SUSE-SU-2018:1972-1
Vulnerability Summary
Timeline
Description
Security update for perl This update for perl fixes the following issues: These security issue were fixed: - CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216). - CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233). - CVE-2018-6797: Fixed sharp-s regexp overflow (bsc#1082234). - CVE-2018-12015: The Archive::Tar module allowed remote attackers to bypass a directory-traversal protection mechanism and overwrite arbitrary files (bsc#1096718) This non-security issue was fixed: - fix debugger crash in tab completion with Term::ReadLine::Gnu [bsc#1068565]
Affected Systems
- suse•perl&distro=SUSE Enterprise Storage 4
< 5.18.2-12.14.1
- suse•perl&distro=SUSE Linux Enterprise Desktop 12 SP3
< 5.18.2-12.14.1
- suse•perl&distro=SUSE Linux Enterprise Server 12 SP1-LTSS
< 5.18.2-12.14.1
- suse•perl&distro=SUSE Linux Enterprise Server 12 SP2-LTSS
< 5.18.2-12.14.1
- suse•perl&distro=SUSE Linux Enterprise Server 12 SP3
< 5.18.2-12.14.1
- suse•perl&distro=SUSE Linux Enterprise Server 12-LTSS
< 5.18.2-12.14.1
- suse•perl&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1
< 5.18.2-12.14.1
- suse•perl&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2
< 5.18.2-12.14.1
- suse•perl&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3
< 5.18.2-12.14.1
- suse•perl&distro=SUSE OpenStack Cloud 7
< 5.18.2-12.14.1
References (10)
- https://www.suse.com/support/update/announcement/2018/suse-su-20181972-1/
- https://bugzilla.suse.com/1068565
- https://bugzilla.suse.com/1082216
- https://bugzilla.suse.com/1082233
- https://bugzilla.suse.com/1082234
- https://bugzilla.suse.com/1096718
- https://www.suse.com/security/cve/CVE-2018-12015
- https://www.suse.com/security/cve/CVE-2018-6797
- https://www.suse.com/security/cve/CVE-2018-6798
- https://www.suse.com/security/cve/CVE-2018-6913