perl security update

2019-01-24T15:18:07
ID CESA-2019:0109
Type centos
Reporter CentOS Project
Modified 2019-01-24T15:18:07

Description

CentOS Errata and Security Advisory CESA-2019:0109

Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

  • perl: Integer overflow leading to buffer overflow in Perl_my_setenv() (CVE-2018-18311)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank the Perl project for reporting this issue. Upstream acknowledges Jayakrishna Menon as the original reporter.

Merged security bulletin from advisories: http://lists.centos.org/pipermail/centos-announce/2019-January/035186.html

Affected packages: perl perl-CPAN perl-ExtUtils-CBuilder perl-ExtUtils-Embed perl-ExtUtils-Install perl-IO-Zlib perl-Locale-Maketext-Simple perl-Module-CoreList perl-Module-Loaded perl-Object-Accessor perl-Package-Constants perl-Pod-Escapes perl-Time-Piece perl-core perl-devel perl-libs perl-macros perl-tests

Upstream details at: