libdigest-md5-perl: Woody version could produce incorrect MD5 checksums for UTF-8 data

Related Vulnerabilities: CVE-2002-0703  

Debian Bug report logs - #282527
libdigest-md5-perl: Woody version could produce incorrect MD5 checksums for UTF-8 data

version graph

Package: libdigest-md5-perl; Maintainer for libdigest-md5-perl is (unknown);

Reported by: Djoume SALVETTI <djoume@taket.org>

Date: Mon, 22 Nov 2004 20:18:06 UTC

Severity: normal

Tags: security, woody

Found in version 2.13-2

Done: Martin Michlmayr <tbm@cyrius.com>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, djoume@taket.org, Michael Alan Dorman <mdorman@debian.org>:
Bug#282527; Package libdigest-md5-perl. (full text, mbox, link).


Acknowledgement sent to Djoume SALVETTI <djoume@taket.org>:
New Bug report received and forwarded. Copy sent to djoume@taket.org, Michael Alan Dorman <mdorman@debian.org>. (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Djoume SALVETTI <djoume@taket.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: libdigest-md5-perl: Woody version could produce incorrect MD5 checksums for UTF-8 data
Date: Mon, 22 Nov 2004 21:11:52 +0100
Package: libdigest-md5-perl
Version: 2.13-2
Severity: normal


Good day,

>From CVE-2002-0703 :

An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl
could produce incorrect MD5 checksums for UTF-8 data, which could
prevent a system from properly verifying the integrity of the data.

According to : http://securityfocus.com/bid/4716/solution/
This is fix in Digest-MD5-2.20.

Regards.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: powerpc (ppc)
Kernel: Linux 2.6.9-rfb-swsusp
Locale: LANG=fr_FR@euro, LC_CTYPE=fr_FR@euro (charmap=ISO-8859-15)



Tags added: woody Request was from Djoumé SALVETTI <djoume@taket.org> to control@bugs.debian.org. (full text, mbox, link).


Tags added: security Request was from Djoumé SALVETTI <djoume@taket.org> to control@bugs.debian.org. (full text, mbox, link).


Reply sent to Martin Michlmayr <tbm@cyrius.com>:
You have taken responsibility. (full text, mbox, link).


Notification sent to Djoume SALVETTI <djoume@taket.org>:
Bug acknowledged by developer. (full text, mbox, link).


Message #14 received at 282527-done@bugs.debian.org (full text, mbox, reply):

From: Martin Michlmayr <tbm@cyrius.com>
To: 183335-done@bugs.debian.org, 213198-done@bugs.debian.org, 282527-done@bugs.debian.org
Subject: woody bugs
Date: Sun, 7 Jan 2007 14:25:56 +0100
This bug only applies to the version in woody and woody is now no
longer supported.
-- 
Martin Michlmayr
http://www.cyrius.com/



Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 17 Jun 2007 20:46:31 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 13:51:56 2019; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.