Red Hat Security AdvisoryRHSA-2011:1424
perl security update
Released 2011-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) perl-4:5.10.1-119.el6_1.1, perl-Archive-Extract-1:0.38-119.el6_1.1, perl-Archive-Tar-1.58-119.el6_1.1 +43
Fixes 2 records
Priority MEDIUM 47
Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.13054 · Published 2012-01-13 · Partial fix CWE-20
Priority LOW 28
Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) v…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.02557 · Published 2012-01-13 · Partial fix CWE-189
