From owner-ports-jp@jp.FreeBSD.org Wed Oct  1 23:53:37 2003
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) id h91Erbl52883;
	Wed, 1 Oct 2003 23:53:37 +0900 (JST)
	(envelope-from owner-ports-jp@jp.FreeBSD.org)
Received: from t-mta3.odn.ne.jp (mfep3.odn.ne.jp [143.90.131.181])
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) with ESMTP/inet id h91ErbJ52878
	for <ports-jp@jp.FreeBSD.org>; Wed, 1 Oct 2003 23:53:37 +0900 (JST)
	(envelope-from delmonta@ht.sakura.ne.jp)
Received: from ht.sakura.ne.jp ([211.121.6.174]) by t-mta3.odn.ne.jp
          with ESMTP
          id <20031001145337298.WVRB.2314.t-mta3.odn.ne.jp@mta3.odn.ne.jp>;
          Wed, 1 Oct 2003 23:53:37 +0900
Message-ID: <3F7AEA59.BCAED182@ht.sakura.ne.jp>
From: IIJIMA Hiromitsu <delmonta@ht.sakura.ne.jp>
Organization: DENNOU GEDOU GAKKAI, N. D. D. http://www.dennougedougakkai-ndd.org
X-Mailer: Mozilla 4.78 [ja] (Win98; U)
X-Accept-Language: ja,en,zh-TW,zh,zh-CN,de,es,ko
MIME-Version: 1.0
To: ports-jp@jp.FreeBSD.org
CC: shige@freebsd.org
References: <20031001.230524.48741907.shige@FreeBSD.org>
Content-Type: text/plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Reply-To: ports-jp@jp.FreeBSD.org
Precedence: list
Date: Wed, 01 Oct 2003 23:53:13 +0900
X-Sequence: ports-jp 14194
Subject: [ports-jp 14194] Re: freebsd PRs related japanese/perl5
Sender: owner-ports-jp@jp.FreeBSD.org
X-Originator: delmonta@ht.sakura.ne.jp
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+030902

$B$$$$$8$^$G$9!#$*<j?t$r$*$+$1$7$^$9!#(B

> japanese/perl5 $B4XO"$N(B PRs $B$N3NG'$r$7$?$$$N$G$9$,!"(B
> 
>   1. ports/57302
>        - perl5 $B$N(B module load path $B$N=gHV$r=$@5(B
>        - users-jp $B$N(B patch $B$rE,MQ(B
>   2. ports/57316
>        - Safe.pm $B$N(B security hole $B$r=$@5(B
>        - lang/perl5 $B$N(B patch-Safe.pm $B$rE,MQ(B
>   3. ports/57390
>        - CGI.pm $B$N(B security hole $B$r=$@5(B
> 
> $B0J>e$N(B 3$B$D$N=$@5$G$h$$$G$7$g$&$+!)(B

$B$O$$!#$3$N#3$D$G$9!#(B

> $B$^$?!"(B3. $B$N(B CGI.pm $B$KBP$9$k(B patch $B$N>pJs$,(B Fix $B$N9`L\$K(B
> $B$J$$$N$G$9$,!"$I$N(B patch $B$rE,MQ$9$l$P$h$$$G$7$g$&$+!)(B

$B$9$$$^$;$s!"(Blang/perl5, lang/perl5.8 $B$GMQ0U$5$l$?(B patch-CGI.pm $B$O$=$N$^$^(B
$B$G$O(B 5.005_03 $B$K$OEv$?$i$J$$$h$&$G$9!#(B

lang/perl5 $B$N$[$&$N(B cvsweb $B$N5-O?$K$h$k$H!"$3$A$i$N%a%s%F%J$N(B tobez $B$5$s(B
$B$O(B ports/www/p5-CGI.pm$B!J(BCGI.pm 3.00$B!K$+$i3:EvItJ,$r0z$CD%$C$F$-$F:9$7BX$((B
$B$?!"$H$*$C$7$c$C$F$$$?$N$G!"F1$8MWNN$G%Q%C%A$r:n$C$F(B PR $B$X$N(B followup $B$r(B
$BF~$l$^$7$?!#(B

$B$"$H$O!"(B2 $B$H(B 3 $B$N7o$K$D$$$F$O!"(Bbase system $B$N(B perl $B$K$bF1$87j$,$"$C$F!"(B
$B$=$A$i$O(B security officer $B9T$-$K$J$C$F$$$^$9$N$G!J(Bbin/57315$B!"(Bbin/57321$B!K!"(B
$B$G$-$l$P$=$A$i$H$b6(D4$9$k7A$G$*4j$$$7$?$$$H;W$$$^$9!#(B

$B!t(BHow-to-repeat $B$N$H$3$m$N(B exploit code $B$,$=$N$^$^$G$OF0$+$J$$$N$G!"(B
$B!t$3$l$b$-$A$s$HF0$/$b$N$rMQ0U$7$^$9!#(B

========================================================================
$BHSEh(B $B9@8w(B / $B$G$k$b$s$?!&$$$$$8$^(B   http://www.ht.sakura.ne.jp/~delmonta/
IIJIMA Hiromitsu, aka Delmonta           mailto:delmonta@ht.sakura.ne.jp
