Red Hat Security AdvisoryRHSA-2021:0343
perl security update
Released 2021-02-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) perl-4:5.16.3-299.el7_9, perl-CPAN-1.9800-299.el7_9, perl-ExtUtils-CBuilder-1:0.28.2.6-299.el7_9 +14
- Red Hat Enterprise Linux Client Optional (v. 7) perl-tests-4:5.16.3-299.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) perl-tests-4:5.16.3-299.el7_9
- Red Hat Enterprise Linux Server (v. 7) perl-4:5.16.3-299.el7_9, perl-CPAN-1.9800-299.el7_9, perl-ExtUtils-CBuilder-1:0.28.2.6-299.el7_9 +16
- Red Hat Enterprise Linux Server Optional (v. 7) perl-tests-4:5.16.3-299.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) perl-4:5.16.3-299.el7_9, perl-CPAN-1.9800-299.el7_9, perl-ExtUtils-CBuilder-1:0.28.2.6-299.el7_9 +14
- Red Hat Enterprise Linux Workstation Optional (v. 7) perl-tests-4:5.16.3-299.el7_9
Fixes 3 records
Priority MEDIUM 49
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.11334 · Published 2020-06-05 · Partial fix CWE-190
Priority MEDIUM 45
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.04879 · Published 2020-06-05 · Partial fix CWE-190
Priority MEDIUM 42
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05971 · Published 2020-06-05 · Partial fix CWE-120
