Ubuntu 18.04 LTS USN-3834-1 Moderate: Perl Denial Of Service

ubuntu

December 3, 2018

Several security issues were fixed in Perl.

Summary

Several security issues were fixed in Perl.

Software Description:

- perl: Practical Extraction and Report Language

Details:

Jayakrishna Menon discovered that Perl incorrectly handled Perl_my_setenv.

An attacker could use this issue to cause Perl to crash, resulting in a

denial of service, or possibly execute arbitrary code. (CVE-2018-18311)

Eiichi Tsukata discovered that Perl incorrectly handled certain regular

expressions. An attacker could use this issue to cause Perl to crash,

resulting in a denial of service, or possibly execute arbitrary code. This

issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 18.10.

(CVE-2018-18312)

Eiichi Tsukata discovered that Perl incorrectly handled certain regular

expressions. An attacker could use this issue to cause Perl to crash,

resulting in a denial of service. (CVE-2018-18313)

Jakub Wilk discovered that Perl incorrectly handled certain regular

expressions. An attacker could use this issue to cause ...

Read the Full Advisory

Topics Covered

security advisory denial of service perl update instructions ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  perl                            5.26.2-7ubuntu0.1

Ubuntu 18.04 LTS:
  perl                            5.26.1-6ubuntu0.3

Ubuntu 16.04 LTS:
  perl                            5.22.1-9ubuntu0.6

Ubuntu 14.04 LTS:
  perl                            5.18.2-2ubuntu1.7

In general, a standard system update will make all the necessary changes.