Red Hat Security AdvisoryRHSA-2021:0883
perl security update
Released 2021-03-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) perl-4:5.16.3-294.el7_6.1, perl-CPAN-1.9800-294.el7_6.1, perl-ExtUtils-CBuilder-1:0.28.2.6-294.el7_6.1 +14
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) perl-tests-4:5.16.3-294.el7_6.1
- Red Hat Enterprise Linux Server EUS (v. 7.6) perl-4:5.16.3-294.el7_6.1, perl-CPAN-1.9800-294.el7_6.1, perl-ExtUtils-CBuilder-1:0.28.2.6-294.el7_6.1 +16
- Red Hat Enterprise Linux Server Optional EUS (v. 7.6) perl-tests-4:5.16.3-294.el7_6.1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) perl-4:5.16.3-294.el7_6.1, perl-CPAN-1.9800-294.el7_6.1, perl-ExtUtils-CBuilder-1:0.28.2.6-294.el7_6.1 +14
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) perl-tests-4:5.16.3-294.el7_6.1
Fixes 3 records
Priority MEDIUM 49
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.11334 · Published 2020-06-05 · Partial fix CWE-190
Priority MEDIUM 45
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.04879 · Published 2020-06-05 · Partial fix CWE-190
Priority MEDIUM 42
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05971 · Published 2020-06-05 · Partial fix CWE-120
