tocsin

Debian/libmodule-signature-perl: unknown

Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.

Action: Upgrade libmodule-signature-perl to 0.78-1 or later.

Affected

introducedfixedlast affected
00.78-1-

Fixed versions

0.78-1

Sources

published · modified · JSON