Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:3385-1

Опубликовано: 19 нояб. 2020
Источник: suse-cvrf

Описание

Security update for perl-DBI

This update for perl-DBI fixes the following issues:

  • DBD::File drivers could open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). [bsc#1176492, CVE-2014-10401, CVE-2014-10402]

Список пакетов

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy
perl-DBI-1.639-3.14.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server
perl-DBI-1.639-3.14.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy
perl-DBI-1.639-3.14.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server
perl-DBI-1.639-3.14.1
Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy
perl-DBI-1.639-3.14.1
Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server
perl-DBI-1.639-3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP1
perl-DBI-1.639-3.14.1

Ссылки

Описание

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.

Затронутые продукты
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:perl-DBI-1.639-3.14.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:perl-DBI-1.639-3.14.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:perl-DBI-1.639-3.14.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:perl-DBI-1.639-3.14.1
Ссылки

Описание

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.

Затронутые продукты
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:perl-DBI-1.639-3.14.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:perl-DBI-1.639-3.14.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:perl-DBI-1.639-3.14.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:perl-DBI-1.639-3.14.1
Ссылки