Skip to content
OpenAdvisories
Unscored RHSA-2005:105 3 CVEs

Red Hat Security Advisory: perl security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as perl 2:5.8.0-89.10
Red Hat · RHEL 3 enterprise_linux:3::as perl-CGI 2:2.81-89.10
Red Hat · RHEL 3 enterprise_linux:3::as perl-CPAN 2:1.61-89.10
Red Hat · RHEL 3 enterprise_linux:3::as perl-DB_File 2:1.804-89.10
Red Hat · RHEL 3 enterprise_linux:3::as perl-debuginfo 2:5.8.0-89.10
Red Hat · RHEL 3 enterprise_linux:3::as perl-suidperl 2:5.8.0-89.10
Red Hat · RHEL 3 enterprise_linux:3::desktop perl 2:5.8.0-89.10
Red Hat · RHEL 3 enterprise_linux:3::desktop perl-CGI 2:2.81-89.10
Red Hat · RHEL 3 enterprise_linux:3::desktop perl-CPAN 2:1.61-89.10
Red Hat · RHEL 3 enterprise_linux:3::desktop perl-DB_File 2:1.804-89.10
Red Hat · RHEL 3 enterprise_linux:3::desktop perl-debuginfo 2:5.8.0-89.10
Red Hat · RHEL 3 enterprise_linux:3::desktop perl-suidperl 2:5.8.0-89.10
Red Hat · RHEL 3 enterprise_linux:3::es perl 2:5.8.0-89.10
Red Hat · RHEL 3 enterprise_linux:3::es perl-CGI 2:2.81-89.10
Red Hat · RHEL 3 enterprise_linux:3::es perl-CPAN 2:1.61-89.10
Red Hat · RHEL 3 enterprise_linux:3::es perl-DB_File 2:1.804-89.10
Red Hat · RHEL 3 enterprise_linux:3::es perl-debuginfo 2:5.8.0-89.10
Red Hat · RHEL 3 enterprise_linux:3::es perl-suidperl 2:5.8.0-89.10
Red Hat · RHEL 3 enterprise_linux:3::ws perl 2:5.8.0-89.10
Red Hat · RHEL 3 enterprise_linux:3::ws perl-CGI 2:2.81-89.10
Red Hat · RHEL 3 enterprise_linux:3::ws perl-CPAN 2:1.61-89.10
Red Hat · RHEL 3 enterprise_linux:3::ws perl-DB_File 2:1.804-89.10
Red Hat · RHEL 3 enterprise_linux:3::ws perl-debuginfo 2:5.8.0-89.10
Red Hat · RHEL 3 enterprise_linux:3::ws perl-suidperl 2:5.8.0-89.10

Vulnerabilities 3

  • Unscored —

    Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for …

  • Unscored —
    CVE-2005-0155 Public exploit

    The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbit…

  • Unscored —
    CVE-2005-0156 Public exploit

    Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local us…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=140227
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=146737
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_105.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-0452
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618363
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0452
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0452
  • report
    https://access.redhat.com/security/cve/CVE-2005-0155
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617476
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0155
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0155
  • report
    https://access.redhat.com/security/cve/CVE-2005-0156
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617477
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0156
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0156