Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Containers
  • Support Cases
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Containers
  • Support Cases
  • Products & Services

    Products

    Support

    • Production Support
    • Development Support
    • Product Life Cycles

    Services

    • Consulting
    • Technical Account Management
    • Training & Certifications

    Documentation

    • Red Hat Enterprise Linux
    • Red Hat JBoss Enterprise Application Platform
    • Red Hat OpenStack Platform
    • Red Hat OpenShift Container Platform
    All Documentation

    Ecosystem Catalog

    • Red Hat Partner Ecosystem
    • Partner Resources
  • Tools

    Tools

    • Troubleshoot a product issue
    • Packages
    • Errata

    Customer Portal Labs

    • Configuration
    • Deployment
    • Security
    • Troubleshoot
    All labs

    Red Hat Insights

    Increase visibility into IT operations to detect and resolve technical issues before they impact your business.

    Learn More
    Go to Insights
  • Security

    Red Hat Product Security Center

    Engage with our Red Hat Product Security team, access security updates, and ensure your environments are not exposed to any known security vulnerabilities.

    Product Security Center

    Security Updates

    • Security Advisories
    • Red Hat CVE Database
    • Security Labs

    Keep your systems secure with Red Hat's specialized responses to security vulnerabilities.

    View Responses

    Resources

    • Security Blog
    • Security Measurement
    • Severity Ratings
    • Backporting Policies
    • Product Signing (GPG) Keys
  • Community

    Customer Portal Community

    • Discussions
    • Private Groups
    Community Activity

    Customer Events

    • Red Hat Convergence
    • Red Hat Summit

    Stories

    • Red Hat Subscription Value
    • You Asked. We Acted.
    • Open Source Communities
Or troubleshoot an issue.

Select Your Language

  • English
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Virtualization
  • Red Hat Identity Management
  • Red Hat Directory Server
  • Red Hat Certificate System
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Update Infrastructure
  • Red Hat Insights
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat CloudForms
  • Red Hat OpenStack Platform
  • Red Hat OpenShift Container Platform
  • Red Hat OpenShift Data Science
  • Red Hat OpenShift Online
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat Single Sign On
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Thorntail
  • Red Hat build of Eclipse Vert.x
  • Red Hat build of OpenJDK
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Integration
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
  • Red Hat JBoss Data Virtualization
  • Red Hat Process Automation
  • Red Hat Process Automation Manager
  • Red Hat Decision Manager
All Products
Red Hat Product Errata RHSA-2011:1797 - Security Advisory
Issued:
2011-12-08
Updated:
2011-12-08

RHSA-2011:1797 - Security Advisory

  • Overview
  • Updated Packages

Synopsis

Moderate: perl security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated perl packages that fix multiple security issues are now available
for Red Hat Enterprise Linux 4 and 5.

The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

Description

Perl is a high-level programming language commonly used for system
administration utilities and web programming.

It was found that the "new" constructor of the Digest module used its
argument as part of the string expression passed to the eval() function. An
attacker could possibly use this flaw to execute arbitrary Perl code with
the privileges of a Perl program that uses untrusted input as an argument
to the constructor. (CVE-2011-3597)

It was found that the Perl CGI module used a hard-coded value for the MIME
boundary string in multipart/x-mixed-replace content. A remote attacker
could possibly use this flaw to conduct an HTTP response splitting attack
via a specially-crafted HTTP request. (CVE-2010-2761)

A CRLF injection flaw was found in the way the Perl CGI module processed a
sequence of non-whitespace preceded by newline characters in the header. A
remote attacker could use this flaw to conduct an HTTP response splitting
attack via a specially-crafted sequence of characters provided to the CGI
module. (CVE-2010-4410)

All Perl users should upgrade to these updated packages, which contain
backported patches to correct these issues. All running Perl programs must
be restarted for this update to take effect.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

  • BZ - 658976 - perl-CGI, perl-CGI-Simple: CVE-2010-2761 - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting
  • BZ - 743010 - CVE-2011-3597 Perl Digest improper control of generation of code

CVEs

  • CVE-2010-2761
  • CVE-2010-4410
  • CVE-2011-3597

References

  • https://access.redhat.com/security/updates/classification/#moderate
Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux Server 5

