https://bugzilla.redhat.com/show_bug.cgi?id=1877446
Bug ID: 1877446 Summary: perl-dbi: Proxy driver and server use PlRPC which is not secure due to Storable Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: psampaio@redhat.com CC: caillon+fedoraproject@gmail.com, hhorak@redhat.com, john.j5live@gmail.com, jorton@redhat.com, jplesnik@redhat.com, kasal@ucw.cz, perl-devel@lists.fedoraproject.org, perl-maint-list@redhat.com, ppisar@redhat.com, rhughes@redhat.com, rstrode@redhat.com, sandmann@redhat.com Target Milestone: --- Classification: Other
A flaw was found in perl-dbi before version 1.632. The proxy driver and server use PlRPC which is not secure due to Storable.
References:
https://rt.cpan.org/Public/Bug/Display.html?id=90475
Upstream patch:
https://github.com/perl5-dbi/dbi/commit/3cef14e68a01cd593cd19540c7b91d59d2d4...