[ubuntu/lucid-security] libwww-perl (delayed), libwww-perl 5.834-1ubuntu0.1 (Accepted)

Ubuntu Installer archive at ubuntu.com
Tue Aug 31 14:04:03 BST 2010


libwww-perl (5.834-1ubuntu0.1) lucid-security; urgency=low

  * SECURITY UPDATE: arbitrary file overwrite via dot file download
    - bin/lwp-download: reject filenames that start with a dot.
    - CVE-2010-2253

Date: Fri, 27 Aug 2010 14:02:51 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/libwww-perl/5.834-1ubuntu0.1
-------------- next part --------------
Format: 1.8
Date: Fri, 27 Aug 2010 14:02:51 -0400
Source: libwww-perl
Binary: libwww-perl
Architecture: source
Version: 5.834-1ubuntu0.1
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libwww-perl - Perl HTTP/WWW client/server library
Changes: 
 libwww-perl (5.834-1ubuntu0.1) lucid-security; urgency=low
 .
   * SECURITY UPDATE: arbitrary file overwrite via dot file download
     - bin/lwp-download: reject filenames that start with a dot.
     - CVE-2010-2253
Checksums-Sha1: 
 e7d79161281af4a2792803c9f3bd5ec36e206aba 1781 libwww-perl_5.834-1ubuntu0.1.dsc
 3ded37d2c72931abcba87868cf909347ace3e1ba 7906 libwww-perl_5.834-1ubuntu0.1.diff.gz
Checksums-Sha256: 
 9a9583060aced5c3bbf8a688be63933576577f35e0f77fc4b7f06d62e7120b3a 1781 libwww-perl_5.834-1ubuntu0.1.dsc
 baf0f0afda4660f6221c6a3da8d4aa2b6c522f8fb6483b0949b3841e54f639c0 7906 libwww-perl_5.834-1ubuntu0.1.diff.gz
Files: 
 48b20c5d43d1676b6e47b5b7808d3729 1781 perl optional libwww-perl_5.834-1ubuntu0.1.dsc
 bdaacd4b8aa6793219e4208f780b46ff 7906 perl optional libwww-perl_5.834-1ubuntu0.1.diff.gz
Original-Maintainer: Debian Perl Group <pkg-perl-maintainers at lists.alioth.debian.org>


More information about the Lucid-changes mailing list