SRPM
perl-5.8.8-32.el5_7.6.src.rpm SHA-256: feb4940ce9c35f7eacceb3a480a253761878cfc455d3256eff0a235e5c5b18fc
x86_64
perl-5.8.8-32.el5_7.6.x86_64.rpm SHA-256: 1969d1361edb19d4afbc896d95ebb7b27d5c0e5ce8b49c85bb6f66d67d3e5905
perl-suidperl-5.8.8-32.el5_7.6.x86_64.rpm SHA-256: 8656ca412e874249d11c8370fc388f172217dcb9426f8cd988a8747d65c3edc0
ia64
perl-5.8.8-32.el5_7.6.ia64.rpm SHA-256: 320c84db1a6f3f5d41f6082363ad2422c3ade0e3ee64353a9c46075a1d6c3ec1
perl-suidperl-5.8.8-32.el5_7.6.ia64.rpm SHA-256: 13cfcec15ca7e9771b5409f5597e2b2f9529a2059dd0c58d016e0517f079af9d
i386
perl-5.8.8-32.el5_7.6.i386.rpm SHA-256: ff36e7084fefb8747de87bab6457677de8590ebbc0dca0b3dc0cbeb3b1988983
perl-suidperl-5.8.8-32.el5_7.6.i386.rpm SHA-256: 9ae7a7f8bcfe666d546ce96a0ca930f54a599f79b1dc7ada3603777a3dc5eba3

Red Hat Enterprise Linux Server 4

SRPM
perl-5.8.5-57.el4.src.rpm SHA-256: 24f389ffb773821773e2acdadb01c7e0a8128a25b20fe9a824b7f673f90f5b2f
x86_64
perl-5.8.5-57.el4.x86_64.rpm SHA-256: 266cb8f40f9c245e43e72201ee72b3c585712fa3e44be0bc947069dc758e4ccb
perl-5.8.5-57.el4.x86_64.rpm SHA-256: 266cb8f40f9c245e43e72201ee72b3c585712fa3e44be0bc947069dc758e4ccb
perl-suidperl-5.8.5-57.el4.x86_64.rpm SHA-256: 3be067ae98bf0ccbaae0b57cffc104808d524e868b4b6df07ff38a5d26c03b16
perl-suidperl-5.8.5-57.el4.x86_64.rpm SHA-256: 3be067ae98bf0ccbaae0b57cffc104808d524e868b4b6df07ff38a5d26c03b16
ia64
perl-5.8.5-57.el4.ia64.rpm SHA-256: 4d3b8fe1e067b294e87264af4d7d71243dd2f54f645786d2fbf0d097627254ea
perl-5.8.5-57.el4.ia64.rpm SHA-256: 4d3b8fe1e067b294e87264af4d7d71243dd2f54f645786d2fbf0d097627254ea
perl-suidperl-5.8.5-57.el4.ia64.rpm SHA-256: 12353b391ad77e69ec84b281b6fcb80bcc7cc154a590f1ce60e2933b55de61b3
perl-suidperl-5.8.5-57.el4.ia64.rpm SHA-256: 12353b391ad77e69ec84b281b6fcb80bcc7cc154a590f1ce60e2933b55de61b3
i386
perl-5.8.5-57.el4.i386.rpm SHA-256: a20810492d72bc67694d28b8daf76d44e6c087ca897543c2a959f3365adec3b0
perl-5.8.5-57.el4.i386.rpm SHA-256: a20810492d72bc67694d28b8daf76d44e6c087ca897543c2a959f3365adec3b0
perl-suidperl-5.8.5-57.el4.i386.rpm SHA-256: 44c93e25e26b8c8e24c6d7250aa44ab8322e8bad2fbbbd773858a4f21629bfcd
perl-suidperl-5.8.5-57.el4.i386.rpm SHA-256: 44c93e25e26b8c8e24c6d7250aa44ab8322e8bad2fbbbd773858a4f21629bfcd

