Bug #11159 “perl: silent write error can lead to data loss, with...” : Bugs : perl package : Ubuntu

Revision history for this message

Debian Bug Importer (debzilla) wrote on 2004-12-13:

#1

Automatically imported from Debian bug report #285435 http://bugs.debian.org/285435

Revision history for this message

Debian Bug Importer (debzilla) wrote on 2004-12-13:

#2

Download full text (5.0 KiB)

Message-Id: <email address hidden>
Date: Mon, 13 Dec 2004 09:49:24 +0100
From: Jim Meyering <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: perl: silent write error can lead to data loss, with patch

Package: perl
Version: 5.8.4-5
Severity: grave
Tags: security patch
Justification: causes non-serious data loss

At first I hesitated to give this the `security' tag, but if you care
about security/reliability and write to a file, then you do want this fix.
And calling this a `grave' bug might be accurate, but only if you're
constantly writing to a nearly-full disk.

I reported this upstream a couple of weeks ago, but was surprised
by the total lack of response. Maybe you'll be more interested:

http://www.xray.mpe.mpg.de/mailing-lists/perl5-porters/2004-12/msg00072.html
http://rt.perl.org/rt3/index.html?q=32745

Sometimes, closing a Perl file handle succeeds even though there have
been write errors via that handle. This bug appears to affect every
version of perl from 5.005_04 to 5.9.1. I didn't build/test versions
earlier than 5.005_04, but the doio.c:do_close function in 5.003 looks
like it has the same problem.

Here's a quick demo that depends on two things:
- you have a /dev/full device (Linux, HPUX, MaxOS-X/Darwin)
- 131072 is a multiple of your system's I/O buffer size

perl -e 'print "x" x 131072; close STDOUT or die "$!\n"' \
> /dev/full 2> /dev/null && echo fail || echo ok

It prints `fail' because at least one write system call failed and Perl's
`close' mistakenly succeeded. It would print `ok' for any size output
other than a multiple of the output buffer size. On the Linux systems
I've checked, that size is 4096. On a ppc/Darwin (7.5.0) system I tested,
the buffer size was 131072.

This means that if your Perl script happens to write precisely the
wrong number of bytes to a full or corrupted disk or to a closed file
descriptor, even if you dutifully check for success when closing the
file handle, the error will go undetected.

Here's another demo. Notice that it fails (as it should) for sizes
131071 and 131073, but not for output of size 131072.

  $ perl -e 'print "x" x 131071; close STDOUT or die "$!\n"' > /dev/full
  No space left on device
  [Exit 28]
  $ perl -e 'print "x" x 131072; close STDOUT or die "$!\n"' > /dev/full
  $ perl -e 'print "x" x 131073; close STDOUT or die "$!\n"' > /dev/full
  No space left on device
  [Exit 28]

After applying the patch below, the problematic case (with size being
a multiple of 4096 in my case), now fails, as it should:

  $ ./perl -e 'print "x" x 131072; close STDOUT or die "$!\n"' > /dev/full
  No space left on device
  [Exit 28]

On a Solaris 5.9 system, which lacks /dev/full, I demonstrated
the failure with the following small script that invokes perl with
stdout closed. All invocations of perl should evoke the
`Bad file number' error. But note that on some systems the
closed-stdout test succeeds (perl detects the error) even though
the write-to-/dev/full test fails.

    #!/bin/sh
    n=1024
    for i in 1 2 3 4 5 6; do
       echo $n
       perl -e 'print "x" x '$n'; close STDOUT or die "$!\n"' >&-
       n=...

Message-Id: <20041213084924.21BD8400C@mx.meyering.net>
Date: Mon, 13 Dec 2004 09:49:24 +0100
From: Jim Meyering <jim@meyering.net>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: perl: silent write error can lead to data loss, with patch

Package: perl
Version: 5.8.4-5
Severity: grave
Tags: security patch
Justification: causes non-serious data loss

At first I hesitated to give this the `security' tag, but if you care
about security/reliability and write to a file, then you do want this fix.
And calling this a `grave' bug might be accurate, but only if you're
constantly writing to a nearly-full disk.

