PC16F編譯器
A. Perl Unicode 「\Q...\E」正則表達式
受影響系統:
Larry Wall Perl 5.8.8
描述:
--------------------------------------------------------------------------------
BUGTRAQ ID: 28928
CVE(CAN) ID: CVE-2008-1927
Perl是一種免費且功能強大的編程語言。
Perl在處理畸形的正則表達式時存在漏洞,如果用戶所提供的正則表達式字元包含在「\Q...\E」結構所保護的變數中的話,則Perl解釋器在編譯正則表達式時可能會出現緩沖區溢出,導致拒絕服務的情況。
<*來源:Don Armstrong
鏈接:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=454792
http://www.nntp.perl.org/group/perl.perl5.porters/2008/04/msg135902.html
http://www.debian.org/security/2008/dsa-1556
*>
測試方法:
--------------------------------------------------------------------------------
警 告
以下程序(方法)可能帶有攻擊性,僅供安全研究與教學之用。使用者風險自負!
http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5;filename=test.pl;att=2;bug=454792
建議:
--------------------------------------------------------------------------------
廠商補丁:
Debian
------
Debian已經為此發布了一個安全公告(DSA-1556-1)以及相應補丁:
DSA-1556-1:New perl packages fix denial of service
鏈接:http://www.debian.org/security/2008/dsa-1556
補丁下載:
Source archives:
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8-7etch2.dsc
Size/MD5 checksum: 1033
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8-7etch2.diff.gz
Size/MD5 checksum: 96868
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8.orig.tar.gz
Size/MD5 checksum: 12829188
Architecture independent packages:
http://security.debian.org/pool/updates/main/p/perl/perl-moles_5.8.8-7etch2_all.deb
Size/MD5 checksum: 2313432
http://security.debian.org/pool/updates/main/p/perl/perl-doc_5.8.8-7etch2_all.deb
Size/MD5 checksum: 7348546
http://security.debian.org/pool/updates/main/p/perl/libcgi-fast-perl_5.8.8-7etch2_all.deb
Size/MD5 checksum: 40980
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.8-7etch2_alpha.deb
Size/MD5 checksum: 2928386
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.8-7etch2_alpha.deb
Size/MD5 checksum: 1010
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.8-7etch2_alpha.deb
Size/MD5 checksum: 821430
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.8-7etch2_alpha.deb
Size/MD5 checksum: 36236
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8-7etch2_alpha.deb
Size/MD5 checksum: 4149744
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.8-7etch2_alpha.deb
Size/MD5 checksum: 879670
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.8-7etch2_amd64.deb
Size/MD5 checksum: 32800
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.8-7etch2_amd64.deb
Size/MD5 checksum: 808850
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.8-7etch2_amd64.deb
Size/MD5 checksum: 630448
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8-7etch2_amd64.deb
Size/MD5 checksum: 4238138
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.8-7etch2_amd64.deb
Size/MD5 checksum: 2734908
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.8-7etch2_amd64.deb
Size/MD5 checksum: 1010
arm architecture (ARM)
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.8-7etch2_arm.deb
Size/MD5 checksum: 2547782
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.8-7etch2_arm.deb
Size/MD5 checksum: 759522
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.8-7etch2_arm.deb
Size/MD5 checksum: 561950
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.8-7etch2_arm.deb
Size/MD5 checksum: 30340
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.8-7etch2_arm.deb
Size/MD5 checksum: 1010
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8-7etch2_arm.deb
Size/MD5 checksum: 3409080
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.8-7etch2_hppa.deb
Size/MD5 checksum: 2735266
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.8-7etch2_hppa.deb
Size/MD5 checksum: 33196
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.8-7etch2_hppa.deb
Size/MD5 checksum: 869350
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.8-7etch2_hppa.deb
Size/MD5 checksum: 1014
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.8-7etch2_hppa.deb
Size/MD5 checksum: 693972
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8-7etch2_hppa.deb
Size/MD5 checksum: 4195310
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.8-7etch2_i386.deb
Size/MD5 checksum: 2491262
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.8-7etch2_i386.deb
Size/MD5 checksum: 526958
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.8-7etch2_i386.deb
Size/MD5 checksum: 32074
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8-7etch2_i386.deb
Size/MD5 checksum: 3583758
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.8-7etch2_i386.deb
Size/MD5 checksum: 585400
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.8-7etch2_i386.deb
Size/MD5 checksum: 760350
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.8-7etch2_ia64.deb
Size/MD5 checksum: 51282
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.8-7etch2_ia64.deb
Size/MD5 checksum: 1153370
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.8-7etch2_ia64.deb
Size/MD5 checksum: 977470
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.8-7etch2_ia64.deb
Size/MD5 checksum: 3364140
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8-7etch2_ia64.deb
Size/MD5 checksum: 4335648
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.8-7etch2_ia64.deb
Size/MD5 checksum: 1014
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.8-7etch2_mips.deb
Size/MD5 checksum: 2781044
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.8-7etch2_mips.deb
Size/MD5 checksum: 32222
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.8-7etch2_mips.deb
Size/MD5 checksum: 1010
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.8-7etch2_mips.deb
Size/MD5 checksum: 693726
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.8-7etch2_mips.deb
Size/MD5 checksum: 785736
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8-7etch2_mips.deb
Size/MD5 checksum: 3678816
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.8-7etch2_mipsel.deb
Size/MD5 checksum: 784398
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.8-7etch2_mipsel.deb
Size/MD5 checksum: 2729530
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.8-7etch2_mipsel.deb
Size/MD5 checksum: 32336
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8-7etch2_mipsel.deb
Size/MD5 checksum: 3413324
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.8-7etch2_mipsel.deb
Size/MD5 checksum: 687108
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.8-7etch2_mipsel.deb
Size/MD5 checksum: 1016
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.8-7etch2_powerpc.deb
Size/MD5 checksum: 32908
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.8-7etch2_powerpc.deb
Size/MD5 checksum: 2709324
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.8-7etch2_powerpc.deb
Size/MD5 checksum: 653286
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8-7etch2_powerpc.deb
Size/MD5 checksum: 3824700
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.8-7etch2_powerpc.deb
Size/MD5 checksum: 1006
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.8-7etch2_powerpc.deb
Size/MD5 checksum: 810628
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.8-7etch2_s390.deb
Size/MD5 checksum: 1012
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.8-7etch2_s390.deb
Size/MD5 checksum: 2796222
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.8-7etch2_s390.deb
Size/MD5 checksum: 823028
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.8-7etch2_s390.deb
Size/MD5 checksum: 4099882
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.8-7etch2_s390.deb
Size/MD5 checksum: 33094
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.8-7etch2_s390.deb
Size/MD5 checksum: 633506
補丁安裝方法:
1. 手工安裝補丁包:
首先,使用下面的命令來下載補丁軟體:
# wget url (url是補丁下載鏈接地址)
然後,使用下面的命令來安裝補丁:
# dpkg -i file.deb (file是相應的補丁名)
2. 使用apt-get自動安裝補丁包:
首先,使用下面的命令更新內部資料庫:
# apt-get update
然後,使用下面的命令安裝更新軟體包:
# apt-get upgrade
B. 幫忙說一下集成電路中的各種標語
電源電路、音頻電路(含MIC輸入部分和DAC音頻輸出部分)、復位電路等