Red Hat Security Advisory

RHSA-2019:0001

rh-perl526-perl security and enhancement update

Released 2019-01-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-perl526-perl-4:5.26.3-405.el7, rh-perl526-perl-Attribute-Handlers-0.99-405.el7, rh-perl526-perl-Devel-Peek-1.26-405.el7 +25
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-perl526-perl-4:5.26.3-405.el7, rh-perl526-perl-Attribute-Handlers-0.99-405.el7, rh-perl526-perl-Devel-Peek-1.26-405.el7 +25
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-perl526-perl-4:5.26.3-405.el7, rh-perl526-perl-Attribute-Handlers-0.99-405.el7, rh-perl526-perl-Devel-Peek-1.26-405.el7 +25
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-perl526-perl-4:5.26.3-405.el7, rh-perl526-perl-Attribute-Handlers-0.99-405.el7, rh-perl526-perl-Devel-Peek-1.26-405.el7 +25
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-perl526-perl-4:5.26.3-405.el7, rh-perl526-perl-Attribute-Handlers-0.99-405.el7, rh-perl526-perl-Devel-Peek-1.26-405.el7 +25

TI-2018-12932 CVE-2018-18312 · GHSA-qj2w-cj4c-5f2g

MEDIUM 56

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.12768 Published 2018-12-05 Fixed CWE-119

TI-2018-12931 CVE-2018-18311 · GHSA-qr73-9894-ffxf

MEDIUM 56

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.11676 Published 2018-12-07 Partial fix CWE-190

TI-2018-12934 CVE-2018-18314 · GHSA-7f84-77mg-9mgg

MEDIUM 51

Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0606 Published 2018-12-07 Fixed CWE-119

TI-2018-12933 CVE-2018-18313 · GHSA-jrcr-mfpr-rgg9

MEDIUM 51

Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.09524 Published 2018-12-07 Fixed CWE-125