Multiple vulnerabilities have been discovered in Perl, the worst of which can lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.38.2 | >= 5.38.2 |
Perl is Larry Wall’s Practical Extraction and Report Language.
Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/perl-5.38.2"
Multiple vulnerabilities have been found in Perl, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.30.3 | >= 5.30.3 |
Perl is a highly capable, feature-rich programming language.
Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/perl-5.30.3"
Multiple vulnerabilities have been found in Perl, the worst of which could result in the arbitrary execution of code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.28.2 | >= 5.28.2 |
Perl is a highly capable, feature-rich programming language.
Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/perl-5.28.2"
A vulnerability in module File::Path for Perl allows local attackers to set arbitrary mode values on arbitrary files bypassing security restrictions.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.24.1-r2 | >= 5.24.1-r2 |
| perl-core/File-Path | * | < 2.130.0 | >= 2.130.0 |
| virtual/perl-File-Path | * | < 2.130.0 | >= 2.130.0 |
File::Path module provides a convenient way to create directories of arbitrary depth and to delete an entire directory subtree from the filesystem.
A race condition occurs within concurrent environments. This condition was discovered by The cPanel Security Team in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl. This is due to the time-of-check-to-time-of-use (TOCTOU) race condition between the stat() that decides the inode is a directory and the chmod() that tries to make it user-rwx.
A local attacker could exploit this condition to set arbitrary mode values on arbitrary files and hence bypass security restrictions.
There is no known workaround at this time.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/perl-5.24.1-r2"
All File-Path users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=perl-core/File-Path-2.130.0"
All Perl-File-Path users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=virtual/perl-File-Path-2.130.0"
Multiple vulnerabilities have been found in Perl, the worst of which could allow remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.22.3_rc4 | >= 5.22.3_rc4 |
Perl is a highly capable, feature-rich programming language.
Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, or escalate privileges.
There is no known workaround at this time.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/perl-5.22.3_rc4"
Warning: When you are upgrading to a new major Perl version, the commands above may not be sufficient. Please visit the Gentoo wiki referenced below to learn how to upgrade to a new major Perl version.
A vulnerability in Perl allows a remote attacker to cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.20.1-r4 | >= 5.20.1-r4 |
Perl is a highly capable, feature-rich programming language.
S_regmatch() function lacks proper checks before passing arguments to atoi()
A remote attacker could send a specially crafted input, possibly resulting in a Denial of Service condition.
There is no known workaround at this time.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/perl-5.20.1-r4"
Multiple vulnerabilities have been found in the Perl Locale-Maketext module, allowing remote attackers to inject and execute arbitrary Perl code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.17.7 | >= 5.17.7 |
| perl-core/Locale-Maketext | * | < 1.230.0 | >= 1.230.0 |
Locale-Maketext - Perl framework for localization
Two vulnerabilities have been reported in the Locale-Maketext module for Perl, which can be exploited by malicious users to compromise an application using the module.
The vulnerabilities are caused due to the “_compile()” function not properly sanitising input, which can be exploited to inject and execute arbitrary Perl code.
A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.
There is no known workaround at this time.
All users of the Locale-Maketext module should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=perl-core/Locale-Maketext-1.230.0"
Multiple vulnerabilities have been found in Perl and Locale::Maketext Perl module, the worst of which could allow a context-dependent attacker to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.16.3 | >= 5.16.3 |
| perl-core/locale-maketext | * | < 1.230.0 | >= 1.230.0 |
Perl is Larry Wall’s Practical Extraction and Report Language. Locale::Maketext is a Perl module - framework for localization.
Multiple vulnerabilities have been discovered in Perl and Locale::Maketext Perl module. Please review the CVE identifiers referenced below for details.
A context-dependent attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/perl-5.16.3"
All Locale::Maketext users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=perl-core/locale-maketext-1.230.0"
Multiple vulnerabilities were found in Perl, the worst of which could allow a local attacker to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.12.3-r1 | >= 5.12.3-r1 |
Perl is Larry Wall’s Practical Extraction and Report Language.
Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details.
A local attacker could cause a Denial of Service condition or perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application. A context-dependent attacker could cause a Denial of Service condition.
There is no known workaround at this time.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/perl-5.12.3-r1"
A double free vulnerability was discovered in Perl, possibly resulting in the execution of arbitrary code and a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.8.8-r5 | >= 5.8.8-r5 |
| sys-devel/libperl | * | < 5.8.8-r2 | >= 5.8.8-r2 |
Perl is a stable, cross platform programming language.
Tavis Ormandy and Will Drewry of the Google Security Team have reported a double free vulnerability when processing a crafted regular expression containing UTF-8 characters.
A remote attacker could possibly exploit this vulnerability to execute arbitrary code or cause a Denial of Service.
There is no known workaround at this time.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/perl-5.8.8-r5"
All libperl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-devel/libperl-5.8.8-r2"
A buffer overflow in the Regular Expression engine in Perl possibly allows for the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.8.8-r4 | >= 5.8.8-r4 |
Perl is a stable, cross-platform programming language created by Larry Wall.
Tavis Ormandy and Will Drewry (Google Security Team) discovered a heap-based buffer overflow in the Regular Expression engine (regcomp.c) that occurs when switching from byte to Unicode (UTF-8) characters in a regular expression.
