Menu
▾
▴
[Cucumber-linux-security] perl (security update is available)
|
From: Z5T1 <z5...@z5...> - 2017-09-11 16:49:31
|
Update Information A security update is available for perl for the following versions of Cucumber Linux: * 1.0 Here are the details from the Cucumber 1.0 changelog: +----------------+ Mon Sep 11 12:17:56 EDT 2017 lang-base/perl upgraded from 5.22.1 to 5.22.4 to fix CVE-2016-1238, a vulnerability which could allow for privilege escalation and arbitrary code execution via a malicious Perl module in the current directory and a specially crafted Perl include path. For more information see: https://nvd.nist.gov/vuln/detail/CVE-2016-1238 http://security.cucumberlinux.com/security/details.php?id=16 https://bugzilla.redhat.com/show_bug.cgi?id=1355695 http://www.securitytracker.com/id/1036440 * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ CLD Information This update is associated with the following Cucumber Linux Deficiency (CLD) numbers: * CLD-16 (http://security.cucumberlinux.com/security/details.php?id=16) More information about these CLDs can be found at their respective pages on the Cucumber Linux Security Advisory Tracker (these are the URLs in parenthesis above). ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure perl is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber 1.0 i686: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0/cucumber-i686/lang-base/perl-5.22.4-i686-1.txz Cucumber 1.0 x86_64: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0/cucumber-x86_64/lang-base/perl-5.22.4-x86_64-1.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg perl-5.22.4-i686-1.txz ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://www.cucumberlinux.com/security.php |
