]> code.ossystems Code Review - openembedded-core.git/commit
perl: fix CVE-2012-6329
authorRoss Burton <ross.burton@intel.com>
Mon, 29 Apr 2013 14:25:02 +0000 (15:25 +0100)
committerRoss Burton <ross.burton@intel.com>
Mon, 29 Apr 2013 14:25:02 +0000 (15:25 +0100)
commitb585a50b7bd735c3092af9477af263c13c853d32
treefa43aa3465da589e1a82dea2b282f7136758259d
parent1d4f2d5ef65135e61d78ac0db90afe7f5d166d05
perl: fix CVE-2012-6329

From http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6329:
"The _compile function in Maketext.pm in the Locale::Maketext implementation in
Perl before 5.17.7 does not properly handle backslashes and fully qualified
method names during compilation of bracket notation, which allows
context-dependent attackers to execute arbitrary commands via crafted input to
an application."

Patches taken from upstream git.

Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-devtools/perl/perl-5.14.2/cve-2012-6329.patch [new file with mode: 0644]
meta/recipes-devtools/perl/perl_5.14.2.bb