Bug 779373

Summary:	dev-perl/Net-CIDR-Lite: octal type confusion
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	minor	CC:	perl
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=779172 https://bugs.gentoo.org/show_bug.cgi?id=779163
Whiteboard:	B4 [upstream]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2021-03-30 12:58:07 UTC

Bit of an epidemic now: https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/

According to URL this is unpatched.

Comment 1 John Helmert III archtester

2021-03-30 14:20:22 UTC

Looks like there's a potential patch from NixOS: https://github.com/NixOS/nixpkgs/pull/118043

Comment 2 kfm 2021-05-11 21:34:04 UTC

This is a duplicate of bug 779172, which indicates that Net-CIDR-Lite needs to be bumped to 0.220.0 to address the issue.

Comment 3 Sam James archtester

2021-05-11 23:16:38 UTC


*** This bug has been marked as a duplicate of bug 779172 ***