Synopsis

perl security update

Type/Severity

Security Advisory: Moderate

Topic

Updated Perl packages that fix security issues and bugs are now available
for Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

Perl is a high-level programming language commonly used for system
administration utilities and Web programming.

An integer overflow bug was found in Perl's format string processor. It is
possible for an attacker to cause perl to crash or execute arbitrary code
if the attacker is able to process a malicious format string. This issue
is only exploitable through a script which passes arbitrary untrusted
strings to the format string processor. The Common Vulnerabilities and
Exposures project assigned the name CVE-2005-3962 to this issue.

Users of Perl are advised to upgrade to these updated packages, which
contain backported patches to correct these issues as well as fixes for
several bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 170088 - bits/resource.ph has syntax errors
• BZ - 171111 - (libperl) could not run system-config-printer
• BZ - 172327 - getgrnam() crashes with "Out of memory" if /etc/group contains long lines
• BZ - 174683 - CVE-2005-3962 Perl integer overflow issue
• BZ - 175104 - MakeMaker::MM_Unix doesn't honor LD_RUN_PATH requirements
• BZ - 175129 - missing C standard headers

CVEs

• CVE-2005-3962

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
perl-5.8.5-24.RHEL4.src.rpm	SHA-256: 5914c1c87651a9827573504bc1305aa8075b38aa9fa7e5276b4f79df8a62e521
x86_64
perl-5.8.5-24.RHEL4.x86_64.rpm	SHA-256: e8dbc5cecd8c2083e36a4fa2f3ff6d1e31901412dae3629dde550462b8cba9c7
perl-5.8.5-24.RHEL4.x86_64.rpm	SHA-256: e8dbc5cecd8c2083e36a4fa2f3ff6d1e31901412dae3629dde550462b8cba9c7
perl-suidperl-5.8.5-24.RHEL4.x86_64.rpm	SHA-256: 221082414162014bb1a843625e94b8f4513f0e14e1d8a6cc9e570cdc2956d8ea
perl-suidperl-5.8.5-24.RHEL4.x86_64.rpm	SHA-256: 221082414162014bb1a843625e94b8f4513f0e14e1d8a6cc9e570cdc2956d8ea
ia64
perl-5.8.5-24.RHEL4.ia64.rpm	SHA-256: e35862b3ade52022b0ad423c62d71561cabd5444deef403aba54c803858465e1
perl-5.8.5-24.RHEL4.ia64.rpm	SHA-256: e35862b3ade52022b0ad423c62d71561cabd5444deef403aba54c803858465e1
perl-suidperl-5.8.5-24.RHEL4.ia64.rpm	SHA-256: d8f00efbaa1ea1924e646da19338ac9a45c10a291acf12f1a1387e4ff806ddd0
perl-suidperl-5.8.5-24.RHEL4.ia64.rpm	SHA-256: d8f00efbaa1ea1924e646da19338ac9a45c10a291acf12f1a1387e4ff806ddd0
i386
perl-5.8.5-24.RHEL4.i386.rpm	SHA-256: 4765146ead20763882bab74b244f7149296fb505640694dbdfe34dad6f41bc19
perl-5.8.5-24.RHEL4.i386.rpm	SHA-256: 4765146ead20763882bab74b244f7149296fb505640694dbdfe34dad6f41bc19
perl-suidperl-5.8.5-24.RHEL4.i386.rpm	SHA-256: 787d963fc4d1d7b6c6b8f355c7988995d0b0b2e7be8e2437e7698284b22d6a64
perl-suidperl-5.8.5-24.RHEL4.i386.rpm	SHA-256: 787d963fc4d1d7b6c6b8f355c7988995d0b0b2e7be8e2437e7698284b22d6a64