Red Hat Enterprise Linux Workstation 5

SRPM
perl-5.8.8-32.el5_7.6.src.rpm SHA-256: feb4940ce9c35f7eacceb3a480a253761878cfc455d3256eff0a235e5c5b18fc
x86_64
perl-5.8.8-32.el5_7.6.i386.rpm SHA-256: ff36e7084fefb8747de87bab6457677de8590ebbc0dca0b3dc0cbeb3b1988983
perl-5.8.8-32.el5_7.6.x86_64.rpm SHA-256: 1969d1361edb19d4afbc896d95ebb7b27d5c0e5ce8b49c85bb6f66d67d3e5905
perl-suidperl-5.8.8-32.el5_7.6.x86_64.rpm SHA-256: 8656ca412e874249d11c8370fc388f172217dcb9426f8cd988a8747d65c3edc0
i386
perl-5.8.8-32.el5_7.6.i386.rpm SHA-256: ff36e7084fefb8747de87bab6457677de8590ebbc0dca0b3dc0cbeb3b1988983
perl-suidperl-5.8.8-32.el5_7.6.i386.rpm SHA-256: 9ae7a7f8bcfe666d546ce96a0ca930f54a599f79b1dc7ada3603777a3dc5eba3

Red Hat Enterprise Linux Workstation 4

SRPM
perl-5.8.5-57.el4.src.rpm SHA-256: 24f389ffb773821773e2acdadb01c7e0a8128a25b20fe9a824b7f673f90f5b2f
x86_64
perl-5.8.5-57.el4.x86_64.rpm SHA-256: 266cb8f40f9c245e43e72201ee72b3c585712fa3e44be0bc947069dc758e4ccb
perl-suidperl-5.8.5-57.el4.x86_64.rpm SHA-256: 3be067ae98bf0ccbaae0b57cffc104808d524e868b4b6df07ff38a5d26c03b16
ia64
perl-5.8.5-57.el4.ia64.rpm SHA-256: 4d3b8fe1e067b294e87264af4d7d71243dd2f54f645786d2fbf0d097627254ea
perl-suidperl-5.8.5-57.el4.ia64.rpm SHA-256: 12353b391ad77e69ec84b281b6fcb80bcc7cc154a590f1ce60e2933b55de61b3
i386
perl-5.8.5-57.el4.i386.rpm SHA-256: a20810492d72bc67694d28b8daf76d44e6c087ca897543c2a959f3365adec3b0
perl-suidperl-5.8.5-57.el4.i386.rpm SHA-256: 44c93e25e26b8c8e24c6d7250aa44ab8322e8bad2fbbbd773858a4f21629bfcd

Red Hat Enterprise Linux Desktop 5

SRPM
perl-5.8.8-32.el5_7.6.src.rpm SHA-256: feb4940ce9c35f7eacceb3a480a253761878cfc455d3256eff0a235e5c5b18fc
x86_64
perl-5.8.8-32.el5_7.6.i386.rpm SHA-256: ff36e7084fefb8747de87bab6457677de8590ebbc0dca0b3dc0cbeb3b1988983
perl-5.8.8-32.el5_7.6.x86_64.rpm SHA-256: 1969d1361edb19d4afbc896d95ebb7b27d5c0e5ce8b49c85bb6f66d67d3e5905
perl-suidperl-5.8.8-32.el5_7.6.x86_64.rpm SHA-256: 8656ca412e874249d11c8370fc388f172217dcb9426f8cd988a8747d65c3edc0
i386
perl-5.8.8-32.el5_7.6.i386.rpm SHA-256: ff36e7084fefb8747de87bab6457677de8590ebbc0dca0b3dc0cbeb3b1988983
perl-suidperl-5.8.8-32.el5_7.6.i386.rpm SHA-256: 9ae7a7f8bcfe666d546ce96a0ca930f54a599f79b1dc7ada3603777a3dc5eba3

Red Hat Enterprise Linux Desktop 4

SRPM
perl-5.8.5-57.el4.src.rpm SHA-256: 24f389ffb773821773e2acdadb01c7e0a8128a25b20fe9a824b7f673f90f5b2f
x86_64
perl-5.8.5-57.el4.x86_64.rpm SHA-256: 266cb8f40f9c245e43e72201ee72b3c585712fa3e44be0bc947069dc758e4ccb
perl-suidperl-5.8.5-57.el4.x86_64.rpm SHA-256: 3be067ae98bf0ccbaae0b57cffc104808d524e868b4b6df07ff38a5d26c03b16
i386
perl-5.8.5-57.el4.i386.rpm SHA-256: a20810492d72bc67694d28b8daf76d44e6c087ca897543c2a959f3365adec3b0
perl-suidperl-5.8.5-57.el4.i386.rpm SHA-256: 44c93e25e26b8c8e24c6d7250aa44ab8322e8bad2fbbbd773858a4f21629bfcd

