[Bug 663803] New: CVE-2010-3438 perl-POE-Component-IRC: arbitrary IRC command execution due to insufficient stripping of CR/LF [fedora-all]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.

Summary: CVE-2010-3438 perl-POE-Component-IRC: arbitrary IRC command execution due to
insufficient stripping of CR/LF [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=663803

           Summary: CVE-2010-3438 perl-POE-Component-IRC: arbitrary IRC
                    command execution due to insufficient stripping of
                    CR/LF [fedora-all]
           Product: Fedora
           Version: 14
          Platform: All
        OS/Version: Linux
            Status: NEW
          Keywords: Security, SecurityTracking
          Severity: medium
          Priority: medium
         Component: perl-POE-Component-IRC
        AssignedTo: cweyl(a)alumni.drew.edu
        ReportedBy: vdanen(a)redhat.com
         QAContact: extras-qa(a)fedoraproject.org
                CC: cweyl(a)alumni.drew.edu,
                    fedora-perl-devel-list(a)redhat.com
            Blocks: 663801
    Classification: Fedora
    Target Release: ---



This is an automatically created tracking bug!  It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.

For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.

For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs

When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.

Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=663801

Please note: this issue affects multiple supported versions of Fedora.
Only one tracking bug has been filed; please only close it when all
affected versions are fixed.


[bug automatically created by: add-tracking-bugs]

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.