[ GLSA 201401-11 ] Perl, Locale Maketext Perl module: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Perl, Locale Maketext Perl module: Multiple vulnerabilities (GLSA 201401-11)
Severity: normal
Exploitable: local, remote
Date: January 19, 2014
Bug(s): #384887, #448632, #460444, #483448
ID: 201401-11

Synopsis

Multiple vulnerabilities have been found in Perl and
Locale::Maketext Perl module, the worst of which could allow a
context-dependent attacker to execute arbitrary code.


Background

Perl is Larry Wall’s Practical Extraction and Report Language.
Locale::Maketext is a Perl module - framework for localization.


Affected Packages

Package: dev-lang/perl
Vulnerable: < 5.16.3
Unaffected: >= 5.16.3
Architectures: All supported architectures

Package: perl-core/locale-maketext
Vulnerable: < 1.230.0
Unaffected: >= 1.230.0
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Perl and
Locale::Maketext Perl module. Please review the CVE identifiers
referenced below for details.


Impact

A context-dependent attacker could possibly execute arbitrary code with
the privileges of the process or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Perl users should upgrade to the latest version: