Stay Secure with the Latest Linux Advisories

security advisoryFedoracritical update

Fedora 24: Advisories for Perl-File-Path Critical File Mode Risk

This release fixes a possible setting arbitrary mode on an arbitrary file in rmtree() and remove_tree() calls known as CVE-2017-6512.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-212f07c853 2017-06-16 13:14:50.415318 --------------------------------------------------------------------------------Name : perl-File-Path Product : Fedora 24 Version : 2.12 Release : 3.fc24 URL : https://metacpan.org/dist/File-Path Summary : Create or remove directory trees Description : This module provides a convenient way to create directories of arbitrary depth and to delete an entire directory subtree from the file system. --------------------------------------------------------------------------------Update Information: This release fixes a possible setting arbitrary mode on an arbitrary file in rmtree() and remove_tree() calls known as CVE-2017-6512. --------------------------------------------------------------------------------References: [ 1 ] Bug #1457832 - CVE-2017-6512 perl-File-Path: rmtree/remove_tree race condition https://bugzilla.redhat.com/show_bug.cgi?id=1457832 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade perl-File-Path' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Fedora 24 upgrades perl-File-Path to address avulnerability related to the manipulation of file permissions in the rmtree/remove_tree functions.. Fedora Security Advisory, Perl File Path Update, File System Security. . Severity: Critical. LinuxSecurity.com Team

Jun 16, 2017 •Critical Fedora