Debian: Security Advisory (DSA-4042-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : perl-Catalyst-Plugin-Static-Simple (2017-5cb8354008)

Security fix for CVE-2017-16248. Catalyst::Plugin::Static::Simple has been changed to not serve static files with dots in the names i.e. .svn, .git, ... Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 25 : perl-Catalyst-Plugin-Static-Simple (2017-184d078d87)

Security fix for CVE-2017-16248. Catalyst::Plugin::Static::Simple has been changed to not serve static files with dots in the names i.e. .svn, .git, ... Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

[SECURITY] Fedora 25 Update: perl-Catalyst-Plugin-Static-Simple-0.34-1.fc25

The Static::Simple plugin is designed to make serving static content in your application during development quick and easy, without requiring a single line of code from you...

[SECURITY] Fedora 26 Update: perl-Catalyst-Plugin-Static-Simple-0.34-1.fc26

The Static::Simple plugin is designed to make serving static content in your application during development quick and easy, without requiring a single line of code from you...

Debian DLA-1171-1 : libxml-libxml-perl security update

The XML::LibXML perl module is affected by a 'use-after-free' vulnerability which allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call. For Debian 7 'Wheezy', these problems have been fixed in version 2.0001+dfsg-1+deb7u2. We recommend that you...

[SECURITY] [DLA 1171-1] libxml-libxml-perl security update

Package : libxml-libxml-perl Version : 2.0001+dfsg-1+deb7u2 CVE ID : CVE-2017-10672 Debian Bug : 866676 The XML::LibXML perl module is affected by a "use-after-free" vulnerability which allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call. For Debi...

DLA-1171-1 libxml-libxml-perl - security update

Bulletin has no description...

Ubuntu 14.04 LTS / 16.04 LTS : Perl vulnerabilities (USN-3478-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3478-1 advisory. Jakub Wilk discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash,...

USN-3478-2: Perl vulnerability

USN-3478-1 fixed two vulnerabilities in Perl. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Jakub Wilk discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a...

USN-3478-1: Perl vulnerabilities

Jakub Wilk discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-12837, CVE-2017-12883...

USN-3478-1 perl vulnerabilities

Jakub Wilk discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-12837, CVE-2017-12883...

Perl Net::Ping::External extension command injection vulnerability

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall.Net::Ping::External extension is one of the cross-platform Ping tools. A security vulnerability exists in Perl Net::Ping::External extension version 0.15 and earlier, which is caused by the...

SUSE SLES11 Security Update : perl (SUSE-SU-2017:2951-1)

This update for perl fixes the following issues: Security issue fixed : - CVE-2017-6512: Race condition in the rmtree and removetree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving directory-permission loosening logi...

SUSE-SU-2017:2951-1 Security update for perl

This update for perl fixes the following issues: Security issue fixed: - CVE-2017-6512: Race condition in the rmtree and removetree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving directory-permission loosening logic...

Debian DSA-4023-1 : slurm-llnl - security update

Ryan Day discovered that the Simple Linux Utility for Resource Management SLURM, a cluster resource management and job scheduling system, does not properly handle SPANK environment variables, allowing a user permitted to submit jobs to execute code as root during the Prolog or Epilog. All systems...

Command injection

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

UBUNTU-CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...