Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Fedora 41: FEDORA-2024-c05ef21f1f critical: perl-Module-ScanDeps LPE

fedora
Calendar Grey November 28, 2024
Scroller Fedora
Fedora has issued a patch for perl-Module-ScanDeps addressing a local privilege escalation vulnerability found in version 1.37.
1.37 - fix parsing of "use if ..." Fixes errors in PAR::Packer test t/90-rt59710.t - add test for _parse_libs() 1.36

Summary

This module scans potential modules used by perl programs and returns a

hash reference. Its keys are the module names as they appear in %INC (e.g.

Test/More.pm). The values are hash references.

Update Information:

1.37 - fix parsing of "use if ..." Fixes errors in PAR::Packer test t/90-rt59710.t - add test for _parse_libs() 1.36 - Fix CVE-2024-10224: Unsanitized input leads to LPE - use three-argument open() - replace 'eval "..."' constructs Note: this version was not released on CPAN because of Coordinated Release Date for CVE - README: add "Source Repository" and "Contact" info switch "Please submit bug reports to ..." to GitHub issues - add preload rule for MooX::HandlesVia cf. https://github.com/rschupp/PAR-Packer/issues/88

Topics%20covered

Topics Covered

security advisory security update local privilege escalation Fedora software fix perl module unsanitized input

Change Log

* Wed Nov 20 2024 Jitka Plesnikova - 1.37-1 - 1.37 bump (rhbz#2327393); Fix CVE-2024-10224

References


[ 1 ] Bug #2327530 - CVE-2024-10224 perl-Module-ScanDeps: local privilege escalation via unsanitized input [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2327530

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-c05ef21f1f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: perl-Module-ScanDeps
Product: Fedora 41
Version: 1.37
Release: 1.fc41
URL: https://metacpan.org/dist/Module-ScanDeps
Summary: Recursively scan Perl code for dependencies

Topics%20covered

Topics Covered

security advisory security update local privilege escalation Fedora software fix perl module unsanitized input

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.