{
  "schema_version": "1.7.0",
  "id": "MGASA-2021-0376",
  "published": "2021-07-27T20:21:53Z",
  "modified": "2021-07-27T19:56:08Z",
  "summary": "Updated perl-Net-CIDR-Lite package fixes a security vulnerability",
  "details": "It was discovered that the perl Net-CIDR-Lite module did not correctly handle\nIP addresses with IP octets containing leading zeros. Leading zeros were ignored,\nwhile the underlying system can treat such octets as octal numbers and interpret\nthem differently.  For example, IP address of 010.0.0.1 was considered by Net\nCIDR-Lite to be the same address as 10.0.0.1, while system may consider it to be\nIP address 8.0.0.1 (rhbz# 1961865).\n",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://advisories.mageia.org/MGASA-2021-0376.html"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.mageia.org/show_bug.cgi?id=29025"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/LDO7X4TBRIVL4G3GLZBEHFXC7IXMBAMW/"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1961865"
    }
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Mageia:8",
        "name": "perl-Net-CIDR-Lite",
        "purl": "pkg:rpm/mageia/perl-Net-CIDR-Lite?arch=source&distro=mageia-8"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.220.0-1.mga8"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    }
  ],
  "credits": [
    {
      "name": "Mageia",
      "type": "COORDINATOR",
      "contact": [
        "https://wiki.mageia.org/en/Packages_Security_Team"
      ]
    }
  ]
}