search for: suidperl

The last two times that i have cvsup-ed/built/installed world (first from 4.7-Rel to 4.8-Rc, then to 4.8-Rel), i have noticed that after the update is complete the newly installed suidperl binary has not the suid bit set and does not work until i manualy set it., and i just wonder if this is something normal, or i am doing something wrong? -- Cheers, Niki

..., v5.8.5 built for i386-linux-thread-multi Server version: Apache/2.0.52 Linux Centos 2.6.9-42.EL # ls -la /usr/bin/speed* -r-xr-xr-x 1 root root 51865 Dec 25 2005 /usr/bin/speedy -r-xr-xr-x 1 root root 105324 Dec 25 2005 /usr/bin/speedy_backend all my openwebmail .pl scripts call #!/usr/bin/suidperl -T and I want to change them to speedy. However it seems that the speedy rpm is not? suid compiled. Can you suggest how to add the suid capability to the RPM? or maybe another method? Thanks, -- ------------------------------------------------------------ Erick Perez Panama Sistemas Integrado...

...------------------------ Red Hat, Inc. Security Advisory Synopsis: Updated mailx and perl packages are now available. Advisory ID: RHSA-2000:048-06 Issue date: 2000-08-07 Updated on: 2000-08-09 Product: Red Hat Linux Keywords: perl suidperl mailx rpm Cross references: RHSA-2000:051 --------------------------------------------------------------------- 1. Topic: Updated perl and mailx package are now available which fix a potential exploit made possible by incorrect assumptions made in suidperl. This advisory contains additional ins...

Summary: Any user can gain root privileges on a Intel Linux system with suidperl 5.003 (having the suid bit, of course) even if "SUIDBUF" and "two suidperl security patches" have been applied. Non-Intel / non-Linux platforms may be affected as well. Quick fix: chmod u-s /usr/bin/sperl5.003 (what else?) Details: There is a nasty bug in mess() (util.c): i...

...t of descriptions of the problem, but no solution. - Jussi (...) Resolving Dependencies --> Running transaction check ---> Package openwebmail.i386 0:2.53-3 set to be updated --> Processing Dependency: openwebmail-data = 2.53-3 for package: openwebmail --> Processing Dependency: perl-suidperl for package: openwebmail --> Processing Dependency: perl-Compress-Zlib for package: openwebmail --> Running transaction check ---> Package openwebmail-data.i386 0:2.53-3 set to be updated ---> Package perl-Compress-Zlib.noarch 0:2.015-1.el5.rf set to be updated ---> Package perl-suid...

...t -g wheel -m 444 libperl.so.3 /usr/lib ln -fs libperl.so.3 /usr/lib/libperl.so ===> gnu/usr.bin/perl/miniperl ===> gnu/usr.bin/perl/perl install -s -o root -g wheel -m 555 perl /usr/bin /usr/bin/perl5 -> /usr/bin/perl /usr/bin/perl5.00503 -> /usr/bin/perl ===> gnu/usr.bin/perl/suidperl install -s -o root -g wheel -m 511 suidperl /usr/bin /usr/bin/sperl5 -> /usr/bin/suidperl /usr/bin/sperl5.00503 -> /usr/bin/suidperl ===> gnu/usr.bin/perl/library cd: can't cd to /usr/src/gnu/usr.bin/perl/library/lib *** Error code 2 Stop in /usr/src/gnu/usr.bin/perl/library. *** Er...

...t used for? I haven't find anything about it in pam documentation. Is it really necessary to ship /usr/bin/gpasswd and /usr/bin/newgrp? Does anybody really use them on Linux? Maybe these should be extras ... (maybe they are needed by POSIX or something similar). What is /usr/bin/sperl5.00503 (suidperl) being used for? Why this doesn't have a manpage? Is it necessary? According to glibc documentation /usr/libexec/pt_chown doesn't need to be setuid nor is not used at all on RH6.2 (see /usr/doc/glibc-2.1.3/INSTALL), why does RH6.2 ships it setuid root? Does /sbin/netreport need root setgi...

...updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/perl-5.8.0-97.EL3.s390.rpm updates/s390/RPMS/perl-CGI-2.89-97.EL3.s390.rpm updates/s390/RPMS/perl-CPAN-1.61-97.EL3.s390.rpm updates/s390/RPMS/perl-DB_File-1.806-97.EL3.s390.rpm updates/s390/RPMS/perl-suidperl-5.8.0-97.EL3.s390.rpm s390x: updates/s390x/RPMS/perl-5.8.0-97.EL3.s390x.rpm updates/s390x/RPMS/perl-CGI-2.89-97.EL3.s390x.rpm updates/s390x/RPMS/perl-CPAN-1.61-97.EL3.s390x.rpm updates/s390x/RPMS/perl-DB_File-1.806-97.EL3.s390x.rpm updates/s390x/RPMS/perl-suidperl-5.8.0-97.EL3.s390x.rpm -- Pasi...

...-08-08 Product: Red Hat Linux Keywords: perl suid Cross references: N/A --------------------------------------------------------------------- 1. Topic: Updated perl and mailx package are now available which fix a potential exploit made possible by incorrect assumptions made in suidperl. 2. Relevant releases/architectures: Red Hat Linux 5.0 - i386, alpha, sparc Red Hat Linux 5.1 - i386, alpha, sparc Red Hat Linux 5.2 - i386, alpha, sparc Red Hat Linux 6.0 - i386, alpha, sparc Red Hat Linux 6.1 - i386, alpha, sparc Red Hat Linux 6.2 - i386, alpha, sparc Red Hat Linux 6.2E - i386,...

...ant Upstream details at : https://rhn.redhat.com/errata/RHSA-2007-0966.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: a471198cb7bbe7896f5c98ed73292ff8 perl-5.8.8-10.el5_0.2.i386.rpm 45cdbf2cc920b5418a5a00f3e62bfc2d perl-suidperl-5.8.8-10.el5_0.2.i386.rpm Source: aefa042674edc71d8c5bf46812cf296c perl-5.8.8-10.el5_0.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos@irc.freenode.net

...ant Upstream details at : https://rhn.redhat.com/errata/RHSA-2007-0966.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: a471198cb7bbe7896f5c98ed73292ff8 perl-5.8.8-10.el5_0.2.i386.rpm 45cdbf2cc920b5418a5a00f3e62bfc2d perl-suidperl-5.8.8-10.el5_0.2.i386.rpm Source: aefa042674edc71d8c5bf46812cf296c perl-5.8.8-10.el5_0.2.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos@irc.freenode.net

...orlist.centos.org/?release=$releasever&arch=$basearch&repo=os baseurl=http://ftp.hostrino.com/pub/centos/$releasever/os/$basearch/ gpgcheck=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 exclude=php* httpd* postgres* MySQL* mysql* perl perl-DBD-MySQL perl-DBD-Pg perl-DBI perl-suidperl unixODBC* mod_auth_mysql mod_auth_pgsql mod_perl mod_perl-devel mod_ssl priority=1 #released updates [update] name=CentOS-$releasever - Updates #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates baseurl=http://ftp.hostrino.com/pub/centos/$releasever/...

...ng updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/perl-5.8.0-97.EL3.i386.rpm updates/i386/RPMS/perl-CGI-2.89-97.EL3.i386.rpm updates/i386/RPMS/perl-CPAN-1.61-97.EL3.i386.rpm updates/i386/RPMS/perl-DB_File-1.806-97.EL3.i386.rpm updates/i386/RPMS/perl-suidperl-5.8.0-97.EL3.i386.rpm source: updates/SRPMS/perl-5.8.0-97.EL3.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update perl\* Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B -...

