Your message dated Wed, 07 Aug 2013 16:18:50 +0000
with message-id <[email protected]>
and subject line libfile-mimeinfo-perl: UTF8 Security bug and Crashes with some
unicode files - closing
has caused the Debian Bug report #460701,
regarding libfile-mimeinfo-perl: UTF8 Security bug and Crashes with some
unicode files
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
460701: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=460701
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libfile-mimeinfo-perl
Version: 0.13-1
Severity: important
When running mimetype on certain files i dies with the current output:
-- start output
Malformed UTF-8 character (fatal) at /usr/share/perl5/File/MimeInfo.pm line 120.
-- end output
After consulting some other perl users about this as I'm no unicode guy,
someone concluded it was related to a known security bug with :utf8.
The bug is decribed here:
http://www.perlmonks.org/?node_id=644786
Personally I do not have the security problem and I've worked arround the
problem by catching it with an eval{}.
I would like to see it fixed in the long run though if this is possible.
Someone also sugested using ":encoding(utf8)" instead of ":utf8" as this would
atleast make it 'safe' then (the exploit wouldn't work anymore), but for me
this resulted in a list of errors like the following:
-- start output
utf8 "\xFE" does not map to Unicode at /usr/share/perl5/File/MimeInfo.pm line
107.
utf8 "\xED" does not map to Unicode at /usr/share/perl5/File/MimeInfo.pm line
107.
utf8 "\xFE" does not map to Unicode at /usr/share/perl5/File/MimeInfo.pm line
107.
utf8 "\xED" does not map to Unicode at /usr/share/perl5/File/MimeInfo.pm line
107.
utf8 "\xA4" does not map to Unicode at /usr/share/perl5/File/MimeInfo.pm line
107.
utf8 "\xF5" does not map to Unicode at /usr/share/perl5/File/MimeInfo.pm line
107.
utf8 "\xDC" does not map to Unicode at /usr/share/perl5/File/MimeInfo.pm line
107.
utf8 "\x82" does not map to Unicode at /usr/share/perl5/File/MimeInfo.pm line
107.
utf8 "\x82" does not map to Unicode at /usr/share/perl5/File/MimeInfo.pm line
107.
-- end output
and quite a bit more.
Hopefully I've provided you with enough information, if you would like to hear
more,or receive a sample file, please let me know.
Thanks for your package,
Sebastian
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.22-3-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages libfile-mimeinfo-perl depends on:
ii libfile-basedir-perl 0.03-0.1 Perl module to use the freedesktop
ii libfile-desktopentry-perl 0.04-0.1 Perl module to handle freedesktop
ii perl 5.8.8-12 Larry Wall's Practical Extraction
ii shared-mime-info 0.22-2 FreeDesktop.org shared MIME databa
libfile-mimeinfo-perl recommends no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Hi! I'm closing this bug, since it was tagged "moreinfo" for years
without answer. If you still encounter this problem, please feel free
to re-open it.
--- End Message ---
