[Bug 1209918] CVE-2015-3409 perl-Module-Signature: arbitrary modules loading in some circumstances

bugzilla at redhat.com bugzilla at redhat.com
Tue Aug 18 10:02:07 UTC 2015


https://bugzilla.redhat.com/show_bug.cgi?id=1209918

Stefan Cornelius <scorneli at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Whiteboard|impact=moderate,public=2015 |impact=moderate,public=2015
                   |0405,reported=20150408,sour |0405,reported=20150408,sour
                   |ce=oss-security,cvss2=5.1/A |ce=oss-security,cvss2=5.1/A
                   |V:N/AC:H/Au:N/C:P/I:P/A:P,f |V:N/AC:H/Au:N/C:P/I:P/A:P,c
                   |edora-all/perl-Module-Signa |we=CWE-20->CWE-77,fedora-al
                   |ture=affected,epel-all/perl |l/perl-Module-Signature=aff
                   |-Module-Signature=affected, |ected,epel-all/perl-Module-
                   |rhel-7/perl-Module-Signatur |Signature=affected,rhel-7/p
                   |e=affected,cwe=CWE-20->CWE- |erl-Module-Signature=wontfi
                   |77                          |x



-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the perl-devel mailing list