Red Hat Security AdvisoryRHSA-2011:0558
perl security and bug fix update
Released 2011-05-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) perl-4:5.10.1-119.el6, perl-Archive-Extract-1:0.38-119.el6, perl-Archive-Tar-1.58-119.el6 +41
- Red Hat Enterprise Linux HPC Node (v. 6) perl-4:5.10.1-119.el6, perl-Archive-Extract-1:0.38-119.el6, perl-Archive-Tar-1.58-119.el6 +41
- Red Hat Enterprise Linux Server (v. 6) perl-4:5.10.1-119.el6, perl-Archive-Extract-1:0.38-119.el6, perl-Archive-Tar-1.58-119.el6 +43
- Red Hat Enterprise Linux Workstation (v. 6) perl-4:5.10.1-119.el6, perl-Archive-Extract-1:0.38-119.el6, perl-Archive-Tar-1.58-119.el6 +41
Fixes 3 records
Priority LOW 36
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.1058 · Published 2011-04-11 · Fixed CWE-264
Priority LOW 25
CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splittin…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02489 · Published 2010-12-06 · Fixed CWE-94
Priority LOW 25
The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attack…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02713 · Published 2010-12-06 · Fixed CWE-94
THREATIST.IORead the docs