Stories for 2005-12-16

use Perl Daily Newsletter

In this issue:
    * Patch to sprintf fixes buffer overflow
    * Inside-Out Objects at Perl Seminar NY
    * New CPAN Distributions for December 15, 2005

+--------------------------------------------------------------------+
| Patch to sprintf fixes buffer overflow                             |
|   posted by davorg on Thursday December 15, @04:20 (Releases)      |
|   http://use.perl.org/article.pl?sid=05/12/15/0916221              |
+--------------------------------------------------------------------+

[0]Andy Lester writes "Perl 5 Porters have released a fix to the sprintf
function that was recently discovered to have a buffer overflow in very
specific cases. All Perl users should consider updating immediately.

Dyad Security recently released [1]a security advisory explaining how in
certain cases, a carefully crafted format string passed to sprintf can
cause a buffer overflow. This buffer overflow can then be used by an
attacker to execute code on the machine. This was discovered in the
context of a design problem with the Webmin administration package that
allowed a malicious user to pass unchecked data into sprintf. A related
fix for Sys::Syslog [2]has already been released."

This story continues at:
    http://use.perl.org/article.pl?sid=05/12/15/0916221

Discuss this story at:
    http://use.perl.org/comments.pl?sid=05/12/15/0916221

Links:
    0. http://news.perlfoundation.org/
    1. http://dyadsecurity.com/perl-0002.html
    2. http://www.perlfoundation.org/news/2005/webmin_flaw_alleviated.html


+--------------------------------------------------------------------+
| Inside-Out Objects at Perl Seminar NY                              |
|   posted by davorg on Thursday December 15, @06:47 (News)          |
|   http://use.perl.org/article.pl?sid=05/12/15/1127227              |
+--------------------------------------------------------------------+

[0]kid51 writes "Inside-out objects have drawn increasing attention in
recent years, particularly since Damian Conway wrote about them in Perl
Best Practices. Their pros and cons have been extensively discussed in
recent Perlmonks threads.

[1]Perl Seminar NY, New York City's monthly Perl user group, is pleased
to announce that Perlmonk contributor xdg -- known in what is alleged to
be real life as David A Golden -- will be speaking on Inside-Out Objects
at our Tuesday, December 20 meeting.

Details: Perl Seminar NY. Tuesday, December 20, 6:15-8:15 pm. NYPC User
Group Office Suite. 481 8 Ave (Ramada New Yorker Hotel building), btw
West 34 & 35 Sts, Manhattan. Room 550.

More details can be found [2]here."

Discuss this story at:
    http://use.perl.org/comments.pl?sid=05/12/15/1127227

Links:
    0. mailto:[email protected]
    1. http://groups.yahoo.com/group/perlsemny
    2. http://groups.yahoo.com/group/perlsemny/message/551


+--------------------------------------------------------------------+
| New CPAN Distributions for December 15, 2005                       |
|   posted by pudge on Thursday December 15, @18:30 (Module Listings)|
|   http://use.perl.org/article.pl?sid=05/12/15/1530216              |
+--------------------------------------------------------------------+

  * [0]Bundle-CUFTS-0.06 -- All Perl modules required to run CUFTS.
  * [1]CGI-Uploader-1.1 -- Manage CGI uploads using SQL database
  * [2]CGI-Utils-0.08 -- Utilities for retrieving information through the
    Common Gateway Interface
  * [3]CMS-MediaWiki-0.80.07 -- Perl extension for creating and updating
    MediaWiki pages
  * [4]Catalyst-Plugin-Scheduler-0.01 -- Schedule events to run in a
    cron-like fashion
  * [5]Catalyst-Plugin-Scheduler-0.02 -- Schedule events to run in a
    cron-like fashion
  * [6]Catalyst-Plugin-Scheduler-0.03 -- Schedule events to run in a
    cron-like fashion
  * [7]Catalyst-Plugin-Session-Store-DBI-0.03 -- Store your sessions in a
    database
  * [8]Catalyst-Plugin-Session-Store-DBI-0.04 -- Store your sessions in a
    database
  * [9]Catalyst-Plugin-Static-Simple-0.13 -- Make serving static pages
    painless.
  * [10]Catalyst-View-HTML-Template-Compiled-0.08 --
    HTML::Template::Compiled View Class
  * [11]Finance-Bank-DE-NetBank-1.01 -- Check your SpardaBank Bank
    Accounts with Perl
  * [12]Finance-Bank-DE-NetBank-1.02 -- Check your NetBank Bank Accounts
    with Perl
  * [13]Finance-Bank-DE-NetBank-1.03 -- Check your NetBank Bank Accounts
    with Perl
  * [14]HTML-Template-Associate-1.13 -- Associate relevant packages with
    HTML::Template
  * [15]IMDB-Film-0.17 -- OO Perl interface to the movies database IMDB.
  * [16]Image-Thumbnail-0.6 -- simple thumbnails with
    GD/ImageMagick/Imager
  * [17]Math-Geometry-Planar-1.15 -- A collection of planar geometry
    functions
  * [18]Math-Random-OO-0.17 -- Consistent object-oriented interface for
    generating random numbers
  * [19]Module-Pluggable-Fast-0.17 -- Fast plugins with instantiation
  * [20]PPI-1.108 -- Parse, Analyze and Manipulate Perl (without perl)
  * [21]RRD-Simple-1.21 -- Simple interface to create and store data in
    RRD files
  * [22]SRU-0.92 -- Search and Retrieval by URL
  * [23]SWF-NeedsRecompile-1.04 -- Tests if any SWF or FLA file
    dependencies have changed
  * [24]Syntax-Highlight-Mason-1.00 -- Perl extension to Highlight
    HTML::Mason code
  * [25]Text-Ngrams-1.8 -- Flexible Ngram analysis (for characters,
    words, and more)
  * [26]WWW-Google-SiteMap-1.04 -- Perl extension for managing Google
    SiteMaps
  * [27]WWW-Search-AltaVista-2.143 -- class for searching
    www.altavista.com
  * [28]WWW-Search-AltaVista-2.144 -- class for searching
    www.altavista.com
  * [29]ack-1.02 -- TW-specific grep-like program

