packages

Aucune description

Jo-Philipp Wich f73e358558 perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607] Beginning in PathTools 3.47 and/or perl 5.20.0, the File::Spec::canonpath() routine returned untained strings even if passed tainted input. This defect undermines the guarantee of taint propagation, which is sometimes used to ensure that unvalidated user input does not reach sensitive code. This defect was found and reported by David Golden of MongoDB, and a patch was provided by Tony Cook. References: * https://rt.perl.org/Public/Bug/Display.html?id=126862 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8607 Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>		il y a 9 ans
..
010-musl-compat.patch	perl: Reorganize patches	il y a 9 ans
020-host-libc-dir-moved-debian+derivatives.patch	perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607]	il y a 9 ans
100-fix-cross-compile-endianness-detection.patch	perl: Reorganize patches	il y a 9 ans
110-always_use_miniperl.patch	perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607]	il y a 9 ans
300-add-relink-hack.patch	perl: Reorganize patches	il y a 9 ans
310-recompile-hack.patch	perl: Work around recompile failures	il y a 9 ans
700-tie_fetch_count_t-handle_missing_crypt.patch	perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607]	il y a 9 ans
710-threads_join-skip_ps_on_busybox.patch	perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607]	il y a 9 ans
900-CVE-2015-8607.patch	perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607]	il y a 9 ans