Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #708288
| From | Chris Boot <crb@tiger-computing.co.uk> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.security |
| Subject | Bug#810799: libcgi-session-perl: Perl DSA-3441-1 exposes taint bug in CGI::Session::Driver::file |
| Date | 2016-01-12 14:20 +0100 |
| Message-ID | <qQ71F-1nL-11@gated-at.bofh.it> (permalink) |
| References | <qQ6yC-WB-25@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
Control: tag -1 security On 12/01/16 12:28, Chris Boot wrote: [snip] > Forwarded: https://rt.cpan.org/Public/Bug/Display.html?id=80346 > > Dear Maintainer, > > With Perl upgraded from 5.20.2-3+deb8u1 to 5.20.2-3+deb8u2, our > installation of TWiki (http://twiki.org/) no longer functions. This > happens due to CGI::Session::Driver::file complaining about taint. I'm bringing this bug to the attention of the security team, as it has only come to light since the Jessie DSA of Perl (DSA-3441-1), so it's a stable security regression. Regards, Chris -- Chris Boot Tiger Computing Ltd IS27001:2013 Certified Tel: 01600 483 484 Web: https://www.tiger-computing.co.uk Registered in England. Company number: 3389961 Registered address: Wyastone Business Park, Wyastone Leys, Monmouth, NP25 3SR
Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#810799: libcgi-session-perl: Perl DSA-3441-1 exposes taint bug in CGI::Session::Driver::file Chris Boot <crb@tiger-computing.co.uk> - 2016-01-12 13:50 +0100
Bug#810799: libcgi-session-perl: Perl DSA-3441-1 exposes taint bug in CGI::Session::Driver::file Chris Boot <crb@tiger-computing.co.uk> - 2016-01-12 14:20 +0100
Bug#810799: libcgi-session-perl: Perl DSA-3441-1 exposes taint bug in CGI::Session::Driver::file Dominic Hargreaves <dom@earth.li> - 2016-01-12 14:50 +0100
Bug#810799: libcgi-session-perl: Perl DSA-3441-1 exposes taint bug in CGI::Session::Driver::file Salvatore Bonaccorso <carnil@debian.org> - 2016-01-12 16:40 +0100
Bug#810799: libcgi-session-perl: Perl DSA-3441-1 exposes taint bug in CGI::Session::Driver::file Chris Boot <crb@tiger-computing.co.uk> - 2016-01-12 18:40 +0100
Bug#810799: libcgi-session-perl: Perl DSA-3441-1 exposes taint bug in CGI::Session::Driver::file Niko Tyni <ntyni@debian.org> - 2016-01-12 23:40 +0100
Bug#810799: libcgi-session-perl: Perl DSA-3441-1 exposes taint bug in CGI::Session::Driver::file Niko Tyni <ntyni@debian.org> - 2016-01-14 23:10 +0100
Bug#810799: libcgi-session-perl: Perl DSA-3441-1 exposes taint bug in CGI::Session::Driver::file Niko Tyni <ntyni@debian.org> - 2016-01-15 16:20 +0100
csiph-web