Summary
[4:5.16.3-299]
- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)
[4:5.16.3-298]
- Fix CVE-2020-12723 (bug #1839278)
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | perl | 4:5.16.3-299.el7_9 |
| Oracle Linux · 7 | perl-core | 0:5.16.3-299.el7_9 |
| Oracle Linux · 7 | perl-CPAN | 0:1.9800-299.el7_9 |
| Oracle Linux · 7 | perl-devel | 4:5.16.3-299.el7_9 |
| Oracle Linux · 7 | perl-ExtUtils-CBuilder | 1:0.28.2.6-299.el7_9 |
| Oracle Linux · 7 | perl-ExtUtils-Embed | 0:1.30-299.el7_9 |
| Oracle Linux · 7 | perl-ExtUtils-Install | 0:1.58-299.el7_9 |
| Oracle Linux · 7 | perl-IO-Zlib | 1:1.10-299.el7_9 |
| Oracle Linux · 7 | perl-libs | 4:5.16.3-299.el7_9 |
| Oracle Linux · 7 | perl-Locale-Maketext-Simple | 1:0.21-299.el7_9 |
| Oracle Linux · 7 | perl-macros | 4:5.16.3-299.el7_9 |
| Oracle Linux · 7 | perl-Module-CoreList | 1:2.76.02-299.el7_9 |
| Oracle Linux · 7 | perl-Module-Loaded | 1:0.08-299.el7_9 |
| Oracle Linux · 7 | perl-Object-Accessor | 1:0.42-299.el7_9 |
| Oracle Linux · 7 | perl-Package-Constants | 1:0.02-299.el7_9 |
| Oracle Linux · 7 | perl-Pod-Escapes | 1:1.04-299.el7_9 |
| Oracle Linux · 7 | perl-tests | 4:5.16.3-299.el7_9 |
| Oracle Linux · 7 | perl-Time-Piece | 0:1.20.1-299.el7_9 |
Vulnerabilities 3
-
Unscored —CVE-2020-10543 EPSS 11%
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifier…
-
Unscored —
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A craf…
-
Unscored —
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_…