[Bug 663803] New: CVE-2010-3438 perl-POE-Component-IRC: arbitrary IRC command execution due to insufficient stripping of CR/LF [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: CVE-2010-3438 perl-POE-Component-IRC: arbitrary IRC command execution due to
insufficient stripping of CR/LF [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=663803
Summary: CVE-2010-3438 perl-POE-Component-IRC: arbitrary IRC
command execution due to insufficient stripping of
CR/LF [fedora-all]
Product: Fedora
Version: 14
Platform: All
OS/Version: Linux
Status: NEW
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Component: perl-POE-Component-IRC
AssignedTo: cweyl(a)alumni.drew.edu
ReportedBy: vdanen(a)redhat.com
QAContact: extras-qa(a)fedoraproject.org
CC: cweyl(a)alumni.drew.edu,
fedora-perl-devel-list(a)redhat.com
Blocks: 663801
Classification: Fedora
Target Release: ---
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=663801
Please note: this issue affects multiple supported versions of Fedora.
Only one tracking bug has been filed; please only close it when all
affected versions are fixed.
[bug automatically created by: add-tracking-bugs]
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.