I reported this upstream a couple of weeks ago, but was surprised
by the total lack of response.  Maybe you'll be more interested:

http://www.xray.mpe.mpg.de/mailing-lists/perl5-porters/2004-12/msg00072.html
  http://rt.perl.org/rt3/index.html?q=32745

Sometimes, closing a Perl file handle succeeds even though there have
been write errors via that handle.  This bug appears to affect every
version of perl from 5.005_04 to 5.9.1.  I didn't build/test versions
earlier than 5.005_04, but the doio.c:do_close function in 5.003 looks
like it has the same problem.

Here's a quick demo that depends on two things:
  - you have a /dev/full device (Linux, HPUX, MaxOS-X/Darwin)
  - 131072 is a multiple of your system's I/O buffer size

perl -e 'print "x" x 131072; close STDOUT or die "$!\n"' \
    > /dev/full 2> /dev/null && echo fail || echo ok

It prints `fail' because at least one write system call failed and Perl's
`close' mistakenly succeeded.  It would print `ok' for any size output
other than a multiple of the output buffer size.  On the Linux systems
I've checked, that size is 4096.  On a ppc/Darwin (7.5.0) system I tested,
the buffer size was 131072.

This means that if your Perl script happens to write precisely the
wrong number of bytes to a full or corrupted disk or to a closed file
descriptor, even if you dutifully check for success when closing the
file handle, the error will go undetected.

Here's another demo.  Notice that it fails (as it should) for sizes
131071 and 131073, but not for output of size 131072.

$ perl -e 'print "x" x 131071; close STDOUT or die "$!\n"' > /dev/full
  No space left on device
  [Exit 28]
  $ perl -e 'print "x" x 131072; close STDOUT or die "$!\n"' > /dev/full
  $ perl -e 'print "x" x 131073; close STDOUT or die "$!\n"' > /dev/full
  No space left on device
  [Exit 28]

After applying the patch below, the problematic case (with size being
a multiple of 4096 in my case), now fails, as it should:

$ ./perl -e 'print "x" x 131072; close STDOUT or die "$!\n"' > /dev/full
  No space left on device
  [Exit 28]

On a Solaris 5.9 system, which lacks /dev/full, I demonstrated
the failure with the following small script that invokes perl with
stdout closed.  All invocations of perl should evoke the
`Bad file number' error.  But note that on some systems the
closed-stdout test succeeds (perl detects the error) even though
the write-to-/dev/full test fails.

#!/bin/sh
    n=1024
    for i in 1 2 3 4 5 6; do
       echo $n
       perl -e 'print "x" x '$n'; close STDOUT or die "$!\n"' >&-
       n=`expr 2 \* $n`
    done

Here's the output:

1024
    Bad file number
    2048
    Bad file number
    4096
    Bad file number
    8192
    Bad file number
    16384
    32768

This patch fixes the bug and induces no new failures in any of
these versions:

5.005_04
    5.6.2
    5.8.6
    5.9.1

2004-11-30  Jim Meyering  <jim@meyering.net>

* doio.c (Perl_io_close): Make the return value depend not only on the
	success of the close itself, but also on whether the output stream had
	a previous error.

--- doio.c.orig	2004-11-29 19:41:05.747199832 +0100
+++ doio.c	2004-12-01 08:39:53.106764936 +0100
@@ -1014,11 +1014,14 @@ Perl_io_close(pTHX_ IO *io, bool not_imp
 	    retval = TRUE;
 	else {
 	    if (IoOFP(io) && IoOFP(io) != IoIFP(io)) {		/* a socket */
-		retval = (PerlIO_close(IoOFP(io)) != EOF);
+		bool prev_err = PerlIO_error(IoOFP(io));
+		retval = (PerlIO_close(IoOFP(io)) != EOF && !prev_err);
 		PerlIO_close(IoIFP(io));	/* clear stdio, fd already closed */
 	    }
-	    else
-		retval = (PerlIO_close(IoIFP(io)) != EOF);
+	    else {
+		bool prev_err = PerlIO_error(IoIFP(io));
+		retval = (PerlIO_close(IoIFP(io)) != EOF && !prev_err);
+	    }
 	}
 	IoOFP(io) = IoIFP(io) = Nullfp;
     }

