File _patchinfo of Package patchinfo.import4498
<patchinfo incident="perl" version="4498"> <issue tracker="bnc" id="676086" /> <issue tracker="bnc" id="657625" /> <issue tracker="bnc" id="684799" /> <issue tracker="bnc" id="678877" /> <issue tracker="CVE" id="CVE-2010-4777" /> <category>security</category> <rating>low</rating> <summary>perl security update</summary> <description>This update fixes a bug in perl that makes spamassassin crash and does not allow bypassing taint mode by using lc() or uc() anymore. - CVE-2010-4777: CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P) - CVE-2011-1487: CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N): Permissions, Privileges, and Access Control (CWE-264) </description> <packager>adrianSuSE</packager> </patchinfo>