perl-devel vulnerabilities (TuxCare)
17 vulnerabilities.
perl-develTuxCareUpdate of perlNo scoreperl-develTuxCareUpdate of perlNo scoreperl-develTuxCareUpdate of perlNo scoreperl-develTuxCarePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra…9.1 Criticalperl-develTuxCarePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack8.4 Highperl-develTuxCarePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds9.8 Criticalperl-develTuxCarePerl threads have a working directory race condition where file operations may target unintended paths5.9 Mediumperl-develTuxCareIn Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because...9.8 Criticalperl-develTuxCarePerl: write past buffer end via illegal user-defined unicode property7.0 Highperl-develTuxCareHTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an...8.1 Highperl-develTuxCareCPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.8.1 Highperl-develTuxCareCPAN 2.28 allows Signature Verification Bypass.7.8 Highperl-develTuxCareCVE-2020-12723 does not affect BellSoft software7.5 Highperl-develTuxCareCVE-2020-10878 does not affect BellSoft software8.6 Highperl-develTuxCareCVE-2020-10543 does not affect BellSoft software8.2 Highperl-develTuxCarePerl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular...9.8 Criticalperl-develTuxCareIn Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory...7.5 High