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
perl-5.8.8-32.el5_7.6.src.rpm SHA-256: feb4940ce9c35f7eacceb3a480a253761878cfc455d3256eff0a235e5c5b18fc
s390x
perl-5.8.8-32.el5_7.6.s390x.rpm SHA-256: a0ad6c26d34962df51c1089b7ffa3c0416fc6e0bb5c53eb8ccc1b771606b3e7f
perl-suidperl-5.8.8-32.el5_7.6.s390x.rpm SHA-256: 9e1284b0654fede08510fb1fa4b02ae101e51291ac675a62e336b2f3f41e4da4

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
perl-5.8.5-57.el4.src.rpm SHA-256: 24f389ffb773821773e2acdadb01c7e0a8128a25b20fe9a824b7f673f90f5b2f
s390x
perl-5.8.5-57.el4.s390x.rpm SHA-256: 9401cd743cc05fd6602622a6e956c017b87a7bd056a5b6a5e6bc14e74b2d349b
perl-suidperl-5.8.5-57.el4.s390x.rpm SHA-256: acfd4381c3468b359a0ff253176cbe0f2949abc738ff1233404bbc545ef144b1
s390
perl-5.8.5-57.el4.s390.rpm SHA-256: 85cab0b0196b6211bd572667a9a69db4575fe522d4fb67b1d2b5a02699984b9a
perl-suidperl-5.8.5-57.el4.s390.rpm SHA-256: fde3b27c0ae203cd50664b00c4469ddc2a7032c8118285793611a26d5ce13c48

Red Hat Enterprise Linux for Power, big endian 5

SRPM
perl-5.8.8-32.el5_7.6.src.rpm SHA-256: feb4940ce9c35f7eacceb3a480a253761878cfc455d3256eff0a235e5c5b18fc
ppc
perl-5.8.8-32.el5_7.6.ppc.rpm SHA-256: c0bd9c3a7fa87683d9839f9cf2ac9da4b4737f6d2e6aa88d36ed3efa8c0b5624
perl-suidperl-5.8.8-32.el5_7.6.ppc.rpm SHA-256: 3a2114473b59e91c2a393790384ae7ed489cbc5f2fee6f1837429e0e61a1672b

Red Hat Enterprise Linux for Power, big endian 4

SRPM
perl-5.8.5-57.el4.src.rpm SHA-256: 24f389ffb773821773e2acdadb01c7e0a8128a25b20fe9a824b7f673f90f5b2f
ppc
perl-5.8.5-57.el4.ppc.rpm SHA-256: 352a189db056d2b39e5591a7515fd12ad5ad13156197aca3ededb365427e9194
perl-suidperl-5.8.5-57.el4.ppc.rpm SHA-256: 1c0d4140845bba60dc7e45f22bb84a69c317535b27a85d1c82cb14b3e9738b90

Red Hat Enterprise Linux Server from RHUI 5

SRPM
perl-5.8.8-32.el5_7.6.src.rpm SHA-256: feb4940ce9c35f7eacceb3a480a253761878cfc455d3256eff0a235e5c5b18fc
x86_64
perl-5.8.8-32.el5_7.6.x86_64.rpm SHA-256: 1969d1361edb19d4afbc896d95ebb7b27d5c0e5ce8b49c85bb6f66d67d3e5905
perl-suidperl-5.8.8-32.el5_7.6.x86_64.rpm SHA-256: 8656ca412e874249d11c8370fc388f172217dcb9426f8cd988a8747d65c3edc0
i386
perl-5.8.8-32.el5_7.6.i386.rpm SHA-256: ff36e7084fefb8747de87bab6457677de8590ebbc0dca0b3dc0cbeb3b1988983
perl-suidperl-5.8.8-32.el5_7.6.i386.rpm SHA-256: 9ae7a7f8bcfe666d546ce96a0ca930f54a599f79b1dc7ada3603777a3dc5eba3

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

About

  • Red Hat Subscription Value
  • About Red Hat
  • Red Hat Jobs
Copyright © 2023 Red Hat, Inc.
  • Privacy Statement
  • Customer Portal Terms of Use
  • All Policies and Guidelines
Red Hat Summit
Twitter