CVE-2017-6512 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6512): In the rmtree() and remove_tree() functions, the chmod()logic to make directories traversable can be abused to set the mode on an attacker-chosen file to an attacker-chosen value. This is due to the time-of-check-to-time-of-use (TOCTTOU) race condition between the stat() that decides the inode is a directory and the chmod() that tries to make it user-rwx.
Upstream bug: https://rt.cpan.org/Public/Bug/Display.html?id=121951 Upstream patch: https://github.com/jkeenan/File-Path/commit/e5ef95276ee8ad471c66ee574a5d42552b3a6af2
commit: 0c419196491e1f35456bc7a90c3bd838568da132 author: 2017-06-01 12:58:54 +1200 Kent Fredric <kentnl@gentoo.org> commit: 2017-06-01 12:59:46 +1200 Kent Fredric <kentnl@gentoo.org> gpg-key: E854324B1366A820 perl-core/File-Path: bump to version 2.130.0 re bug #620304 - EAPI6 - All keywords from virtual/perl-File-Path communicated on the basis that if File-Path works in Perl Itself, the same code being shipped independently should work also. Bug: https://bugs.gentoo.org/620304 Package-Manager: Portage-2.3.5, Repoman-2.3.2 virtual/perl-File-Path: Bump Package-Manager: Portage-2.3.5, Repoman-2.3.2 perl-core/File-Path/File-Path-2.130.0.ebuild | 15 +++++ perl-core/File-Path/Manifest | 1 + virtual/perl-File-Path/perl-File-Path-2.130.0.ebuild | 15 +++++ 3 files changed, 31 insertions(+)
Author: Andreas K. Hüttel <dilfridge@gentoo.org> Date: Thu Jun 1 12:05:01 2017 +0200 dev-lang/perl: Require newer File::Path, bug 620304 Package-Manager: Portage-2.3.6, Repoman-2.3.2 dev-lang/perl/perl-5.24.1-r2.ebuild | 563 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ dev-lang/perl/perl-5.26.0.ebuild | 3 +- 2 files changed, 565 insertions(+), 1 deletion(-)
All arches please test and stabilize, see package list. NOTE: I'm NOT going to patch older Perl versions (5.22) since I'm already working on the cleanup of these in a local branch. If you want to fix your Perl 5.22, just install/require >=virtual/perl-File-Path-2.130.0 (which will override the bundled version of File::Path).
amd64 stable
x86 stable
Stable on alpha.
sparc stable
ia64 stable
ppc64 stable
ppc stable
arm stable
Arches, please finish stabilizing hppa Gentoo Security Padawan ChrisADR
hppa stable (thanks to Dakon!) Last arch is done here.
Thank you, @Maintainers, please cleanup. @Security please add to an existing glsa or file a new one Gentoo Security Padawan ChrisADR
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7732cd814de3b145c06595227e288a489cd3fedf commit 7732cd814de3b145c06595227e288a489cd3fedf Author: Kent Fredric <kentnl@gentoo.org> AuthorDate: 2017-09-12 02:39:25 +0000 Commit: Kent Fredric <kentnl@gentoo.org> CommitDate: 2017-09-12 02:39:25 +0000 virtual/perl-File-Path: Cleanup old re bug #620304 Bug: https://bugs.gentoo.org/620304 Package-Manager: Portage-2.3.6, Repoman-2.3.2 .../perl-File-Path/perl-File-Path-2.120.100_rc-r2.ebuild | 15 --------------- 1 file changed, 15 deletions(-) https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f72a66681df7afe18b59f458358926ab11ac6a0e commit f72a66681df7afe18b59f458358926ab11ac6a0e Author: Kent Fredric <kentnl@gentoo.org> AuthorDate: 2017-09-12 02:36:04 +0000 Commit: Kent Fredric <kentnl@gentoo.org> CommitDate: 2017-09-12 02:36:04 +0000 dev-lang/perl: Cleanup old re bug #620304 Bug: https://bugs.gentoo.org/620304 Package-Manager: Portage-2.3.6, Repoman-2.3.2 dev-lang/perl/perl-5.24.1-r1.ebuild | 562 ------------------------------------ 1 file changed, 562 deletions(-)}
Done here.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/sync/gentoo.git/commit/?id=7732cd814de3b145c06595227e288a489cd3fedf commit 7732cd814de3b145c06595227e288a489cd3fedf Author: Kent Fredric <kentnl@gentoo.org> AuthorDate: 2017-09-12 02:39:25 +0000 Commit: Kent Fredric <kentnl@gentoo.org> CommitDate: 2017-09-12 02:39:25 +0000 virtual/perl-File-Path: Cleanup old re bug #620304 Bug: https://bugs.gentoo.org/620304 Package-Manager: Portage-2.3.6, Repoman-2.3.2 .../perl-File-Path/perl-File-Path-2.120.100_rc-r2.ebuild | 15 --------------- 1 file changed, 15 deletions(-) https://gitweb.gentoo.org/repo/sync/gentoo.git/commit/?id=f72a66681df7afe18b59f458358926ab11ac6a0e commit f72a66681df7afe18b59f458358926ab11ac6a0e Author: Kent Fredric <kentnl@gentoo.org> AuthorDate: 2017-09-12 02:36:04 +0000 Commit: Kent Fredric <kentnl@gentoo.org> CommitDate: 2017-09-12 02:36:04 +0000 dev-lang/perl: Cleanup old re bug #620304 Bug: https://bugs.gentoo.org/620304 Package-Manager: Portage-2.3.6, Repoman-2.3.2 dev-lang/perl/perl-5.24.1-r1.ebuild | 562 ------------------------------------ 1 file changed, 562 deletions(-)}
Thank you all. New GLSA Request filed. Gentoo Security Padawan ChrisADR
This issue was resolved and addressed in GLSA 201709-12 at https://security.gentoo.org/glsa/201709-12 by GLSA coordinator Aaron Bauman (b-man).