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.9jmm
Locale: LANG=en_GB.iso88591, LC_CTYPE=en_GB.iso88591 (charmap=ISO-8859-1)

Versions of packages perl depends on:
ii  libc6                       2.3.2.ds1-19 GNU C Library: Shared libraries an
ii  libdb4.2                    4.2.52-17    Berkeley v4.2 Database Libraries [
ii  libgdbm3                    1.8.3-2      GNU dbm database routines (runtime
ii  perl-base                   5.8.4-5      The Pathologically Eclectic Rubbis
ii  perl-modules                5.8.4-5      Core Perl modules

-- no debconf information

Revision history for this message

In Debian Bug tracker #285435, Matt Zimmerman (mdz) wrote on 2004-12-13: Re: Bug#285435: perl: silent write error can lead to data loss, with patch

#3

tags 285435 - security
thanks

--
- mdz

Revision history for this message

Debian Bug Importer (debzilla) wrote on 2004-12-13:

#4

Message-ID: <email address hidden>
Date: Mon, 13 Dec 2004 02:09:37 -0800
From: Matt Zimmerman <email address hidden>
To: <email address hidden>
Subject: Re: Bug#285435: perl: silent write error can lead to data loss, with patch

tags 285435 - security
thanks

--
- mdz

Revision history for this message

In Debian Bug tracker #285435, Brendan O'Dea (bod) wrote on 2005-02-02: Bug#285435: fixed in perl 5.8.4-6

#5

Download full text (5.9 KiB)

Source: perl
Source-Version: 5.8.4-6

We believe that the bug you reported is fixed in the latest version of
perl, which is due to be installed in the Debian FTP archive:

libcgi-fast-perl_5.8.4-6_all.deb
  to pool/main/p/perl/libcgi-fast-perl_5.8.4-6_all.deb
libperl-dev_5.8.4-6_i386.deb
  to pool/main/p/perl/libperl-dev_5.8.4-6_i386.deb
libperl-dev_5.8.4-6_powerpc.deb
  to pool/main/p/perl/libperl-dev_5.8.4-6_powerpc.deb
libperl-dev_5.8.4-6_sparc.deb
  to pool/main/p/perl/libperl-dev_5.8.4-6_sparc.deb
libperl5.8_5.8.4-6_i386.deb
  to pool/main/p/perl/libperl5.8_5.8.4-6_i386.deb
libperl5.8_5.8.4-6_powerpc.deb
  to pool/main/p/perl/libperl5.8_5.8.4-6_powerpc.deb
libperl5.8_5.8.4-6_sparc.deb
  to pool/main/p/perl/libperl5.8_5.8.4-6_sparc.deb
perl-base_5.8.4-6_i386.deb
  to pool/main/p/perl/perl-base_5.8.4-6_i386.deb
perl-base_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl-base_5.8.4-6_powerpc.deb
perl-base_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl-base_5.8.4-6_sparc.deb
perl-debug_5.8.4-6_i386.deb
  to pool/main/p/perl/perl-debug_5.8.4-6_i386.deb
perl-debug_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl-debug_5.8.4-6_powerpc.deb
perl-debug_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl-debug_5.8.4-6_sparc.deb
perl-doc_5.8.4-6_all.deb
  to pool/main/p/perl/perl-doc_5.8.4-6_all.deb
perl-modules_5.8.4-6_all.deb
  to pool/main/p/perl/perl-modules_5.8.4-6_all.deb
perl-suid_5.8.4-6_i386.deb
  to pool/main/p/perl/perl-suid_5.8.4-6_i386.deb
perl-suid_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl-suid_5.8.4-6_powerpc.deb
perl-suid_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl-suid_5.8.4-6_sparc.deb
perl_5.8.4-6.diff.gz
  to pool/main/p/perl/perl_5.8.4-6.diff.gz
perl_5.8.4-6.dsc
  to pool/main/p/perl/perl_5.8.4-6.dsc
perl_5.8.4-6_i386.deb
  to pool/main/p/perl/perl_5.8.4-6_i386.deb
perl_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl_5.8.4-6_powerpc.deb
perl_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl_5.8.4-6_sparc.deb

