Red Hat Security AdvisoryRHSA-2008:0522
perl security update
Released 2008-06-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 perl-2:5.8.0-98.EL3, perl-2:5.8.0-98.EL3.i386, perl-CGI-2:2.89-98.EL3 +7
- Red Hat Enterprise Linux (v. 5 server) perl-4:5.8.8-10.el5_2.3, perl-4:5.8.8-10.el5_2.3.i386, perl-4:5.8.8-10.el5_2.3.ia64 +5
- Red Hat Enterprise Linux AS version 3 perl-2:5.8.0-98.EL3, perl-2:5.8.0-98.EL3.i386, perl-2:5.8.0-98.EL3.ia64 +17
- Red Hat Enterprise Linux AS version 4 perl-3:5.8.5-36.el4_6.3, perl-3:5.8.5-36.el4_6.3.i386, perl-3:5.8.5-36.el4_6.3.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) perl-4:5.8.8-10.el5_2.3, perl-4:5.8.8-10.el5_2.3.i386, perl-suidperl-4:5.8.8-10.el5_2.3 +1
- Red Hat Enterprise Linux Desktop version 4 perl-3:5.8.5-36.el4_6.3, perl-3:5.8.5-36.el4_6.3.i386, perl-suidperl-3:5.8.5-36.el4_6.3 +1
- Red Hat Enterprise Linux ES version 3 perl-2:5.8.0-98.EL3, perl-2:5.8.0-98.EL3.i386, perl-2:5.8.0-98.EL3.ia64 +12
- Red Hat Enterprise Linux ES version 4 perl-3:5.8.5-36.el4_6.3, perl-3:5.8.5-36.el4_6.3.i386, perl-3:5.8.5-36.el4_6.3.ia64 +3
- Red Hat Enterprise Linux WS version 3 perl-2:5.8.0-98.EL3, perl-2:5.8.0-98.EL3.i386, perl-2:5.8.0-98.EL3.ia64 +12
- Red Hat Enterprise Linux WS version 4 perl-3:5.8.5-36.el4_6.3, perl-3:5.8.5-36.el4_6.3.i386, perl-3:5.8.5-36.el4_6.3.ia64 +3
Fixes 1 record
Priority LOW 29
Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a crafted regular expression containing UTF8 characters.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03153 · Published 2008-04-23 · Fixed CWE-399