A remote attacker could either entice a user to compile a specially crafted regular expression or actively compile it in case the script accepts remote input of regular expressions, possibly leading to the execution of arbitrary code with the privileges of the user running Perl.
There is no known workaround at this time.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/perl-5.8.8-r4"
A fix is available for Perl to mitigate the effects of format string programming errors, that could otherwise be exploited to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.8.7-r3 | >= 5.8.7-r3, >= 5.8.6-r8 (revision) |
Perl is a stable, cross-platform programming language created by Larry Wall. It contains printf functions that allows construction of strings from format specifiers and parameters, like the C printf functions. A well-known class of vulnerabilities, called format string errors, result of the improper use of the printf functions in C. Perl in itself is vulnerable to a limited form of format string errors through its own sprintf function, especially through wrapper functions that call sprintf (for example the syslog function) and by taking advantage of Perl powerful string expansion features rather than using format string specifiers.
Jack Louis discovered a new way to exploit format string errors in Perl that could lead to the execution of arbitrary code. This is perfomed by causing an integer wrap overflow in the efix variable inside the function Perl_sv_vcatpvfn. The proposed fix closes that specific exploitation vector to mitigate the risk of format string programming errors in Perl. This fix does not remove the need to fix such errors in Perl code.
Perl applications making improper use of printf functions (or derived functions) using untrusted data may be vulnerable to the already-known forms of Perl format string exploits and also to the execution of arbitrary code.
Fix all misbehaving Perl applications so that they make proper use of the printf and derived Perl functions.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose dev-lang/perl
Multiple packages suffer from RUNPATH issues that may allow users in the "portage" group to escalate privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/qt-unixODBC | * | < 3.3.4-r1 | >= 3.3.4-r1 |
| dev-lang/perl | * | < 5.8.7-r1 | >= 5.8.7-r1, >= 5.8.6-r6 (revision) |
| dev-util/cmake | * | < 2.2.0-r1 | >= 2.2.0-r1, >= 2.0.6-r1 (revision) |
Perl is a stable, cross-platform programming language created by Larry Wall. Qt-UnixODBC is an ODBC library for Qt. CMake is a cross-platform build environment.
Some packages may introduce insecure paths into the list of directories that are searched for libraries at runtime. Furthermore, packages depending on the MakeMaker Perl module for build configuration may have incorrectly copied the LD_RUN_PATH into the DT_RPATH.
A local attacker, who is a member of the "portage" group, could create a malicious shared object in the Portage temporary build directory that would be loaded at runtime by a dependent executable, potentially resulting in privilege escalation.
Only grant "portage" group rights to trusted users.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose dev-lang/perl
All Qt-UnixODBC users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/qt-unixODBC-3.3.4-r1"
All CMake users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose dev-util/cmake
Vulnerabilities leading to file overwriting and code execution with elevated privileges have been discovered in the perl-suid wrapper.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.8.6-r3 | >= 5.8.6-r3, >= 5.8.5-r4 (revision), >= 5.8.4-r3 (revision), >= 5.8.2-r3 (revision) |
Perl is a stable, cross-platform programming language created by Larry Wall. The perl-suid wrapper allows the use of setuid perl scripts, i.e. user-callable Perl scripts which have elevated privileges. This function is enabled only if you have the perlsuid USE flag set.
perl-suid scripts honor the PERLIO_DEBUG environment variable and write to that file with elevated privileges (CAN-2005-0155). Furthermore, calling a perl-suid script with a very long path while PERLIO_DEBUG is set could trigger a buffer overflow (CAN-2005-0156).
A local attacker could set the PERLIO_DEBUG environment variable and call existing perl-suid scripts, resulting in file overwriting and potentially the execution of arbitrary code with root privileges.
You are not vulnerable if you do not have the perlsuid USE flag set or do not use perl-suid scripts.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose dev-lang/perl
The Perl DBI library and File::Path::rmtree function are vulnerable to symlink attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | <= 5.8.6-r3 | >= 5.8.6-r4, >= 5.8.5-r5 (revision), >= 5.8.4-r4 (revision), >= 5.8.2-r4 (revision) |
| dev-perl/DBI | * | <= 1.38 | >= 1.37-r1 (revision), >= 1.38-r1 |
Perl is a cross platform programming language. The DBI is the standard database interface module for Perl.
Javier Fernandez-Sanguino Pena discovered that the DBI library creates temporary files in an insecure, predictable way (CAN-2005-0077). Paul Szabo found out that "File::Path::rmtree" is vulnerable to various race conditions (CAN-2004-0452, CAN-2005-0448).
A local attacker could create symbolic links in the temporary files directory that point to a valid file somewhere on the filesystem. When the DBI library or File::Path::rmtree is executed, this could be used to overwrite or remove files with the rights of the user calling these functions.
There are no known workarounds at this time.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose dev-lang/perl
All DBI library users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose dev-perl/DBI
Perl is vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/perl | * | < 5.8.5-r2, = 5.8.6 | >= 5.8.5-r2 (revision), >= 5.8.6-r1 |
Perl is a stable, cross-platform programming language created by Larry Wall.
Some Perl modules create temporary files in world-writable directories with predictable names.
A local attacker could create symbolic links in the temporary files directory, pointing to a valid file somewhere on the filesystem. When a Perl script is executed, this would result in the file being overwritten with the rights of the user running the utility, which could be the root user.
There is no known workaround at this time.
All Perl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=perl-5.8.5-r2"