MGASA-2018-0241 Updated perl packages fix security vulnerabilities

Brian Carpenter reported that a crafted regular expression could cause a heap buffer write overflow, with control over the bytes written CVE-2018-6797. Nguyen Duc Manh reported that matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially...

MGASA-2018-0047 Updated perl packages fix security vulnerability

John Lightsey and Todd Rinaldo reported that the opportunistic loading of optional modules can make many programs unintentionally load code from the current working directory which might be changed to another directory without the user realising and potentially leading to privilege escalation...

MGASA-2018-0049 Updated perl packages fix security vulnerability

Jakub Wilk reported a heap buffer overflow flaw in the regular expression compiler, allowing a remote attacker to cause a denial of service via a specially crafted regular expression with the case-insensitive modifier CVE-2017-12837. Jakub Wilk reported a buffer over-read flaw in the regular...

MGASA-2016-0191 Updated perl packages fix security vulnerability

The regex engine got into an infinite loop because of the malformation. It is trying to back-up over a sequence of UTF-8 continuation bytes. The character just before the sequence should be a start byte. If it's not, there is a malformation which results in "hang" of regexp matching and CPU...

MGASA-2016-0099 Updated perl packages fix CVE-2016-2381

Updated perl packages fix security vulnerability: Stephane Chazelas discovered a bug in the environment handling in Perl. Perl provides a Perl-space hash variable, %ENV, in which environment variables can be looked up. If a variable appears twice in envp, only the last value would appear in %ENV,...

Updated perl packages fix CVE-2016-2381

Updated perl packages fix security vulnerability: Stephane Chazelas discovered a bug in the environment handling in Perl. Perl provides a Perl-space hash variable, %ENV, in which environment variables can be looked up. If a variable appears twice in envp, only the last value would appear in %ENV,...

MGASA-2014-0406 Updated perl packages fix CVE-2014-4330

Updated perl package fixes security vulnerability: The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service stack consumption and crash via an Array-Reference with many nested Array-References, which trigge...

Mandriva Linux Security Advisory : perl (MDVSA-2013:113)

Updated perl packages fix security vulnerability : It was discovered that Perl's 'x' string repeat operator is vulnerable to a heap-based buffer overflow. An attacker could use this to execute arbitrary code CVE-2012-5195. The compile function in Maketext.pm in the Locale::Maketext implementation...

perl

New perl packages are available for Slackware 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/perl-5.16.3-i486-1slack14.0.txz: Upgraded. This update fixes a flaw in the rehashing code that can be exploited to carry...

[SECURITY] [DSA 1923-1] New libhtml-parser-perl packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1923-1 [email protected] http://www.debian.org/security/ Nico Golde October 27th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 620-1] New perl packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 620-1 [email protected] http://www.debian.org/security/ Martin Schulze December 30th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 431-1] New perl packages fix information leak in suidperl

-------------------------------------------------------------------------- Debian Security Advisory DSA 431-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 1st, 2004 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: : : : Updated Perl packages fix security issues.

Updated Perl packages that fix a security issue in Safe.pm and a cross-site scripting XSS vulnerability in CGI.pm are now available. Updated 3 Oct 2003 Updated modperl packages have been added for Red Hat Linux 7.1, which are required due to the move to Perl version 5.6.1 on this platform. Perl i...

[SECURITY] [DSA 208-1] New Perl packages correct Safe handling

-------------------------------------------------------------------------- Debian Security Advisory DSA 208-1 [email protected] http://www.debian.org/security/ Martin Schulze December 12th, 2002 http://www.debian.org/security/faq -...