Description
An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | perl | 5.8.0-7 | — |
| Debian 13 | perl | 5.8.0-7 | — |
| Debian 12 | perl | 5.8.0-7 | — |
References
- RHSA-2002:081 vendor-advisory
- linux-utf8-incorrect-md5(9051) vdb-entry
- MDKSA-2002:035 vendor-advisory
- 4716 vdb-entry