RELENG_4 and p5-DBI-1.37

Dmitry Pryanishnikov dmitry at atlantis.dp.ua
Wed May 10 09:04:18 UTC 2006


Hello!

  Is there any plan to fix the following vulnerability:

Affected package: p5-DBI-1.37
Type of problem: p5-DBI -- insecure temporary file creation vulnerability.
Reference: 
<http://www.FreeBSD.org/ports/portaudit/8cfb6f42-d2b0-11da-a672-000e0
c2e438a.html>

which affects port databases/p5-DBI-137? If no, it means that one should
upgrade to modern Perl (install lang/perl5*) _every_ RELENG_4 system which 
needs p5-DBI. It could be somewhat painful, couldn't it?

Sincerely, Dmitry
-- 
Atlantis ISP, System Administrator
e-mail:  dmitry at atlantis.dp.ua
nic-hdl: LYNX-RIPE


More information about the freebsd-perl mailing list