LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Security Week: April 7th, 2014
Linux Advisory Watch: April 4th, 2014
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Mandriva: 2013:005: perl Print E-mail
User Rating:      How can I rate this item?
Posted by Benjamin D. Thomas   
Mandrake A vulnerability has been found and corrected in perl: Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service [More...]
 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2013:005
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : perl
 Date    : January 28, 2013
 Affected: 2011., Enterprise Server 5.0
 _______________________________________________________________________

 Problem Description:

 A vulnerability has been found and corrected in perl:
 
 Heap-based buffer overflow in the Perl_repeatcpy function in util.c
 in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before
 15.15.5 allows context-dependent attackers to cause a denial of service
 (memory consumption and crash) or possibly execute arbitrary code
 via the 'x' string repeat operator (CVE-2012-5195).
 
 The updated packages have been patched to correct this issue.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5195
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2011:
 2cd2f62ef4fd1fa7d765c5a0fb1292fb  2011/i586/perl-5.12.3-8.2-mdv2011.0.i586.rpm
 a87fedc92aa16e3eb09d3db9c37e1b01  2011/i586/perl-base-5.12.3-8.2-mdv2011.0.i586.rpm
 4dcef0206296645560413e267dd131fe  2011/i586/perl-devel-5.12.3-8.2-mdv2011.0.i586.rpm
 9df0bdda99e7e843943c5e77fba15036  2011/i586/perl-doc-5.12.3-8.2-mdv2011.0.noarch.rpm 
 b3daf9e368021a94048bf6f97a129a15  2011/SRPMS/perl-5.12.3-8.2.src.rpm

 Mandriva Linux 2011/X86_64:
 3b6ab1c60e98b72d7a2ab4fa1ef8f9eb  2011/x86_64/perl-5.12.3-8.2-mdv2011.0.x86_64.rpm
 38a74f3b9dc65b77c3e2a1ce2b7bf6d5  2011/x86_64/perl-base-5.12.3-8.2-mdv2011.0.x86_64.rpm
 f6e421797d0f1fbf064b59569e06e50a  2011/x86_64/perl-devel-5.12.3-8.2-mdv2011.0.x86_64.rpm
 58844f4e30df7e9962a9eb40ea0fbf29  2011/x86_64/perl-doc-5.12.3-8.2-mdv2011.0.noarch.rpm 
 b3daf9e368021a94048bf6f97a129a15  2011/SRPMS/perl-5.12.3-8.2.src.rpm

 Mandriva Enterprise Server 5:
 817cd182ec870213e66404c801de1338  mes5/i586/perl-5.10.0-25.5mdvmes5.2.i586.rpm
 19b31597c4116e2dd524ea3b324f58c4  mes5/i586/perl-base-5.10.0-25.5mdvmes5.2.i586.rpm
 ebe2a75601e9fb4ee43ce346abeea2ee  mes5/i586/perl-devel-5.10.0-25.5mdvmes5.2.i586.rpm
 60bc0e4584b2f8ca1b7a9cb1ee6c0d49  mes5/i586/perl-doc-5.10.0-25.5mdvmes5.2.i586.rpm
 bca381efbda683e01a473e4cd04de078  mes5/i586/perl-suid-5.10.0-25.5mdvmes5.2.i586.rpm 
 72c15bdff31cc3fc342a0f580fbea56b  mes5/SRPMS/perl-5.10.0-25.5mdvmes5.2.src.rpm

 Mandriva Enterprise Server 5/X86_64:
 43baa4703a41bc31774b0c91b97d3021  mes5/x86_64/perl-5.10.0-25.5mdvmes5.2.x86_64.rpm
 44202ed5538712a00e47cea9a045ab3d  mes5/x86_64/perl-base-5.10.0-25.5mdvmes5.2.x86_64.rpm
 e07f48bf12258cf760ef662d8e08d137  mes5/x86_64/perl-devel-5.10.0-25.5mdvmes5.2.x86_64.rpm
 789fc82249d411994197f325086a7279  mes5/x86_64/perl-doc-5.10.0-25.5mdvmes5.2.x86_64.rpm
 5f2c518cc2497ef2ba1799579a99f581  mes5/x86_64/perl-suid-5.10.0-25.5mdvmes5.2.x86_64.rpm 
 72c15bdff31cc3fc342a0f580fbea56b  mes5/SRPMS/perl-5.10.0-25.5mdvmes5.2.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________
 
< Prev   Next >
    
Partner

 

Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2014 Guardian Digital, Inc. All rights reserved.