perl-File-Fetch vulnerabilities (Red Hat)

15 vulnerabilities.

• perl-File-Fetch Red Hat Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra… CVE-2026-13221 Fix available 9.1 CriticalJuly 13, 2026
• perl-File-Fetch Red Hat IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob CVE-2026-48962 Public exploitFix available 7.3 HighMay 27, 2026
• perl-File-Fetch Red Hat Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header CVE-2026-9538 Fix available 7.5 HighMay 26, 2026
• perl-File-Fetch Red Hat Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory CVE-2026-42496 Fix available 9.1 CriticalMay 26, 2026
• perl-File-Fetch Red Hat Perl threads have a working directory race condition where file operations may target unintended paths CVE-2025-40909 Fix available 5.9 MediumMay 30, 2025
• perl-File-Fetch Red Hat Perl: write past buffer end via illegal user-defined unicode property CVE-2023-47038 Fix available 7.0 HighNovember 25, 2023
• perl-File-Fetch Red Hat The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a... CVE-2013-1667 Fix available 7.5 HighMarch 9, 2013
• perl-File-Fetch Red Hat The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7... CVE-2012-6329 Public exploitFix available EPSS 63.7% 7.5 HighJanuary 4, 2013
• perl-File-Fetch Red Hat Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5,... CVE-2012-5195 Fix available 7.5 HighDecember 11, 2012
• perl-File-Fetch Red Hat CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P... CVE-2012-5526 Fix available 5.0 MediumNovember 21, 2012
• perl-File-Fetch Red Hat Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent... CVE-2011-3597 Public exploitFix available EPSS 13.1% 7.5 HighJanuary 13, 2012
• perl-File-Fetch Red Hat Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44... CVE-2011-2939 Fix available 5.1 MediumJanuary 13, 2012
• perl-File-Fetch Red Hat The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x... CVE-2011-1487 Public exploitFix available EPSS 10.6% 5.0 MediumApril 11, 2011
• perl-File-Fetch Red Hat CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm... CVE-2010-4410 Fix available 4.3 MediumDecember 6, 2010
• perl-File-Fetch Red Hat The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and... CVE-2010-2761 Fix available 4.3 MediumDecember 6, 2010