Red Hat Security AdvisoryRHSA-2013:0685
perl security update
Released 2013-03-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) perl-4:5.8.8-40.el5_9, perl-4:5.8.8-40.el5_9.i386, perl-4:5.8.8-40.el5_9.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 6) perl-4:5.10.1-130.el6_4, perl-Archive-Extract-1:0.38-130.el6_4, perl-Archive-Tar-1.58-130.el6_4 +43
- Red Hat Enterprise Linux HPC Node (v. 6) perl-4:5.10.1-130.el6_4, perl-Archive-Extract-1:0.38-130.el6_4, perl-Archive-Tar-1.58-130.el6_4 +43
- Red Hat Enterprise Linux Server (v. 6) perl-4:5.10.1-130.el6_4, perl-Archive-Extract-1:0.38-130.el6_4, perl-Archive-Tar-1.58-130.el6_4 +45
- Red Hat Enterprise Linux Workstation (v. 6) perl-4:5.10.1-130.el6_4, perl-Archive-Extract-1:0.38-130.el6_4, perl-Archive-Tar-1.58-130.el6_4 +43
Fixes 4 records
Priority HIGH 68
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.63738 · Published 2013-01-04 · Partial fix CWE-94
Priority MEDIUM 41
Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service (memory co…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04877 · Published 2012-12-18 · Partial fix CWE-119
Priority LOW 39
The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memory consumption and crash) via a crafted hash key.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03577 · Published 2013-03-12 · Fixed CWE-399
Priority LOW 29
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03261 · Published 2012-11-21 · Fixed CWE-16
THREATIST.IORead the docs