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to <email address hidden>,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Brendan O'Dea <email address hidden> (supplier of updated perl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing <email address hidden>)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed, 2 Feb 2005 23:55:27 +1100
Source: perl
Binary: perl-base libcgi-fast-perl libperl-dev perl-debug perl-modules perl libperl5.8 perl-suid perl-doc
Architecture: all i386 powerpc source sparc
Version: 5.8.4-6
Distribution: unstable
Urgency: high
Maintainer: Brendan O'Dea <email address hidden>
Changed-By: Brendan O'Dea <email address hidden>
Description:
libperl-dev - Perl library: development files
libperl5.8 - Shared Perl library
perl - Larry Wall's Practical Extraction and Report Language
perl-base - The Pathologically Eclectic Rubbish Lister
perl-debug - Debug-enabled Perl interpreter
perl-suid -...

Source: perl
Source-Version: 5.8.4-6

We believe that the bug you reported is fixed in the latest version of
perl, which is due to be installed in the Debian FTP archive:

libcgi-fast-perl_5.8.4-6_all.deb
  to pool/main/p/perl/libcgi-fast-perl_5.8.4-6_all.deb
libperl-dev_5.8.4-6_i386.deb
  to pool/main/p/perl/libperl-dev_5.8.4-6_i386.deb
libperl-dev_5.8.4-6_powerpc.deb
  to pool/main/p/perl/libperl-dev_5.8.4-6_powerpc.deb
libperl-dev_5.8.4-6_sparc.deb
  to pool/main/p/perl/libperl-dev_5.8.4-6_sparc.deb
libperl5.8_5.8.4-6_i386.deb
  to pool/main/p/perl/libperl5.8_5.8.4-6_i386.deb
libperl5.8_5.8.4-6_powerpc.deb
  to pool/main/p/perl/libperl5.8_5.8.4-6_powerpc.deb
libperl5.8_5.8.4-6_sparc.deb
  to pool/main/p/perl/libperl5.8_5.8.4-6_sparc.deb
perl-base_5.8.4-6_i386.deb
  to pool/main/p/perl/perl-base_5.8.4-6_i386.deb
perl-base_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl-base_5.8.4-6_powerpc.deb
perl-base_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl-base_5.8.4-6_sparc.deb
perl-debug_5.8.4-6_i386.deb
  to pool/main/p/perl/perl-debug_5.8.4-6_i386.deb
perl-debug_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl-debug_5.8.4-6_powerpc.deb
perl-debug_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl-debug_5.8.4-6_sparc.deb
perl-doc_5.8.4-6_all.deb
  to pool/main/p/perl/perl-doc_5.8.4-6_all.deb
perl-modules_5.8.4-6_all.deb
  to pool/main/p/perl/perl-modules_5.8.4-6_all.deb
perl-suid_5.8.4-6_i386.deb
  to pool/main/p/perl/perl-suid_5.8.4-6_i386.deb
perl-suid_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl-suid_5.8.4-6_powerpc.deb
perl-suid_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl-suid_5.8.4-6_sparc.deb
perl_5.8.4-6.diff.gz
  to pool/main/p/perl/perl_5.8.4-6.diff.gz
perl_5.8.4-6.dsc
  to pool/main/p/perl/perl_5.8.4-6.dsc
perl_5.8.4-6_i386.deb
  to pool/main/p/perl/perl_5.8.4-6_i386.deb
perl_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl_5.8.4-6_powerpc.deb
perl_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl_5.8.4-6_sparc.deb

