The vulnerability of the Archive::Tar module in the Perl programming language allows a hacker to bypass established access controls and compromise the integrity of information.

The vulnerability of the Archive::Tar module in the Perl programming language is related to a flaw in the mechanism for protecting against directory traversal attacks. Exploiting this vulnerability allows an attacker to bypass established access controls and re-record any file through an archive...

Security Bulletin: IBM MQ Cloud Paks are vulnerable to multiple vulnerabilities in Perl (CVE-2018-18312 CVE-2018-18313 CVE-2018-18314 CVE-2018-18311)

Summary Several vulnerabilities were identified with versions of perl which are included in IBM MQ Cloud Paks. Vulnerability Details CVEID: CVE-2018-18312 DESCRIPTION: Perl is vulnerable to a heap-based buffer overflow, caused by a flaw in the Sregatom function in regcomp.c. By using a...

CentOS Update for perl CESA-2019:0109 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : perl (CESA-2019:0109)

An update for perl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

perl security update

CentOS Errata and Security Advisory CESA-2019:0109 An update for perl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

MGASA-2019-0046 Updated perl-Email-Address package fixes security vulnerability

The parse method in the Email::Address module through 1.912 for Perl can consume a large amount of resources on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f" CVE-2018-12558...

Updated perl-Email-Address package fixes security vulnerability

The parse method in the Email::Address module through 1.912 for Perl can consume a large amount of resources on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f" CVE-2018-12558...

[SECURITY] Fedora 29 Update: irssi-1.1.2-1.fc29

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

[SECURITY] Fedora 28 Update: irssi-1.1.2-1.fc28

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

Scientific Linux Security Update : perl on SL7.x x86_64 (20190122)

Security Fixes : - perl: Integer overflow leading to buffer overflow in Perlmysetenv CVE-2018-18311 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid121326; scriptversion"1.3";...

RHEL 7 : perl (RHSA-2019:0109)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0109 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Intege...

Oracle Linux 7 : perl (ELSA-2019-0109)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0109 advisory. 4:5.16.3-294 - Fix CVE-2018-18311 Integer overflow leading to buffer overflow bug 1661064 Tenable has extracted the preceding description block directly from th...

perl: Integer overflow leading to buffer overflow in Perl_my_setenv()

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

Important: Red Hat Security Advisory: perl security update

An update for perl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

perl security update

4:5.16.3-294 - Fix CVE-2018-18311 Integer overflow leading to buffer overflow bug 1661064...

[SECURITY] Fedora 28 Update: gitolite3-3.6.11-1.fc28

Gitolite allows a server to host many git repositories and provide access to many developers, without having to give them real userids on the server. The essential magic in doing this is ssh's pubkey access and the authorized keys file, and the inspiration was an older program called gitosis...

[SECURITY] Fedora 29 Update: perl-Email-Address-1.912-1.fc29

This class implements a regex-based RFC 2822 parser that locates email addresses in strings and returns a list of Email::Address objects found. Alternatively you may construct objects manually. The goal of this software is to be correct, and very very fast...

[SECURITY] Fedora 28 Update: perl-Email-Address-1.912-1.fc28

This class implements a regex-based RFC 2822 parser that locates email addresses in strings and returns a list of Email::Address objects found. Alternatively you may construct objects manually. The goal of this software is to be correct, and very very fast...

Fedora 29 : perl-Email-Address (2019-026d5ab23d)

Update to 1.912, fixes CVE-2015-7686 and CVE-2018-12558. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Update for perl-Email-Address FEDORA-2019-8deebad756

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...