...ate Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-1797.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 138ff96c2652125c880e05258c794f79 perl-5.8.8-32.el5_7.6.i386.rpm 595311be0e78eac2c192ce5b7f2c4dae perl-suidperl-5.8.8-32.el5_7.6.i386.rpm Source: 778aef18714e528ccb9cc37cc57a420d perl-5.8.8-32.el5_7.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net ------------------------------ Message: 4 Date: Fri, 9 Dec 2011 08:14:32 +0000 From: Johnny...

...3-0685.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f932d1b4e665b8c27a16fc2234d0f506058fc006ad1f1449d364d5586c5ab678 perl-5.8.8-40.el5_9.i386.rpm 089798f46a3e3a764c84b04a43c4121fb3d01837b246300a1e0168aa325d4c9f perl-suidperl-5.8.8-40.el5_9.i386.rpm x86_64: e4da70ebed49403e02325827073f0cfaa1bfd5e1aa4d9a098884e814578aceb9 perl-5.8.8-40.el5_9.x86_64.rpm d6ff3694dc3e4b922f7c72988ea4763e07dd200a3748c4ce8a59d157bc166b24 perl-suidperl-5.8.8-40.el5_9.x86_64.rpm Source: 820918b4e9e204a8105779fa35854592b5986f31ad518f5d181d13...

CentOS Errata and Security Advisory 2008:0522 https://rhn.redhat.com/errata/RHSA-2008-0522.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/perl-5.8.5-36.c4.3.s390.rpm updates/s390/RPMS/perl-suidperl-5.8.5-36.c4.3.s390.rpm s390x: updates/s390x/RPMS/perl-5.8.5-36.c4.3.s390x.rpm updates/s390x/RPMS/perl-suidperl-5.8.5-36.c4.3.s390x.rpm -- Pasi Pirhonen - upi at iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored -------------- next part -------------- A non-text attachment was scru...

...updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/perl-5.8.0-98.EL3.s390.rpm updates/s390/RPMS/perl-CGI-2.89-98.EL3.s390.rpm updates/s390/RPMS/perl-CPAN-1.61-98.EL3.s390.rpm updates/s390/RPMS/perl-DB_File-1.806-98.EL3.s390.rpm updates/s390/RPMS/perl-suidperl-5.8.0-98.EL3.s390.rpm s390x: updates/s390x/RPMS/perl-5.8.0-98.EL3.s390x.rpm updates/s390x/RPMS/perl-CGI-2.89-98.EL3.s390x.rpm updates/s390x/RPMS/perl-CPAN-1.61-98.EL3.s390x.rpm updates/s390x/RPMS/perl-DB_File-1.806-98.EL3.s390x.rpm updates/s390x/RPMS/perl-suidperl-5.8.0-98.EL3.s390x.rpm -- Pasi...

...06 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0406.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 213ceda164ed20d9db0da91e7f0ca71e perl-5.8.8-18.el5_3.1.i386.rpm 9c2a30126c4acff2e55b9c5bd318b231 perl-suidperl-5.8.8-18.el5_3.1.i386.rpm Source: 528d537d2b6396b2cbd9acf35e5a1fae perl-5.8.8-18.el5_3.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos at irc.freenode.net ------------------------------ Message: 2 Date: Thu, 2 Apr 2009 23:52:10 +0000 From: Karanbi...

I did a make webvmail and I get the following error on redhat 9.0 No HTTP directory make: *** [webvmail] Error 1 I have the perl-suidperl rpm installed and apache installed Thanx. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20050501/275c1e94/attachment.htm

After system update yesterday, Openwebmail now gives an error: > Undefined subroutine &Compress::Zlib::memGzip called at /var/www/cgi-bin/openwebmail/shares/ow-shared.pl line 1175. I tried to do perl -MCPAN -e shell install Compress::Zlib But it says Compress::Zlib is up-to-date. What do to?? I cannot find an answer by googling. - Jussi -- Jussi Hirvi * Green Spot Topeliuksenkatu 15