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 285435@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Brendan O'Dea <bod@debian.org> (supplier of updated perl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed,  2 Feb 2005 23:55:27 +1100
Source: perl
Binary: perl-base libcgi-fast-perl libperl-dev perl-debug perl-modules perl libperl5.8 perl-suid perl-doc
Architecture: all i386 powerpc source sparc 
Version: 5.8.4-6
Distribution: unstable
Urgency: high
Maintainer: Brendan O'Dea <bod@debian.org>
Changed-By: Brendan O'Dea <bod@debian.org>
Description: 
 libperl-dev - Perl library: development files
 libperl5.8 - Shared Perl library
 perl       - Larry Wall's Practical Extraction and Report Language
 perl-base  - The Pathologically Eclectic Rubbish Lister
 perl-debug - Debug-enabled Perl interpreter
 perl-suid  - Runs setuid Perl scripts
Closes: 285435 290336
Changes: 
 perl (5.8.4-6) unstable; urgency=high
 .
   * SECURITY [CAN-2005-0155, CAN-2005-0156]: apply Mandrake patch to
     perlio.c which removes a privilege escalation in debug mode and a
     buffer overflow.
 .
   * Make close return false if the stream had prior errors (patch from
     Jim Meyering; closes: #285435).
 .
   * Fix enc2xs to handle missing entries symlinks in @INC, and missing
     directories (thanks to Sven Hartge; closes: #290336).
 .
   * Add --no-backup-if-mismatch to patch/unpatch rules.
   * Correct some minor errors in 09_fix_insecure_tempfiles:  wrong
     quoting in c2ph.PL, documentation of .perldbtty in perldebug.pod .
Files: 
 0b0aae6d903eda8100ef4d6ec71fdad8 508828 libs optional libperl5.8_5.8.4-6_i386.deb
 1031252bb1192b1a9f57b9eb6bf937a6 31696 perl optional perl-suid_5.8.4-6_i386.deb
 16255cbc1bd37cd319c045ff80b280f8 7051068 doc optional perl-doc_5.8.4-6_all.deb
 2df3f51a0fca303f8dc51dd042b908f7 3724858 perl optional perl-debug_5.8.4-6_sparc.deb
 ec3f5c2fa2ff2ea22d399afc1d27589c 726 perl standard perl_5.8.4-6.dsc
 5d7b3d4be06893bc35ffd998aa2593e1 3587748 perl optional perl-debug_5.8.4-6_powerpc.deb
 64379515ef23061cb27f4d9a4f4e421a 751108 base required perl-base_5.8.4-6_i386.deb
 69d2b01041a24a50fd2ec6d7c799fa56 3626968 perl optional perl-debug_5.8.4-6_i386.deb
 6f858de5cc1be65a3c64b0563711be8b 3547186 perl standard perl_5.8.4-6_sparc.deb
 7ab146a8db513f0ec2938c6162fd0c3c 567016 libdevel optional libperl-dev_5.8.4-6_i386.deb
 82c3090d0c799c46f77a63009c6beb9b 31022 perl optional perl-suid_5.8.4-6_sparc.deb
 8421b40d8f42cc7b43716d6520000d71 1030 libs optional libperl5.8_5.8.4-6_powerpc.deb
 b5dccae7300f2e35198ef3cfe64aca1e 3509124 perl standard perl_5.8.4-6_powerpc.deb
 c570e5b89b0d37d612ec12af485d18b6 78696 perl standard perl_5.8.4-6.diff.gz
 c69ca4e42ae4ad7852e18af4a9c7e771 37492 perl extra libcgi-fast-perl_5.8.4-6_all.deb
 c8de5ebee1d27e6ca3555f4bccecfcc2 2178272 perl standard perl-modules_5.8.4-6_all.deb
 d74f4174b25d93ba7f5121a2d346af5a 33578 perl optional perl-suid_5.8.4-6_powerpc.deb
 da371972a9553c6689c48e44e99e0ac0 624944 libdevel optional libperl-dev_5.8.4-6_powerpc.deb
 f26be4ccf428a29cbc6b18421745611d 3237900 perl standard perl_5.8.4-6_i386.deb
 f7c018f8a7c3db8ac2007ddc55fae9ae 1030 libs optional libperl5.8_5.8.4-6_sparc.deb
 f8d6ebb4ac315e5fc2072ade06fb0a63 582230 libdevel optional libperl-dev_5.8.4-6_sparc.deb
 fe888ca0a6a830722c2960f73fdc419e 774694 base required perl-base_5.8.4-6_sparc.deb
 fea71362bd03fcf12448d8d4557a093c 789112 base required perl-base_5.8.4-6_powerpc.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFCAOtw8NyOALKMWZURAvnRAJ9xoUsp27fCcLJJJ6uKoirMktcuegCgj7ls
CuKP8AxHS/rGWFOM4nKSjwk=
=zu7Y
-----END PGP SIGNATURE-----

