Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Ubuntu 22.04 LTS USN-6517-1 Critical: perl crashes and DoS threat

ubuntu
Calendar Grey November 27, 2023
Dist Ubuntu Esm H88
Enhancements made to Python in Fedora rectify vulnerabilities that strengthen protections against overflow and memory exhaustion threats.
Several security issues were fixed in Perl.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.10 - Ubuntu 23.04 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in Perl. Software Description: - perl: Practical Extraction and Report Language Details: It was discovered that Perl incorrectly handled printing certain warning messages. An attacker could possibly use this issue to cause Perl to consume resources, leading to a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-48522) Nathan Mills discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-47038)

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 23.10: perl 5.36.0-9ubuntu1.1 Ubuntu 23.04: perl 5.36.0-7ubuntu0.23.04.2 Ubuntu 22.04 LTS: perl 5.34.0-3ubuntu1.3 Ubuntu 20.04 LTS: perl 5.30.0-9ubuntu0.5 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6517-1

CVE-2022-48522, CVE-2023-47038

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6517-1

Package Information

https://launchpad.net/ubuntu/+source/perl/5.36.0-9ubuntu1.1 https://launchpad.net/ubuntu/+source/perl/5.36.0-7ubuntu0.23.04.2 https://launchpad.net/ubuntu/+source/perl/5.34.0-3ubuntu1.3 https://launchpad.net/ubuntu/+source/perl/5.30.0-9ubuntu0.5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here