You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa perl

Sigurnosni nedostatak programskog paketa perl

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LUB

==========================================================================
Ubuntu Security Notice USN-3478-2
November 13, 2017

perl vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 12.04 ESM

Summary:

Perl could be made to crash if it received specially crafted
input.

Software Description:
– perl: Practical Extraction and Report Language

Details:

USN-3478-1 fixed two vulnerabilities in Perl. This update
provides the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 Jakub Wilk discovered that Perl incorrectly handled certain regular
 expressions. An attacker could use this issue to cause Perl to crash,
 resulting in a denial of service, or possibly execute arbitrary code.
 (CVE-2017-12883)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  perl                            5.14.2-6ubuntu2.6

In general, a standard system update will make all the necessary
changes.

References:
  https://www.ubuntu.com/usn/usn-3478-2
  https://www.ubuntu.com/usn/usn-3478-1
  CVE-2017-12883
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=241S
—–END PGP SIGNATURE—–

AutorDanijel Kozinovic
Cert idNCERT-REF-2017-11-0045-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa httpd

Otkriveni su sigurnosni nedostaci u programskom paketu httpd za operacijski sustav RHEL 6.7. Otkriveni nedostaci potencijalnim napadačima omogućuju otkrivanje osjetljivih...

Close