[Bug 760132] New: CVE-2011-4114 perl-PAR-Packer: insecure temporary directory handling [fedora-all]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.

Summary: CVE-2011-4114 perl-PAR-Packer: insecure temporary directory handling
[fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=760132

           Summary: CVE-2011-4114 perl-PAR-Packer: insecure temporary
                    directory handling [fedora-all]
           Product: Fedora
           Version: 15
          Platform: All
        OS/Version: Linux
            Status: NEW
          Keywords: Security, SecurityTracking
          Severity: low
          Priority: low
         Component: perl-PAR
        AssignedTo: mmaslano(a)redhat.com
        ReportedBy: jlieskov(a)redhat.com
         QAContact: extras-qa(a)fedoraproject.org
                CC: fedora-perl-devel-list(a)redhat.com, mmaslano(a)redhat.com
            Blocks: 753955
    Classification: Fedora
      Story Points: ---
              Type: ---



This is an automatically created tracking bug!  It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.

For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.

For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs

When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs).  Please mention the CVE IDs being fixed
in the RPM changelog when available.

Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=753955

Please note: this issue affects multiple supported versions of Fedora.
Only one tracking bug has been filed; please ensure that it is only closed
when all affected versions are fixed.


[bug automatically created by: add-tracking-bugs]

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 760132] CVE-2011-4114 perl-PAR-Packer: insecure temporary directory handling [fedora-all]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=760132

Petr Pisar <ppisar(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |MODIFIED
                 CC|                            |ppisar(a)redhat.com
         AssignedTo|mmaslano(a)redhat.com         |ppisar(a)redhat.com
   Fixed In Version|                            |perl-PAR-Packer-1.011-1.fc1
                   |                            |7

--- Comment #1 from Petr Pisar <ppisar(a)redhat.com&gt; 2011-12-05 11:11:00 EST ---
Fixed as perl-PAR-Packer-1.011-1.fc17 in F17.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 760132] CVE-2011-4114 perl-PAR-Packer: insecure temporary directory handling [fedora-all]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=760132

Petr Pisar <ppisar(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|mmaslano(a)redhat.com,        |
                   |ppisar(a)redhat.com           |
   Fixed In Version|perl-PAR-Packer-1.011-1.fc1 |perl-PAR-1.004-1.fc17
                   |7                           |

--- Comment #2 from Petr Pisar <ppisar(a)redhat.com&gt; 2011-12-05 11:14:16 EST ---
(In reply to comment #1)
>  Fixed as perl-PAR-Packer-1.011-1.fc17 in F17. 
This is perl-PAR:  Fixed as perl-PAR-1.004-1.fc17 in F17.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 760132] CVE-2011-4114 perl-PAR-Packer: insecure temporary directory handling [fedora-all]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=760132

--- Comment #3 from Fedora Update System <updates(a)fedoraproject.org&gt; 2011-12-06
10:01:15 EST ---
perl-PAR-1.002-5.fc16,perl-PAR-Packer-1.010-3.fc16 has been submitted as an
update for Fedora 16.
https://admin.fedoraproject.org/updates/perl-PAR-1.002-5.fc16,perl-PAR-Pa...

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 760132] CVE-2011-4114 perl-PAR-Packer: insecure temporary directory handling [fedora-all]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=760132

--- Comment #4 from Fedora Update System <updates(a)fedoraproject.org&gt; 2011-12-06
10:03:22 EST ---
perl-PAR-1.002-4.fc15,perl-PAR-Packer-1.008-4.fc15 has been submitted as an
update for Fedora 15.
https://admin.fedoraproject.org/updates/perl-PAR-1.002-4.fc15,perl-PAR-Pa...

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 760132] CVE-2011-4114 perl-PAR-Packer: insecure temporary directory handling [fedora-all]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=760132

--- Comment #5 from Fedora Update System <updates(a)fedoraproject.org&gt; 2011-12-06
10:04:01 EST ---
perl-PAR-1.000-3.fc14,perl-PAR-Packer-1.005-4.fc14 has been submitted as an
update for Fedora 14.
https://admin.fedoraproject.org/updates/perl-PAR-1.000-3.fc14,perl-PAR-Pa...

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 760132] CVE-2011-4114 perl-PAR-Packer: insecure temporary directory handling [fedora-all]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=760132

Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|MODIFIED                    |ON_QA

--- Comment #6 from Fedora Update System <updates(a)fedoraproject.org&gt; 2011-12-10
14:38:48 EST ---
Package perl-PAR-1.002-5.fc16, perl-PAR-Packer-1.010-3.fc16:
* should fix your issue,
* was pushed to the Fedora 16 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing perl-PAR-1.002-5.fc16
perl-PAR-Packer-1.010-3.fc16'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2011-16856/perl-PAR-1.002-...
then log in and leave karma (feedback).

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 760132] CVE-2011-4114 perl-PAR-Packer: insecure temporary directory handling [fedora-all]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=760132

Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ON_QA                       |CLOSED
   Fixed In Version|perl-PAR-1.004-1.fc17       |perl-PAR-1.002-4.fc15
         Resolution|                            |ERRATA
        Last Closed|                            |2011-12-21 11:56:37

--- Comment #7 from Fedora Update System <updates(a)fedoraproject.org&gt; 2011-12-21
11:56:37 EST ---
perl-PAR-1.002-4.fc15, perl-PAR-Packer-1.008-4.fc15 has been pushed to the
Fedora 15 stable repository.  If problems still persist, please make note of it
in this bug report.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 760132] CVE-2011-4114 perl-PAR-Packer: insecure temporary directory handling [fedora-all]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=760132

Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Fixed In Version|perl-PAR-1.002-4.fc15       |perl-PAR-1.002-5.fc16

--- Comment #8 from Fedora Update System <updates(a)fedoraproject.org&gt; 2011-12-21
11:58:01 EST ---
perl-PAR-1.002-5.fc16, perl-PAR-Packer-1.010-3.fc16 has been pushed to the
Fedora 16 stable repository.  If problems still persist, please make note of it
in this bug report.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 760132] CVE-2011-5060 perl-PAR: insecure temporary directory handling [fedora-all]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=760132

Petr Pisar <ppisar(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|CVE-2011-4114               |CVE-2011-5060 perl-PAR:
                   |perl-PAR-Packer: insecure   |insecure temporary
                   |temporary directory         |directory handling
                   |handling [fedora-all]       |[fedora-all]

--- Comment #9 from Petr Pisar <ppisar(a)redhat.com&gt; 2012-01-16 04:21:51 EST ---
CVE-2011-4114 for PAR renamed to CVE-2011-5060.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.