Fedora 23 : perl-Module-Load-Conditional (2016-0aa251bc9b)

This update adds an option 'FORCESAFEINC', which, if set it isn't by default, removes the current directory from the module load path so as to avoid loading code from a potentially unsafe place CVE-2016-1238. Note that Tenable Network Security has extracted the preceding description block directl...

Fedora 24 : perl-CGI-Emulate-PSGI (2016-683d0b257b) (httpoxy)

This updates bumps perl-CGI-Emulate-PSGI to version 0.22 which removes the setting of the HTTPPROXY environment value. This works around the httproxy vulnerability aka CVE-2016-5387 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

Fedora 24 : perl-Module-Load-Conditional (2016-dd20a4631a)

This update adds an option 'FORCESAFEINC', which, if set it isn't by default, removes the current directory from the module load path so as to avoid loading code from a potentially unsafe place CVE-2016-1238. Note that Tenable Network Security has extracted the preceding description block directl...

[SECURITY] Fedora 23 Update: perl-Module-Load-Conditional-0.68-1.fc23

This module provides simple ways to query and possibly load any of the modu les you have installed on your system during run-time...

[SECURITY] Fedora 24 Update: perl-CGI-Emulate-PSGI-0.22-1.fc24

This module allows an application designed for the CGI environment to run in a PSGI environment, and thus on any of the back-ends that PSGI supports...

[SECURITY] Fedora 24 Update: perl-Module-Load-Conditional-0.68-1.fc24

This module provides simple ways to query and possibly load any of the modu les you have installed on your system during run-time...

Debian DLA-584-1 : libsys-syslog-perl security update

John Lightsey and Todd Rinaldo reported that the opportunistic loading of optional modules can make many programs unintentionally load code from the current working directory which might be changed to another directory without the user realising and potentially leading to privilege escalation, as...

FreeBSD : perl -- local arbitrary code execution (72bfbb09-5a6a-11e6-a6c3-14dae9d210b8)

Sawyer X reports : Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . period characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory. %NASLMINLEVEL 70300 C...

Fedora Update for perl FEDORA-2016-e9e5c081d4

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for perl-DBD-MySQL FEDORA-2016-4274c906e7

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : p5-XSLoader -- local arbitrary code execution (3e08047f-5a6c-11e6-a6c3-14dae9d210b8)

Jakub Wilk reports : XSLoader tries to load code from a subdirectory in the cwd when called inside a string eval %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...

Fedora 24 : perl-DBD-MySQL (2016-4274c906e7)

Security fix for perl-DBD-MySQL Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 24 : 4:perl (2016-e9e5c081d4)

Security fix for CVE-2016-1238 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

[SECURITY] Fedora 24 Update: perl-DBD-MySQL-4.035-1.fc24

DBD::mysql is the Perl5 Database Interface driver for the MySQL database. In other words: DBD::mysql is an interface between the Perl programming langua ge and the MySQL programming API that comes with the MySQL relational database management system...

[SECURITY] Fedora 24 Update: perl-5.22.2-362.fc24

Perl is a high-level programming language with roots in C, sed, awk and she ll scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

[SECURITY] [DLA 584-1] libsys-syslog-perl security update

Package : libsys-syslog-perl Version : 0.29-1+deb7u1 CVE ID : CVE-2016-1238 John Lightsey and Todd Rinaldo reported that the opportunistic loading of optional modules can make many programs unintentionally load code from the current working directory which might be changed to another directory...

Debian Security Advisory DSA 3635-1 (libdbd-mysql-perl - security update)

Two use-after-free vulnerabilities were discovered in DBD::mysql, a Perl DBI driver for the MySQL database server. A remote attacker can take advantage of these flaws to cause a denial-of-service against an application using DBD::mysql application crash, or potentially to execute arbitrary code...

Debian: Security Advisory (DSA-3635-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-584-1 libsys-syslog-perl - security update

Bulletin has no description...

CVE-2016-6185

The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory...