SUSE SLES12 Security Update : perl-PlRPC (SUSE-SU-2020:2238-1)

This update for perl-PlRPC fixes the following issues : Security notice: bsc858243, CVE-2013-7284 - Document security vulnerability on Storable and reply attack Add perl-PlRPC-CVE-2013-7284.patch Note that Tenable Network Security has extracted the preceding description block directly from the SU...

openSUSE Security Update : perl-XML-Twig (openSUSE-2020-1204)

This update for perl-XML-Twig fixes the following issues : - Security fix bsc1008644, CVE-2016-9180 - Setting expandexternalents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use noxxe. - Update documentation for XML::Twig to mention problems wi...

openSUSE: Security Advisory for perl-XML-Twig (openSUSE-SU-2020:1204-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1204-1 Security update for perl-XML-Twig

This update for perl-XML-Twig fixes the following issues: - Security fix bsc1008644, CVE-2016-9180 Setting expandexternalents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use noxxe. Update documentation for XML::Twig to mention problems with...

SUSE-SU-2020:2238-1 Security update for perl-PlRPC

This update for perl-PlRPC fixes the following issues: - Security notice: bsc858243, CVE-2013-7284 Document security vulnerability on Storable and reply attack - Add perl-PlRPC-CVE-2013-7284.patch...

Security update for perl-XML-Twig (moderate)

openSUSE Security Update: Security update for perl-XML-Twig Announcement ID: openSUSE-SU-2020:1204-1 Rating: moderate References: 1008644 Cross-References: CVE-2016-9180 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

openSUSE Security Update : perl-XML-Twig (openSUSE-2020-1177)

This update for perl-XML-Twig fixes the following issues : - Security fix bsc1008644, CVE-2016-9180 - Setting expandexternalents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use noxxe. - Update documentation for XML::Twig to mention problems wi...

openSUSE: Security Advisory for perl-XML-Twig (openSUSE-SU-2020:1177-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-17478

ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm...

CVE-2020-17478

ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm...

Code injection

ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm...

CVE-2020-17478

ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm...

CVE-2020-17478

The CVE-2020-17478 entry affects Crypt::Perl, specifically ECDSA/EC/Point.pm before version 0.33, where timing-attack considerations in the EC point multiplication are not properly handled. The issue is documented across multiple sources (e.g., NVD/NVDB) with the root cause described as inadequat...

Security update for perl-XML-Twig (moderate)

openSUSE Security Update: Security update for perl-XML-Twig Announcement ID: openSUSE-SU-2020:1177-1 Rating: moderate References: 1008644 Cross-References: CVE-2016-9180 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

SUSE-SU-2020:2172-1 Security update for perl-XML-Twig

This update for perl-XML-Twig fixes the following issues: - Security fix bsc1008644, CVE-2016-9180 Setting expandexternalents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use noxxe. Update documentation for XML::Twig to mention problems with...

Integer Overflow

Perl has an integer overflow related to mishandling of a "PLregkindOPn == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection...

Denial Of Service (DoS)

perl is vulnerable to denial of service DoS. The vulnerability exists through a buffer overflow via a crafted regular expression because of recursive Sstudychunk calls...

Denial Of Service (DoS)

Perl is vulnerable to denial of service DoS. It allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...

Perl archive zip Directory Traversal (CVE-2018-10860)

A directory traversal vulnerability exists in Perl archive zip. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2020-1820)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...