You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa perl

Sigurnosni nedostaci programskog paketa perl

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

Fedora Update Notification
2020-06-16 01:18:20.406454

Name : perl
Product : Fedora 31
Version : 5.30.3
Release : 452.fc31
Summary : Practical Extraction and Report Language
Description :
Perl is a high-level programming language with roots in C, sed, awk and shell
scripting. Perl is good at handling processes and files, and is especially
good at handling text. Perl’s hallmarks are practicality and efficiency.
While it is used to do a lot of different things, Perl’s most common
applications are system administration utilities and web programming.

This is a metapackage with all the Perl bits and core modules that can be
found in the upstream tarball from

If you need only a specific feature, you can install a specific package
instead. E.g. to handle Perl scripts with /usr/bin/perl interpreter,
install perl-interpreter package. See perl-interpreter description for more
details on the Perl decomposition into packages.

Update Information:

Fixed CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723

* Tue Jun 2 2020 Jitka Plesnikova <> – 4:5.30.2-452
– 5.30.3 bump (see <>
for release notes)
– Security release fixes CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723
* Fri Mar 27 2020 Petr Pisar <> – 4:5.30.2-451
– Make perl-macros package noarch
– Work around a glibc bug in caching LC_MESSAGES (GH#17081)
– Fix POSIX:setlocale() documentation
– Prevent from an integer overflow in POSIX::SigSet()
– Fix thread-safety of IO::Handle (GH#14816)
– Close :unix PerlIO layers properly (bug #987118)
– Fix sorting tied arrays (GH#17496)
– Fix a spurious warning about a multidimensional syntax (GH#16535)
– Normalize “#!/perl” shebangs in the tests
– Fix a warning about an uninitialized value in B::Deparse (GH#17537)
* Mon Mar 16 2020 Jitka Plesnikova <> – 4:5.30.2-450
– 5.30.2 bump (see <>
for release notes)
* Fri Nov 29 2019 Petr Pisar <> – 4:5.30.1-449
– Fix a memory leak when compiling a regular expression with a non-word class
* Tue Nov 12 2019 Petr Pisar <> – 4:5.30.1-448
– Fix overloading for binary and octal floats (RT#125557)
– Fix handling undefined array members in Dumpvalue (RT#134441)
– Fix taint mode documentation regarding @INC
– Fix handling a layer argument in Tie::StdHandle::BINMODE() (RT#132475)
– Fix an unintended upgrade to UTF-8 in the middle of a transliteration
– Fix a race in File::stat() tests (GH#17234)
– Fix a buffer overread when parsing a number (GH#17279)
– Fix GCC 10 version detection (GH#17295)
* Mon Nov 11 2019 Jitka Plesnikova <> – 4:5.30.1-447
– 5.30.1 bump (see <>
for release notes)

[ 1 ] Bug #1837975 – CVE-2020-10543 perl: heap-based buffer overflow in regular expression compiler leads to DoS
[ 2 ] Bug #1837988 – CVE-2020-10878 perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS
[ 3 ] Bug #1838000 – CVE-2020-12723 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2020-fd73c08076’ at the command
line. For more information, refer to the dnf documentation available at

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list —
To unsubscribe send an email to
Fedora Code of Conduct:
List Guidelines:
List Archives:

AutorFilip Zagar
Cert idNCERT-REF-2020-06-0001-ADV
More in Preporuke
Sigurnosni nedostatak programske biblioteke libjcat

Otkriven je sigurnosni nedostatak u programskoj biblioteci libjcat za operacijski sustav Fedora. Otkriveni nedostatak potencijalnim napadačima omogućuje zaobilaženje sigurnosnih ograničenja....