Re: Perl security vulnerability

2006-01-20 Thread Dan Nicholson
On 1/20/06, Steve Prior <[EMAIL PROTECTED]> wrote: > > For existing installations, is there a way to upgrade Perl using CPAN or > is it a manual install? I'm just looking for the easiest approach, but > I can certainly do it manually. I have no idea. I don't use CPAN, though. I'm just going to

Re: Perl security vulnerability

2006-01-20 Thread Tim van der Molen
On Fri, 20 Jan 2006 15:45:27 +0100, Dan Nicholson wrote: > It's in the errata http://www.linuxfromscratch.org/lfs/errata/stable/ > > Thanks, Tim. My pleasure. Good to know it has been taken care of. Tim -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ: http://www.linuxfromscratch.org

Re: Perl security vulnerability

2006-01-20 Thread Steve Prior
Jeremy Huntwork wrote: Dan Nicholson wrote: It's in the errata http://www.linuxfromscratch.org/lfs/errata/stable/ It's also been added to trunk. :) -- JH For existing installations, is there a way to upgrade Perl using CPAN or is it a manual install? I'm just looking for the easiest app

Re: Perl security vulnerability

2006-01-20 Thread Jeremy Huntwork
Dan Nicholson wrote: > It's in the errata http://www.linuxfromscratch.org/lfs/errata/stable/ It's also been added to trunk. :) -- JH -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page

Re: Perl security vulnerability

2006-01-20 Thread Dan Nicholson
On 1/17/06, Tim van der Molen <[EMAIL PROTECTED]> wrote: > A while ago I posted on lfs-security about a Perl security vulnerability > and a patch that remedies it: > <http://linuxfromscratch.org/pipermail/lfs-security/2006-January/001429.html> > > I thought the patch sho

Re: Perl security vulnerability

2006-01-19 Thread Dan Nicholson
On 1/19/06, Jeremy Huntwork <[EMAIL PROTECTED]> wrote: > > It will only be for the stable book. I'll put the actual patch into LFS > trunk later tonight. Also, in case you haven't submitted a patch for the > website before, do it this way, please: > > svn co svn://svn.linuxfromscratch.org/www2/html

Re: Perl security vulnerability

2006-01-19 Thread Jeremy Huntwork
Dan Nicholson wrote: On 1/19/06, Chris Staub <[EMAIL PROTECTED]> wrote: The patch is already in LFS patches and already used in HLFS. http://www.linuxfromscratch.org/patches/downloads/perl/perl-5.8.7-sprintf_vulnerability-1.patch Awesome. If no one else volunteers now, I'll write a patch t

Re: Perl security vulnerability

2006-01-19 Thread Dan Nicholson
On 1/19/06, Chris Staub <[EMAIL PROTECTED]> wrote: > The patch is already in LFS patches and already used in HLFS. > > http://www.linuxfromscratch.org/patches/downloads/perl/perl-5.8.7-sprintf_vulnerability-1.patch Could one of the LFS editors add this to the SVN book? -- Dan -- http://linuxfroms

Re: Perl security vulnerability

2006-01-19 Thread Dan Nicholson
On 1/19/06, Chris Staub <[EMAIL PROTECTED]> wrote: > The patch is already in LFS patches and already used in HLFS. > > http://www.linuxfromscratch.org/patches/downloads/perl/perl-5.8.7-sprintf_vulnerability-1.patch Awesome. If no one else volunteers now, I'll write a patch to the erratas tonight.

Re: Perl security vulnerability

2006-01-19 Thread Chris Staub
Dan Nicholson wrote: On 1/17/06, Tim van der Molen <[EMAIL PROTECTED]> wrote: A while ago I posted on lfs-security about a Perl security vulnerability and a patch that remedies it: <http://linuxfromscratch.org/pipermail/lfs-security/2006-January/001429.html> I thought the patch sho

Re: Perl security vulnerability

2006-01-19 Thread Dan Nicholson
On 1/17/06, Tim van der Molen <[EMAIL PROTECTED]> wrote: > A while ago I posted on lfs-security about a Perl security vulnerability > and a patch that remedies it: > <http://linuxfromscratch.org/pipermail/lfs-security/2006-January/001429.html> > > I thought the patch sho

Perl security vulnerability

2006-01-17 Thread Tim van der Molen
A while ago I posted on lfs-security about a Perl security vulnerability and a patch that remedies it: <http://linuxfromscratch.org/pipermail/lfs-security/2006-January/001429.html> I thought the patch should be added to LFS SVN and the 6.1.1 errata. Or shouldn't it? T