Red Hat Security AdvisoryRHSA-2021:1266
perl security update
Released 2021-04-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.4) perl-4:5.16.3-292.el7_4.2, perl-CPAN-1.9800-292.el7_4.2, perl-ExtUtils-CBuilder-1:0.28.2.6-292.el7_4.2 +14
- Red Hat Enterprise Linux Server E4S (v. 7.4) perl-4:5.16.3-292.el7_4.2, perl-CPAN-1.9800-292.el7_4.2, perl-ExtUtils-CBuilder-1:0.28.2.6-292.el7_4.2 +14
- Red Hat Enterprise Linux Server Optional AUS (v. 7.4) perl-tests-4:5.16.3-292.el7_4.2
- Red Hat Enterprise Linux Server Optional E4S (v. 7.4) perl-tests-4:5.16.3-292.el7_4.2
- Red Hat Enterprise Linux Server Optional TUS (v. 7.4) perl-tests-4:5.16.3-292.el7_4.2
- Red Hat Enterprise Linux Server TUS (v. 7.4) perl-4:5.16.3-292.el7_4.2, perl-CPAN-1.9800-292.el7_4.2, perl-ExtUtils-CBuilder-1:0.28.2.6-292.el7_4.2 +14
Fixes 3 records
Priority MEDIUM 49
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.11334 · Published 2020-06-05 · Partial fix CWE-190
Priority MEDIUM 45
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.04879 · Published 2020-06-05 · Partial fix CWE-190
Priority MEDIUM 42
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05971 · Published 2020-06-05 · Partial fix CWE-120
