[UCI-Linux] [SECURITY] Fedora Core 3 Update: perl-5.8.5-22.FC3

Mike Iglesias iglesias at draco.acs.uci.edu
Wed Dec 14 13:16:27 PST 2005


From: "Jason Vas Dias" <jvdias at redhat.com>
To: fedora-announce-list at redhat.com
Date: Wed, 14 Dec 2005 15:36:18 -0500
Subject: [SECURITY] Fedora Core 3 Update: perl-5.8.5-22.FC3

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-1145
2005-12-14
---------------------------------------------------------------------

Product     : Fedora Core 3
Name        : perl
Version     : 5.8.5                      
Release     : 22.FC3                  
Summary     : The Perl programming language.
Description :
Perl is a high-level programming language with roots in C, sed, awk
and shell scripting.  Perl is good at handling processes and files,
and is especially good at handling text.  Perl's hallmarks are
practicality and efficiency.  While it is used to do a lot of
different things, Perl's most common applications are system
administration utilities and web programming.  A large proportion of
the CGI scripts on the web are written in Perl.  You need the perl
package installed on your system so that your system can handle Perl
scripts.

Install this package if you want to program in Perl or enable your
system to handle Perl scripts.

---------------------------------------------------------------------
Update Information:

o Updated upstream fix for sprintf integer overflow
  vulnerabilities CVE-2005-3962 and CVE-2005-3912,
  including new Sys::Syslog 0.08

o Updated fix fo bug 136009 / MakeMaker LD_RUN_PATH issue: 
  restore previous default Red Hat behavior of removing the
  MakeMaker generated LD_RUN_PATH setting from the link    
  command . Document this removal, as it contravenes upstream 
  default behavior, and provide a USE_MM_LD_RUN_PATH 
  MakeMaker member to enable use of the MakeMaker generated 
  LD_RUN_PATH .
---------------------------------------------------------------------
* Mon Dec 12 2005 Jason Vas Dias <jvdias at redhat.com> - 2:5.8.5-22.FC3
- Further enhancements to sprintf integer overflow patch (CVE-2005-3962 / bz174717 )
  (Upstream patches 26282, 26283, 26284, 26322, 26331, 26333)
- Fix CVE-2004-0976 / bz136325: fix issues with solardesigner's patch
  to perldbtty.pl and c2ph.PL, pointed out by Pekka Savola and David Eisenstein
- Fix bug 136009 / MakeMaker LD_RUN_PATH issue: 
  restore previous default Red Hat behavior of removing the MakeMaker
  generated LD_RUN_PATH setting from the link command .
  Document this removal, as it contravenes upstream default behavior, and 
  provide a USE_MM_LD_RUN_PATH MakeMaker member to enable use of the 
  MakeMaker generated LD_RUN_PATH .


---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

a7e2fe1ff4bab8c156872419c2a50f81  SRPMS/perl-5.8.5-22.FC3.src.rpm
6598fa75ba5eaa3801fdfe95f2b752f9  x86_64/perl-5.8.5-22.FC3.x86_64.rpm
feed555aa60c86f50684cc2cbd560e85  x86_64/perl-suidperl-5.8.5-22.FC3.x86_64.rpm
66710a6478deb5007bd9e820ce37f838  x86_64/debug/perl-debuginfo-5.8.5-22.FC3.x86_64.rpm
4adeb9e9cb1d97f7f8ac58bda28df906  i386/perl-5.8.5-22.FC3.i386.rpm
f7ac6cfd6e4af95a440eb642543bbe1e  i386/perl-suidperl-5.8.5-22.FC3.i386.rpm
6ff3d018dc179f24519073b019614b43  i386/debug/perl-debuginfo-5.8.5-22.FC3.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
---------------------------------------------------------------------

-- 
fedora-announce-list mailing list
fedora-announce-list at redhat.com
https://www.redhat.com/mailman/listinfo/fedora-announce-list


More information about the UCI-Linux mailing list