.3mdv2009.0.i586.rpm
 9b84814dc9335dfcb0dc3ad402ba289c  2009.0/i586/perl-devel-5.10.0-25.3mdv2009.0.i586.rpm
 15809dc26b65fb45bd2990890da238c8  2009.0/i586/perl-doc-5.10.0-25.3mdv2009.0.i586.rpm
 7ddd98eb40b0fc7665b6c9ac031726c4  2009.0/i586/perl-suid-5.10.0-25.3mdv2009.0.i586.rpm 
 1f77907edc97bdcf531167624d550f28  2009.0/SRPMS/perl-5.10.0-25.3mdv2009.0.src.rpm

MES5 x86_64

 9cb402b02a1535c0d6fb84d32189a325  mes5/x86_64/perl-5.10.0-25.3mdvmes5.2.x86_64.rpm
 f57820d42b7c7b6371cb8d7d45f83e11  mes5/x86_64/perl-base-5.10.0-25.3mdvmes5.2.x86_64.rpm
 1711e6bcdcea29f57481f20dd1f8e185  mes5/x86_64/perl-devel-5.10.0-25.3mdvmes5.2.x86_64.rpm
 d7ecd8441d5c9ed909c7ad8e084469b3  mes5/x86_64/perl-doc-5.10.0-25.3mdvmes5.2.x86_64.rpm
 4549c6ee80c14e38a1a85fff5a262ec4  mes5/x86_64/perl-suid-5.10.0-25.3mdvmes5.2.x86_64.rpm 
 b7595e3b4c5c860bd6cde2d9148e36a7  mes5/SRPMS/perl-5.10.0-25.3mdvmes5.2.src.rpm

2010.1 x86_64

 c532e3e57436bb60698a64e7cd0f0865  2010.1/x86_64/perl-5.10.1-10.1mdv2010.2.x86_64.rpm
 9ee737d8a025526d9148b45459e5366c  2010.1/x86_64/perl-base-5.10.1-10.1mdv2010.2.x86_64.rpm
 523c62e21eba8794b02e1de16e9ea7ef  2010.1/x86_64/perl-devel-5.10.1-10.1mdv2010.2.x86_64.rpm
 e8bc7352e949fe1633f49243838a91e6  2010.1/x86_64/perl-doc-5.10.1-10.1mdv2010.2.x86_64.rpm
 74ffa4ed9f3830c2a1994e0c7ccbb462  2010.1/x86_64/perl-suid-5.10.1-10.1mdv2010.2.x86_64.rpm 
 7f53e901f0d6a3298da34c4886b3002a  2010.1/SRPMS/perl-5.10.1-10.1mdv2010.2.src.rpm

Referências