Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Fedora 40: FEDORA-2024-3da8ed5be3 moderate: perl-Data-UUID Symlink Issue

fedora
Calendar Grey March 28, 2024
Dist Fedora Esm H88
CVE-2014-3566 is addressed in perl-XML-LibXML for Ubuntu 22.04, safeguarding against XML injection vulnerabilities via untrusted data.
This update fixes CVE-2013-4184 (possible symlink attack due to use of predictable temporary file names)

Summary

This module provides a framework for generating v3 UUIDs (Universally Unique

Identifiers, also known as GUIDs (Globally Unique Identifiers). A UUID is 128

bits long, and is guaranteed to be different from all other UUIDs/GUIDs

generated until 3400 CE.

UUIDs were originally used in the Network Computing System (NCS) and later in

the Open Software Foundation's (OSF) Distributed Computing Environment.

Currently many different technologies rely on UUIDs to provide unique identity

for various software components. Microsoft COM/DCOM for instance, uses GUIDs

very extensively to uniquely identify classes, applications and components

across network-connected systems.

The algorithm for UUID generation, used by this extension, is described in the

Internet Draft "UUIDs and GUIDs" by Paul J. Leach and Rich Salz (see RFC 4122).

It provides a reasonably efficient and reliable framework for generating UUIDs

and supports fairly high allocation rates - 10 million per second per machine -

and therefore is suitable for identifying both extremely short-lived and very

persistent objects on a given system as well as across the network.

This module provides several methods to create a UUID. In all methods,

is a UUID and is a free form string.

Update Information:

This update fixes CVE-2013-4184 (possible symlink attack due to use of predictable temporary file names). The module no longer saves state in temporary files at all.

Change Log

* Tue Mar 19 2024 Paul Howarth - 1.227-1 - Update to 1.227 - New maintainer, GTERMARS - Add basic GitHub Actions setup for testing - Typo corrections in POD - Eliminated use of state/node files in temp directory (CVE-2013-4184)

References

Fedora Update Notification FEDORA-2024-3da8ed5be3 2024-03-28 00:15:36.328340 Name : perl-Data-UUID Product : Fedora 40 Version : 1.227 Release : 1.fc40 URL : https://metacpan.org/dist/Data-UUID Summary : Globally/Universally Unique Identifiers (GUIDs/UUIDs) Description : This module provides a framework for generating v3 UUIDs (Universally Unique Identifiers, also known as GUIDs (Globally Unique Identifiers). A UUID is 128 bits long, and is guaranteed to be different from all other UUIDs/GUIDs generated until 3400 CE. UUIDs were originally used in the Network Computing System (NCS) and later in the Open Software Foundation's (OSF) Distributed Computing Environment. Currently many different technologies rely on UUIDs to provide unique identity for various software components. Microsoft COM/DCOM for instance, uses GUIDs very extensively to uniquely identify classes, applications and components across network-connected systems. The algorithm for UUID generation, used by this extension, is described in the Internet Draft "UUIDs and GUIDs" by Paul J. Leach and Rich Salz (see RFC 4122). It provides a reasonably efficient and reliable framework for generating UUIDs and supports fairly high allocation rates - 10 million per second per machine - and therefore is suitable for identifying both extremely short-lived and very persistent objects on a given system as well as across the network. This module provides several methods to create a UUID. In all methods, is a UUID and is a free form string.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-3da8ed5be3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
important
Lowest
Low
Medium
High
Critical

Name: perl-Data-UUID
Product: Fedora 40
Version: 1.227
Release: 1.fc40
Summary: Globally/Universally Unique Identifiers (GUIDs/UUIDs)

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here