Discuss this story at:
    http://use.perl.org/comments.pl?sid=05/12/15/1530216

Links:
    0. http://search.cpan.org/~holbrook/Bundle-CUFTS-0.06
    1. http://search.cpan.org/~markstos/CGI-Uploader-1.1
    2. http://search.cpan.org/~dowens/CGI-Utils-0.08
    3. http://search.cpan.org/~retoh/CMS-MediaWiki-0.80.07
    4. http://search.cpan.org/~agrundma/Catalyst-Plugin-Scheduler-0.01
    5. http://search.cpan.org/~agrundma/Catalyst-Plugin-Scheduler-0.02
    6. http://search.cpan.org/~agrundma/Catalyst-Plugin-Scheduler-0.03
    7. http://search.cpan.org/~agrundma/Catalyst-Plugin-Session-Store-DBI-0.03
    8. http://search.cpan.org/~agrundma/Catalyst-Plugin-Session-Store-DBI-0.04
    9. http://search.cpan.org/~agrundma/Catalyst-Plugin-Static-Simple-0.13
   10. http://search.cpan.org/~esskar/Catalyst-View-HTML-Template-Compiled-0.08
   11. http://search.cpan.org/~rmoriz/Finance-Bank-DE-NetBank-1.01
   12. http://search.cpan.org/~rmoriz/Finance-Bank-DE-NetBank-1.02
   13. http://search.cpan.org/~rmoriz/Finance-Bank-DE-NetBank-1.03
   14. http://search.cpan.org/~alexp/HTML-Template-Associate-1.13
   15. http://search.cpan.org/~stepanov/IMDB-Film-0.17
   16. http://search.cpan.org/~lgoddard/Image-Thumbnail-0.6
   17. http://search.cpan.org/~dvdpol/Math-Geometry-Planar-1.15
   18. http://search.cpan.org/~dagolden/Math-Random-OO-0.17
   19. http://search.cpan.org/~sri/Module-Pluggable-Fast-0.17
   20. http://search.cpan.org/~adamk/PPI-1.108
   21. http://search.cpan.org/~nicolaw/RRD-Simple-1.21
   22. http://search.cpan.org/~bricas/SRU-0.92
   23. http://search.cpan.org/~clotho/SWF-NeedsRecompile-1.04
   24. http://search.cpan.org/~laxen/Syntax-Highlight-Mason-1.00
   25. http://search.cpan.org/~vlado/Text-Ngrams-1.8
   26. http://search.cpan.org/~jasonk/WWW-Google-SiteMap-1.04
   27. http://search.cpan.org/~mthurn/WWW-Search-AltaVista-2.143
   28. http://search.cpan.org/~mthurn/WWW-Search-AltaVista-2.144
   29. http://search.cpan.org/~petdance/ack-1.02



Copyright 1997-2005 pudge.  All rights reserved.


======================================================================

# Unsubscribe                    mailto:[email protected]
# News, archives, discussion     http://use.perl.org/
# Perl News in The Perl Journal  http://www.tpj.com/
# Feedback and news ideas        mailto:[email protected]
#                                http://use.perl.org/submit.pl