Red Hat Security AdvisoryRHSA-2011:1797
perl security update
Released 2011-12-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) perl-4:5.8.8-32.el5_7.6, perl-4:5.8.8-32.el5_7.6.i386, perl-4:5.8.8-32.el5_7.6.ia64 +5
- Red Hat Enterprise Linux AS version 4 perl-3:5.8.5-57.el4, perl-3:5.8.5-57.el4.i386, perl-3:5.8.5-57.el4.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) perl-4:5.8.8-32.el5_7.6, perl-4:5.8.8-32.el5_7.6.i386, perl-suidperl-4:5.8.8-32.el5_7.6 +1
- Red Hat Enterprise Linux Desktop version 4 perl-3:5.8.5-57.el4, perl-3:5.8.5-57.el4.i386, perl-suidperl-3:5.8.5-57.el4 +1
- Red Hat Enterprise Linux ES version 4 perl-3:5.8.5-57.el4, perl-3:5.8.5-57.el4.i386, perl-3:5.8.5-57.el4.ia64 +3
- Red Hat Enterprise Linux WS version 4 perl-3:5.8.5-57.el4, perl-3:5.8.5-57.el4.i386, perl-3:5.8.5-57.el4.ia64 +3
Fixes 3 records
Priority MEDIUM 47
Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.13054 · Published 2012-01-13 · Partial fix CWE-20
Priority LOW 25
CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splittin…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02489 · Published 2010-12-06 · Fixed CWE-94
Priority LOW 25
The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attack…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02713 · Published 2010-12-06 · Fixed CWE-94
THREATIST.IORead the docs