Advisories ยป MGASA-2014-0405

Updated perl package fixes CVE-2014-4330

Publication date: 09 Oct 2014
Type: security
Affected Mageia releases : 3
CVE: CVE-2014-4330

Description

Updated perl package fixes security vulnerability:

The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and
earlier, allows context-dependent attackers to cause a denial of service
(stack consumption and crash) via an Array-Reference with many nested
Array-References, which triggers a large number of recursive calls to the
DD_dump function (CVE-2014-4330).

The Data::Dumper module bundled with Perl has been updated to fix these
issues.
                

References

SRPMS

3/core