Red Hat Enterprise Linux Workstation 4

SRPM
perl-5.8.5-24.RHEL4.src.rpm	SHA-256: 5914c1c87651a9827573504bc1305aa8075b38aa9fa7e5276b4f79df8a62e521
x86_64
perl-5.8.5-24.RHEL4.x86_64.rpm	SHA-256: e8dbc5cecd8c2083e36a4fa2f3ff6d1e31901412dae3629dde550462b8cba9c7
perl-suidperl-5.8.5-24.RHEL4.x86_64.rpm	SHA-256: 221082414162014bb1a843625e94b8f4513f0e14e1d8a6cc9e570cdc2956d8ea
ia64
perl-5.8.5-24.RHEL4.ia64.rpm	SHA-256: e35862b3ade52022b0ad423c62d71561cabd5444deef403aba54c803858465e1
perl-suidperl-5.8.5-24.RHEL4.ia64.rpm	SHA-256: d8f00efbaa1ea1924e646da19338ac9a45c10a291acf12f1a1387e4ff806ddd0
i386
perl-5.8.5-24.RHEL4.i386.rpm	SHA-256: 4765146ead20763882bab74b244f7149296fb505640694dbdfe34dad6f41bc19
perl-suidperl-5.8.5-24.RHEL4.i386.rpm	SHA-256: 787d963fc4d1d7b6c6b8f355c7988995d0b0b2e7be8e2437e7698284b22d6a64

Red Hat Enterprise Linux Desktop 4

SRPM
perl-5.8.5-24.RHEL4.src.rpm	SHA-256: 5914c1c87651a9827573504bc1305aa8075b38aa9fa7e5276b4f79df8a62e521
x86_64
perl-5.8.5-24.RHEL4.x86_64.rpm	SHA-256: e8dbc5cecd8c2083e36a4fa2f3ff6d1e31901412dae3629dde550462b8cba9c7
perl-suidperl-5.8.5-24.RHEL4.x86_64.rpm	SHA-256: 221082414162014bb1a843625e94b8f4513f0e14e1d8a6cc9e570cdc2956d8ea
i386
perl-5.8.5-24.RHEL4.i386.rpm	SHA-256: 4765146ead20763882bab74b244f7149296fb505640694dbdfe34dad6f41bc19
perl-suidperl-5.8.5-24.RHEL4.i386.rpm	SHA-256: 787d963fc4d1d7b6c6b8f355c7988995d0b0b2e7be8e2437e7698284b22d6a64

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
perl-5.8.5-24.RHEL4.src.rpm	SHA-256: 5914c1c87651a9827573504bc1305aa8075b38aa9fa7e5276b4f79df8a62e521
s390x
perl-5.8.5-24.RHEL4.s390x.rpm	SHA-256: e16ef50229975a961dea2028a4fc6f85cf57ae2fea6f160c3d0625949fcdccb6
perl-suidperl-5.8.5-24.RHEL4.s390x.rpm	SHA-256: 488c384cd80f83e8246f9bf6a7520dd094155a5d21bc1caa07f55370c17a15df
s390
perl-5.8.5-24.RHEL4.s390.rpm	SHA-256: 3554fc72a3d5286d9627f925ed76463ac59805086947b5daefa5816da6719edf
perl-suidperl-5.8.5-24.RHEL4.s390.rpm	SHA-256: 52ec99f56df7c8660be020c1ceb17ee224c0ca5c1c598d2eab14dd6ed8822a72

Red Hat Enterprise Linux for Power, big endian 4

SRPM
perl-5.8.5-24.RHEL4.src.rpm	SHA-256: 5914c1c87651a9827573504bc1305aa8075b38aa9fa7e5276b4f79df8a62e521
ppc
perl-5.8.5-24.RHEL4.ppc.rpm	SHA-256: 4428688dbcd8e122450b8a84cf2ded979c6b6fcb004427e892d126d7e39e9e0b
perl-suidperl-5.8.5-24.RHEL4.ppc.rpm	SHA-256: 23fec8037dba6734975d29cfc39b77d2ec3295ae8b2ef0ed95529e004d84fdf0