Debian DLA-1171-1 : libxml-libxml-perl security update

The XML::LibXML perl module is affected by a 'use-after-free' vulnerability which allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call. For Debian 7 'Wheezy', these problems have been fixed in version 2.0001+dfsg-1+deb7u2. We recommend that you...

[SECURITY] [DLA 1171-1] libxml-libxml-perl security update

Package : libxml-libxml-perl Version : 2.0001+dfsg-1+deb7u2 CVE ID : CVE-2017-10672 Debian Bug : 866676 The XML::LibXML perl module is affected by a "use-after-free" vulnerability which allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call. For Debi...

DLA-1171-1 libxml-libxml-perl - security update

Bulletin has no description...

Ubuntu 14.04 LTS / 16.04 LTS : Perl vulnerabilities (USN-3478-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3478-1 advisory. Jakub Wilk discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash,...

USN-3478-2: Perl vulnerability

USN-3478-1 fixed two vulnerabilities in Perl. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Jakub Wilk discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a...

USN-3478-1: Perl vulnerabilities

Jakub Wilk discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-12837, CVE-2017-12883...

USN-3478-1 perl vulnerabilities

Jakub Wilk discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-12837, CVE-2017-12883...

Perl Net::Ping::External extension command injection vulnerability

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall.Net::Ping::External extension is one of the cross-platform Ping tools. A security vulnerability exists in Perl Net::Ping::External extension version 0.15 and earlier, which is caused by the...

SUSE SLES11 Security Update : perl (SUSE-SU-2017:2951-1)

This update for perl fixes the following issues: Security issue fixed : - CVE-2017-6512: Race condition in the rmtree and removetree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving directory-permission loosening logi...

SUSE-SU-2017:2951-1 Security update for perl

This update for perl fixes the following issues: Security issue fixed: - CVE-2017-6512: Race condition in the rmtree and removetree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving directory-permission loosening logic...

Debian DSA-4023-1 : slurm-llnl - security update

Ryan Day discovered that the Simple Linux Utility for Resource Management SLURM, a cluster resource management and job scheduling system, does not properly handle SPANK environment variables, allowing a user permitted to submit jobs to execute code as root during the Prolog or Epilog. All systems...

Command injection

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

UBUNTU-CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

CVE-2008-7319

The CVE-2008-7319 issue affects the Perl Net::Ping::External extension (up to version 0.15) where External.pm does not properly sanitize inputs containing shell metacharacters before using backticks, enabling shell command injection and arbitrary command execution when untrusted input is supplied...

CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

MGASA-2017-0404 Updated git packages fix security vulnerability

The git subcommand cvsserver is a Perl script which makes excessive use of the backtick operator to invoke git. Unfortunately user input is used within some of those invocations, which can be a OS Command Injection vulnerability CVE-2017-14867...

The vulnerability of the distributed Git version control system, related to insufficient validation of input data, allows a hacker to execute arbitrary operating system commands.

The vulnerability of the distributed Git version control system is related to the use of insecure Perl scripts for supporting subcommands such as cvsserver. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands on behalf of the git user remotely...

Debian DLA-1156-1 : libdatetime-timezone-perl new upstream version

This update includes the changes in tzdata 2017c for the Perl bindings. For the list of changes, see DLA-1156-1. For Debian 7 'Wheezy', these problems have been fixed in version 1:1.58-1+2017c. We recommend that you upgrade your libdatetime-time zone-perl packages. NOTE: Tenable Network Security...