Revision history for this message

Debian Bug Importer (debzilla) wrote on 2005-02-05:

#6

Download full text (6.1 KiB)

Message-Id: <email address hidden>
Date: Wed, 02 Feb 2005 10:17:16 -0500
From: Brendan O'Dea <email address hidden>
To: <email address hidden>
Subject: Bug#285435: fixed in perl 5.8.4-6

Source: perl
Source-Version: 5.8.4-6

We believe that the bug you reported is fixed in the latest version of
perl, which is due to be installed in the Debian FTP archive:

libcgi-fast-perl_5.8.4-6_all.deb
  to pool/main/p/perl/libcgi-fast-perl_5.8.4-6_all.deb
libperl-dev_5.8.4-6_i386.deb
  to pool/main/p/perl/libperl-dev_5.8.4-6_i386.deb
libperl-dev_5.8.4-6_powerpc.deb
  to pool/main/p/perl/libperl-dev_5.8.4-6_powerpc.deb
libperl-dev_5.8.4-6_sparc.deb
  to pool/main/p/perl/libperl-dev_5.8.4-6_sparc.deb
libperl5.8_5.8.4-6_i386.deb
  to pool/main/p/perl/libperl5.8_5.8.4-6_i386.deb
libperl5.8_5.8.4-6_powerpc.deb
  to pool/main/p/perl/libperl5.8_5.8.4-6_powerpc.deb
libperl5.8_5.8.4-6_sparc.deb
  to pool/main/p/perl/libperl5.8_5.8.4-6_sparc.deb
perl-base_5.8.4-6_i386.deb
  to pool/main/p/perl/perl-base_5.8.4-6_i386.deb
perl-base_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl-base_5.8.4-6_powerpc.deb
perl-base_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl-base_5.8.4-6_sparc.deb
perl-debug_5.8.4-6_i386.deb
  to pool/main/p/perl/perl-debug_5.8.4-6_i386.deb
perl-debug_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl-debug_5.8.4-6_powerpc.deb
perl-debug_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl-debug_5.8.4-6_sparc.deb
perl-doc_5.8.4-6_all.deb
  to pool/main/p/perl/perl-doc_5.8.4-6_all.deb
perl-modules_5.8.4-6_all.deb
  to pool/main/p/perl/perl-modules_5.8.4-6_all.deb
perl-suid_5.8.4-6_i386.deb
  to pool/main/p/perl/perl-suid_5.8.4-6_i386.deb
perl-suid_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl-suid_5.8.4-6_powerpc.deb
perl-suid_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl-suid_5.8.4-6_sparc.deb
perl_5.8.4-6.diff.gz
  to pool/main/p/perl/perl_5.8.4-6.diff.gz
perl_5.8.4-6.dsc
  to pool/main/p/perl/perl_5.8.4-6.dsc
perl_5.8.4-6_i386.deb
  to pool/main/p/perl/perl_5.8.4-6_i386.deb
perl_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl_5.8.4-6_powerpc.deb
perl_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl_5.8.4-6_sparc.deb

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to <email address hidden>,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Brendan O'Dea <email address hidden> (supplier of updated perl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing <email address hidden>)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed, 2 Feb 2005 23:55:27 +1100
Source: perl
Binary: perl-base libcgi-fast-perl libperl-dev perl-debug perl-modules perl libperl5.8 perl-suid perl-doc
Architecture: all i386 powerpc source sparc
Version: 5.8.4-6
Distribution: unstable
Urgency: high
Maintainer: Brendan O'Dea <email address hidden>
Changed-By: Brendan O'Dea <email address hidden>
Description:
libperl-dev - Perl library: development files
libperl5.8 - ...

