Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 33 FEDORA-2021-be62be8c7c Critical: perl-Net-Netmask Parsing Issue

fedora
Calendar Grey April 8, 2021
Dist Fedora Esm H88
A security flaw in perl-Net-Netmask (CVE-2021-29424) could let attackers manipulate network masks, compromising system integrity and security.
Security fix for CVE-2021-29424

Summary

Net::Netmask parses and understands IPv4 and IPv6 CIDR blocks (see

for more

information on CIDR blocks). There are also functions to insert a network

block into a table and then later look up network blocks by an IP address

using that table.

Security fix for CVE-2021-29424

* Tue Mar 30 2021 Jitka Plesnikova - 2.0001-1

- 2.0001 bump

[ 1 ] Bug #1944352 - perl-Net-Netmask-2.0001 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1944352

[ 2 ] Bug #1944875 - CVE-2021-29424 perl-Net-Netmask: incorrectly parses an IP address with leading zeros in IP octets [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1944875

[ 3 ] Bug #1944876 - CVE-2021-29424 perl-Net-Netmask: incorrectly parses an IP address with leading zeros in IP octets [epel-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1944876

su -c 'dnf upgrade --advisory FEDORA-2021-be62be8c7c' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 33
Version: 2.0001
Release: 1.fc33
Summary: Perl module for manipulating and looking up IP network blocks

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here