Nom du paquet
perl-CGI
Date
2012-12-17
Advisory ID
MDVSA-2012:180
Affected versions
MES5 i586 , 2011 i586 , MES5 x86_64 , 2011 x86_64

Problem description

A vulnerability was discovered and corrected in perl-CGI:

CGI.pm module before 3.63 for Perl does not properly escape newlines in
(1) Set-Cookie or (2) P3P headers, which might allow remote attackers
to inject arbitrary headers into responses from applications that
use CGI.pm (CVE-2012-5526).

The updated packages have been patched to correct this issue.

Updated packages

MES5 i586

 a6bd38e4026b761ea997b42cc18d9029  mes5/i586/perl-CGI-3.51-0.2mdvmes5.2.noarch.rpm
 b8e3c4744defe3fa9a16c905c7f913f1  mes5/i586/perl-CGI-Fast-3.51-0.2mdvmes5.2.noarch.rpm 
 1e39d250391ff10be35989efaff40d7d  mes5/SRPMS/perl-CGI-3.51-0.2mdvmes5.2.src.rpm

2011 i586

 50cf86029ab55cafdf1dd097fe1460a8  2011/i586/perl-CGI-3.530.0-1.1-mdv2011.0.noarch.rpm
 1434cb67b81527de2bcd1b58372467bb  2011/i586/perl-CGI-Fast-3.530.0-1.1-mdv2011.0.noarch.rpm 
 1567128bd2cc583cac6a794470cf3770  2011/SRPMS/perl-CGI-3.530.0-1.1.src.rpm

MES5 x86_64

 33edeefe1e2c87b6de23ef34be0923ec  mes5/x86_64/perl-CGI-3.51-0.2mdvmes5.2.noarch.rpm
 4ddf1030bcf2e335a91e067773761648  mes5/x86_64/perl-CGI-Fast-3.51-0.2mdvmes5.2.noarch.rpm 
 1e39d250391ff10be35989efaff40d7d  mes5/SRPMS/perl-CGI-3.51-0.2mdvmes5.2.src.rpm

2011 x86_64

 0100f923c13c18560a14ef3e9fa8f3c8  2011/x86_64/perl-CGI-3.530.0-1.1-mdv2011.0.noarch.rpm
 bcce1db379d664a30f1085bde2db72e5  2011/x86_64/perl-CGI-Fast-3.530.0-1.1-mdv2011.0.noarch.rpm 
 1567128bd2cc583cac6a794470cf3770  2011/SRPMS/perl-CGI-3.530.0-1.1.src.rpm

References