Message-Id: <E1CwMFo-0005St-00@newraff.debian.org>
Date: Wed, 02 Feb 2005 10:17:16 -0500
From: Brendan O'Dea <bod@debian.org>
To: 285435-close@bugs.debian.org
Subject: Bug#285435: fixed in perl 5.8.4-6

Source: perl
Source-Version: 5.8.4-6

We believe that the bug you reported is fixed in the latest version of
perl, which is due to be installed in the Debian FTP archive:

libcgi-fast-perl_5.8.4-6_all.deb
  to pool/main/p/perl/libcgi-fast-perl_5.8.4-6_all.deb
libperl-dev_5.8.4-6_i386.deb
  to pool/main/p/perl/libperl-dev_5.8.4-6_i386.deb
libperl-dev_5.8.4-6_powerpc.deb
  to pool/main/p/perl/libperl-dev_5.8.4-6_powerpc.deb
libperl-dev_5.8.4-6_sparc.deb
  to pool/main/p/perl/libperl-dev_5.8.4-6_sparc.deb
libperl5.8_5.8.4-6_i386.deb
  to pool/main/p/perl/libperl5.8_5.8.4-6_i386.deb
libperl5.8_5.8.4-6_powerpc.deb
  to pool/main/p/perl/libperl5.8_5.8.4-6_powerpc.deb
libperl5.8_5.8.4-6_sparc.deb
  to pool/main/p/perl/libperl5.8_5.8.4-6_sparc.deb
perl-base_5.8.4-6_i386.deb
  to pool/main/p/perl/perl-base_5.8.4-6_i386.deb
perl-base_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl-base_5.8.4-6_powerpc.deb
perl-base_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl-base_5.8.4-6_sparc.deb
perl-debug_5.8.4-6_i386.deb
  to pool/main/p/perl/perl-debug_5.8.4-6_i386.deb
perl-debug_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl-debug_5.8.4-6_powerpc.deb
perl-debug_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl-debug_5.8.4-6_sparc.deb
perl-doc_5.8.4-6_all.deb
  to pool/main/p/perl/perl-doc_5.8.4-6_all.deb
perl-modules_5.8.4-6_all.deb
  to pool/main/p/perl/perl-modules_5.8.4-6_all.deb
perl-suid_5.8.4-6_i386.deb
  to pool/main/p/perl/perl-suid_5.8.4-6_i386.deb
perl-suid_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl-suid_5.8.4-6_powerpc.deb
perl-suid_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl-suid_5.8.4-6_sparc.deb
perl_5.8.4-6.diff.gz
  to pool/main/p/perl/perl_5.8.4-6.diff.gz
perl_5.8.4-6.dsc
  to pool/main/p/perl/perl_5.8.4-6.dsc
perl_5.8.4-6_i386.deb
  to pool/main/p/perl/perl_5.8.4-6_i386.deb
perl_5.8.4-6_powerpc.deb
  to pool/main/p/perl/perl_5.8.4-6_powerpc.deb
perl_5.8.4-6_sparc.deb
  to pool/main/p/perl/perl_5.8.4-6_sparc.deb

