Red Hat Security AdvisoryRHSA-2021:1678
perl security and bug fix update
Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) perl-4:5.26.3-419.el8, perl-Attribute-Handlers-0.99-419.el8, perl-Devel-Peek-1.26-419.el8 +16
- Red Hat Enterprise Linux BaseOS (v. 8) perl-4:5.26.3-419.el8, perl-Errno-1.28-419.el8, perl-IO-1.38-419.el8 +5
Fixes 2 records
Priority MEDIUM 49
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.11334 · Published 2020-06-05 · Partial fix CWE-190
Priority MEDIUM 45
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.04879 · Published 2020-06-05 · Partial fix CWE-190
