Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[gentoo-announce] GLSA: perl
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index News & Announcements
View previous topic :: View next topic  
Author Message
klieber
Administrator
Administrator


Joined: 17 Apr 2002
Posts: 3657
Location: San Francisco, CA

PostPosted: Fri Dec 20, 2002 2:58 pm    Post subject: [gentoo-announce] GLSA: perl Reply with quote

Daniel Ahlberg wrote:
- - --------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200212-6
- - --------------------------------------------------------------------

PACKAGE : perl
SUMMARY : broken safe compartment
DATE : 2002-12-20 14:12 UTC
EXPLOIT : local

- - --------------------------------------------------------------------

Quote from http://use.perl.org/articles/02/10/06/1118222.shtml?tid=5

"A security hole has been discovered in Safe.pm. When a Safe compartment has already been used, there's no guarantee that it's safe any longer, because there's a way for code executed within the Safe compartment to alter its operation mask. (Thus, programs that use a Safe compartment only once aren't affected by this bug"

More information is available at
http://groups.google.com/groups?threadm=rt-17744-39131.3.96370682846239%40bugs6.perl.org

SOLUTION

It is recommended that all Gentoo Linux users who are running sys-devel/perl-5.6.1-r9 or sys-devel/5.8.0-r5 and earlier update their systems as follows:

emerge rsync
emerge perl
emerge clean

ALTERNATIVE SOLUTION

If you don't want to or can't upgrade your perl package right away, you can emerge dev-perl/Safe to accomplish the same solution as above.

- - --------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at www.gentoo.org/~aliz
mcummings@gentoo.org
- - --------------------------------------------------------------------

_________________
The problem with political jokes is that they get elected
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index News & Announcements All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum