Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2017-3604

Высокий

ALT-PU-2017-3604: package perl-PathTools update to version 3.62-alt2

Источник
errata.altlinux.org
Дата публикации
19.02.2017
Дата обновления
19.02.2017
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades perl-PathTools to version 3.62-alt2.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 7.3
ubuntu
почти 11 лет назад

The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.

redhat
почти 11 лет назад

The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.

CVSS3: 7.3
nvd
почти 11 лет назад

The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.

CVSS3: 7.3
debian
почти 11 лет назад

The canonpath function in the File::Spec module in PathTools before 3. ...

CVSS3: 7.3
github
больше 4 лет назад

The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.