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 285435@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Brendan O'Dea <bod@debian.org> (supplier of updated perl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed,  2 Feb 2005 23:55:27 +1100
Source: perl
Binary: perl-base libcgi-fast-perl libperl-dev perl-debug perl-modules perl libperl5.8 perl-suid perl-doc
Architecture: all i386 powerpc source sparc 
Version: 5.8.4-6
Distribution: unstable
Urgency: high
Maintainer: Brendan O'Dea <bod@debian.org>
Changed-By: Brendan O'Dea <bod@debian.org>
Description: 
 libperl-dev - Perl library: development files
 libperl5.8 - Shared Perl library
 perl       - Larry Wall's Practical Extraction and Report Language
 perl-base  - The Pathologically Eclectic Rubbish Lister
 perl-debug - Debug-enabled Perl interpreter
 perl-suid  - Runs setuid Perl scripts
Closes: 285435 290336
Changes: 
 perl (5.8.4-6) unstable; urgency=high
 .
   * SECURITY [CAN-2005-0155, CAN-2005-0156]: apply Mandrake patch to
     perlio.c which removes a privilege escalation in debug mode and a
     buffer overflow.
 .
   * Make close return false if the stream had prior errors (patch from
     Jim Meyering; closes: #285435).
 .
   * Fix enc2xs to handle missing entries symlinks in @INC, and missing
     directories (thanks to Sven Hartge; closes: #290336).
 .
   * Add --no-backup-if-mismatch to patch/unpatch rules.
   * Correct some minor errors in 09_fix_insecure_tempfiles:  wrong
     quoting in c2ph.PL, documentation of .perldbtty in perldebug.pod .
Files: 
 0b0aae6d903eda8100ef4d6ec71fdad8 508828 libs optional libperl5.8_5.8.4-6_i386.deb
 1031252bb1192b1a9f57b9eb6bf937a6 31696 perl optional perl-suid_5.8.4-6_i386.deb
 16255cbc1bd37cd319c045ff80b280f8 7051068 doc optional perl-doc_5.8.4-6_all.deb
 2df3f51a0fca303f8dc51dd042b908f7 3724858 perl optional perl-debug_5.8.4-6_sparc.deb
 ec3f5c2fa2ff2ea22d399afc1d27589c 726 perl standard perl_5.8.4-6.dsc
 5d7b3d4be06893bc35ffd998aa2593e1 3587748 perl optional perl-debug_5.8.4-6_powerpc.deb
 64379515ef23061cb27f4d9a4f4e421a 751108 base required perl-base_5.8.4-6_i386.deb
 69d2b01041a24a50fd2ec6d7c799fa56 3626968 perl optional perl-debug_5.8.4-6_i386.deb
 6f858de5cc1be65a3c64b0563711be8b 3547186 perl standard perl_5.8.4-6_sparc.deb
 7ab146a8db513f0ec2938c6162fd0c3c 567016 libdevel optional libperl-dev_5.8.4-6_i386.deb
 82c3090d0c799c46f77a63009c6beb9b 31022 perl optional perl-suid_5.8.4-6_sparc.deb
 8421b40d8f42cc7b43716d6520000d71 1030 libs optional libperl5.8_5.8.4-6_powerpc.deb
 b5dccae7300f2e35198ef3cfe64aca1e 3509124 perl standard perl_5.8.4-6_powerpc.deb
 c570e5b89b0d37d612ec12af485d18b6 78696 perl standard perl_5.8.4-6.diff.gz
 c69ca4e42ae4ad7852e18af4a9c7e771 37492 perl extra libcgi-fast-perl_5.8.4-6_all.deb
 c8de5ebee1d27e6ca3555f4bccecfcc2 2178272 perl standard perl-modules_5.8.4-6_all.deb
 d74f4174b25d93ba7f5121a2d346af5a 33578 perl optional perl-suid_5.8.4-6_powerpc.deb
 da371972a9553c6689c48e44e99e0ac0 624944 libdevel optional libperl-dev_5.8.4-6_powerpc.deb
 f26be4ccf428a29cbc6b18421745611d 3237900 perl standard perl_5.8.4-6_i386.deb
 f7c018f8a7c3db8ac2007ddc55fae9ae 1030 libs optional libperl5.8_5.8.4-6_sparc.deb
 f8d6ebb4ac315e5fc2072ade06fb0a63 582230 libdevel optional libperl-dev_5.8.4-6_sparc.deb
 fe888ca0a6a830722c2960f73fdc419e 774694 base required perl-base_5.8.4-6_sparc.deb
 fea71362bd03fcf12448d8d4557a093c 789112 base required perl-base_5.8.4-6_powerpc.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFCAOtw8NyOALKMWZURAvnRAJ9xoUsp27fCcLJJJ6uKoirMktcuegCgj7ls
CuKP8AxHS/rGWFOM4nKSjwk=
=zu7Y
-----END PGP SIGNATURE-----

Revision history for this message

Matthias Klose (doko) wrote on 2005-02-08:

#7

5.8.4-6 synced from unstable

Bug Watch Updater (bug-watch-updater) on 2006-09-27

Changed in perl:
status:	Unknown → Fix Released

Affects		Status	Importance	Assigned to	Milestone
	perl (Debian)	Fix Released	Unknown	debbugs #285435
	perl (Ubuntu)	Fix Released	High	Matthias Klose

Ubuntu
perl package

perl: silent write error can lead to data loss, with patch

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntuperl package

perl: silent write error can lead to data loss, with patch

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
perl package