Red Hat Security Advisory

RHSA-2019:0109

perl security update

Released 2019-01-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) perl-4:5.16.3-294.el7_6, perl-CPAN-1.9800-294.el7_6, perl-ExtUtils-CBuilder-1:0.28.2.6-294.el7_6 +14
Red Hat Enterprise Linux Client Optional (v. 7) perl-tests-4:5.16.3-294.el7_6
Red Hat Enterprise Linux ComputeNode (v. 7) perl-4:5.16.3-294.el7_6, perl-CPAN-1.9800-294.el7_6, perl-ExtUtils-CBuilder-1:0.28.2.6-294.el7_6 +14
Red Hat Enterprise Linux ComputeNode Optional (v. 7) perl-tests-4:5.16.3-294.el7_6
Red Hat Enterprise Linux Server (v. 7) perl-4:5.16.3-294.el7_6, perl-CPAN-1.9800-294.el7_6, perl-ExtUtils-CBuilder-1:0.28.2.6-294.el7_6 +16
Red Hat Enterprise Linux Server Optional (v. 7) perl-tests-4:5.16.3-294.el7_6
Red Hat Enterprise Linux Workstation (v. 7) perl-4:5.16.3-294.el7_6, perl-CPAN-1.9800-294.el7_6, perl-ExtUtils-CBuilder-1:0.28.2.6-294.el7_6 +14
Red Hat Enterprise Linux Workstation Optional (v. 7) perl-tests-4:5.16.3-294.el7_6
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) perl-4:5.16.3-294.el7_6, perl-CPAN-1.9800-294.el7_6, perl-ExtUtils-CBuilder-1:0.28.2.6-294.el7_6 +14
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) perl-tests-4:5.16.3-294.el7_6

TI-2018-12931 CVE-2018-18311 · GHSA-qr73-9894-ffxf

MEDIUM 56

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.11676 Published 2018-12-07 Partial fix CWE-190