Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Debian Stretch DLA-3035-1 Moderate: LibDBI Perl Security Issue

debian lts
Calendar Grey May 30, 2022
Dist Debian Esm H88
A patch for libdbi-perl has been released to resolve vulnerabilities related to information exposure, as highlighted in advisory DLA-3035-1.
It was discovered that CVE-2014-10401 was fixed incompletely in the Perl5 Database Interface (DBI)
Topics%20covered

Topics Covered

security advisory debian moderate severity information disclosure libdbi-perl

Summary

CVE-2014-10401

DBD::File drivers can open files from folders other than those
specifically passed via the f_dir attribute.

CVE-2014-10402

DBD::File drivers can open files from folders other than those
specifically passed via the f_dir attribute in the data source
name (DSN). NOTE: this issue exists because of an incomplete fix
for CVE-2014-10401.

For Debian 9 stretch, this problem has been fixed in version
1.636-1+deb9u2.

We recommend that you upgrade your libdbi-perl packages.

For the detailed security status of libdbi-perl please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/libdbi-perl

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
important
Lowest
Low
Medium
High
Critical

Package: libdbi-perl
Version: 1.636-1+deb9u2
CVE ID: CVE-2014-10402
Debian Bug: 972180

Topics%20covered

Topics Covered

security advisory debian moderate severity information disclosure libdbi-perl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here