Red Hat Security AdvisoryRHSA-2021:2792
perl security and bug fix update
Released 2021-07-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 8.2) perl-4:5.26.3-418.el8_2.1, perl-Attribute-Handlers-0.99-418.el8_2.1, perl-Devel-Peek-1.26-418.el8_2.1 +16
- Red Hat Enterprise Linux BaseOS EUS (v. 8.2) perl-4:5.26.3-418.el8_2.1, perl-Errno-1.28-418.el8_2.1, perl-IO-1.38-418.el8_2.1 +5
Fixes 2 records
Priority MEDIUM 49
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.11334 · Published 2020-06-05 · Partial fix CWE-190
Priority MEDIUM 45
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.04879 · Published 2020-06-05 · Partial fix CWE-190
