Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: Perl integer overflow issue https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684 ------- Additional Comments From bressers(a)redhat.com 2005-12-01 08:38 EST ------- Created an attachment (id=121681) --> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=121681&action=...) Proposed patch -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2005-3962 Perl integer overflow issue https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684 bressers(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Perl integer overflow issue |CVE-2005-3962 Perl integer | |overflow issue -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2005-3962 Perl integer overflow issue https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684 jvdias(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED ------- Additional Comments From jvdias(a)redhat.com 2005-12-01 12:24 EST ------- Now applying with perl-5.8.6-18 for FC-4 -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2005-3962 Perl integer overflow issue https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684 ------- Additional Comments From updates(a)fedora.redhat.com 2005-12-01 15:09 EST ------- perl-5.8.6-18 has been pushed for FC4, which should resolve this issue. If these problems are still present in this version, then please make note of it in this bug report. -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2005-3962 Perl integer overflow issue https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684 ------- Additional Comments From jvdias(a)redhat.com 2005-12-02 14:39 EST ------- Created an attachment (id=121776) --> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=121776&action=...) upstream patch #26244 Upstream revised their fix of patch #26240 :-( -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2005-3962 Perl integer overflow issue https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684 ------- Additional Comments From jvdias(a)redhat.com 2005-12-08 14:12 EST ------- The upstream perl maintainers have combined the above patch #26244 with other sprintf improvements to deal with Sys::Syslog security vulnerabilities, which are also the subject of CVE-2005-3912 ( CVE-2005-3962 has now been raised on this specific integer overflow issue ). It is recommended to apply upstream patches 26235 to 26240 inclusive and 26244 to solve these issues - I've attached the patches sent by Nicholas Clark, the upstream perl maintainer, to this bug. -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2005-3962 Perl integer overflow issue https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684 ------- Additional Comments From jvdias(a)redhat.com 2005-12-08 14:26 EST ------- Created an attachment (id=122041) --> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=122041&action=...) Upstream patch 26284 -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2005-3962 Perl integer overflow issue https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684 bugzilla(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|security |normal Keywords| |Security notting(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |CLOSED Resolution| |CURRENTRELEASE Fixed In Version| |FC5 ------- Additional Comments From notting(a)redhat.com 2006-09-21 22:19 EST ------- Closing bugs in MODIFIED state from prior Fedora releases. If this bug persists in a current Fedora release (such as Fedora Core 5 or later), please reopen and set the version appropriately. -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.