FS#48482 : [perl] CVE-2016-2381 - bug in 'taint' environment handling

FS#48482 - [perl] CVE-2016-2381 - bug in 'taint' environment handling

Attached to Project: Arch Linux
Opened by Jens Adam (byte) - Sunday, 06 March 2016, 19:58 GMT
Last edited by Florian Pritz (bluewind) - Thursday, 10 March 2016, 09:24 GMT

Task Type	Bug Report
Category	Security
Status	Closed
Assigned To	Florian Pritz (bluewind)
Architecture	All
Severity	Medium
Priority	Normal
Reported Version
Due in Version	Undecided
Due Date	Undecided
Percent Complete
Votes	1 Christian Rebischke (Shibumi) (2016-03-07)
Private	No

Details

via https://www.debian.org/security/2016/dsa-3501
Patch: https://anonscm.debian.org/cgit/perl/perl.git/tree/debian/patches/fixes/CVE-2016-2381_duplicate_env.diff

This task depends upon

Closed by Florian Pritz (bluewind)
Thursday, 10 March 2016, 09:24 GMT
Reason for closing: Fixed
Additional comments about closing: perl 5.22.1-2

Comment by Florian Pritz (bluewind) - Monday, 07 March 2016, 19:33 GMT

Fixed in perl 5.22.1-2 in [testing]

	Tasks related to this task (0)

Duplicate tasks of this task (0)

Arch Linux

FS#48482 - [perl] CVE-2016-2381 - bug in 'taint' environment handling

Details

Loading...