drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mangelnde Eingabeprüfung in perl-Data-FormValidator
Name: |
Mangelnde Eingabeprüfung in perl-Data-FormValidator |
|
ID: |
FEDORA-2011-11756 |
|
Distribution: |
Fedora |
|
Plattformen: |
Fedora 15 |
|
Datum: |
Do, 8. September 2011, 09:47 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2201 |
|
Applikationen: |
perl-Data-FormValidator |
|
Originalnachricht |
------------------------------------------------------------------------------- - Fedora Update Notification FEDORA-2011-11756 2011-08-31 00:49:51 ------------------------------------------------------------------------------- -
Name : perl-Data-FormValidator Product : Fedora 15 Version : 4.66 Release : 6.fc15 URL : http://search.cpan.org/dist/Data-FormValidator/ Summary : Validates user input (usually from an HTML form) based on input profile Description : Data::FormValidator's main aim is to make input validation expressible in a simple format.
------------------------------------------------------------------------------- - Update Information:
This update resolve CVE-2011-2201. ------------------------------------------------------------------------------- - ChangeLog:
* Sun Aug 28 2011 Iain Arnell <iarnell@gmail.com> 4.66-6 - add patch to resolve CVE-2011-2201 * Wed Jul 20 2011 Petr Sabata <contyk@redhat.com> - 4.66-5 - Perl mass rebuild ------------------------------------------------------------------------------- - References:
[ 1 ] Bug #712694 - CVE-2011-2201 perl-Data-FormValidator: Reports invalid field as valid when untaint_all_constraints used https://bugzilla.redhat.com/show_bug.cgi?id=712694 ------------------------------------------------------------------------------- -
This update can be installed with the "yum" update program. Use su -c 'yum update perl-Data-FormValidator' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys ------------------------------------------------------------------------------- - _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-announce
|
|
|
|