Bug 13340

Summary:	perl-libwww-perl new security issue CVE-2014-3230
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	Jerome Quelin <jquelin>
Status:	RESOLVED DUPLICATE	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal	CC:	jquelin
Version:	Cauldron
Target Milestone:	---
Hardware:	i586
OS:	Linux
Whiteboard:	MGA4TOO, MGA3TOO
Source RPM:	perl-libwww-perl-6.60.0-1.mga5.src.rpm	CVE:
Status comment:

Description David Walser 2014-05-07 21:20:41 CEST

A CVE has been assigned for a security issue in libwww-perl:
http://openwall.com/lists/oss-security/2014/05/06/8

Apparently it's still under investigation upstream, and more CVEs may be allocated in the future in relation to this.

Mageia 3 and Mageia 4 are also affected (issues present since 6.04).

Reproducible: 

Steps to Reproduce:

David Walser 2014-05-07 21:20:48 CEST

Whiteboard: (none) => MGA4TOO, MGA3TOO

Comment 1 Jerome Quelin 2014-06-02 15:34:14 CEST

It seems to be the same as 13425 (pointing to same upstream commit message)

*** This bug has been marked as a duplicate of bug 13425 ***

Status: NEW => RESOLVED
CC: (none) => jquelin
Resolution: (none) => DUPLICATE