Synopsis

Important: perl security update

Type/Severity

Security Advisory: Important

Topic

An update for perl is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support, Red Hat Enterprise Linux 7.3 Telco Extended Update Support, and Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

• perl: Integer overflow leading to buffer overflow in Perl_my_setenv() (CVE-2018-18311)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.3 ppc64le
• Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.3 x86_64

Fixes

• BZ - 1646730 - CVE-2018-18311 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()

CVEs

• CVE-2018-18311

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - AUS 7.3

SRPM
perl-5.16.3-291.el7_3.1.src.rpm	SHA-256: a861322eb6ec123312089b2160915469393d8167962587672c9116e2b464b750
x86_64
perl-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: b712d3a0f1a7b1f60d971699d20c185be7329c968bd653f1e994852111442183
perl-CPAN-1.9800-291.el7_3.1.noarch.rpm	SHA-256: 5e8562952baba27d4ef4838aea46d0f1a1bc5e414a49bddb40c4f135cf0b8e56
perl-ExtUtils-CBuilder-0.28.2.6-291.el7_3.1.noarch.rpm	SHA-256: 1c111ae44e4eb3a120aac6d0f37da67d92401f20a36bbedea1014fe41d1d7630
perl-ExtUtils-Embed-1.30-291.el7_3.1.noarch.rpm	SHA-256: e397c1e0b464ae5434e4ba24f320580b2d18ff72317b2639c5a1d7a42025e7e7
perl-ExtUtils-Install-1.58-291.el7_3.1.noarch.rpm	SHA-256: d3ae5d45b1889d0061aaa17ead17047e94440d82eaaaec0c1f3e2c3ccb4fa4c5
perl-IO-Zlib-1.10-291.el7_3.1.noarch.rpm	SHA-256: 19c58941319201df363417265e7b337693bdf618c58457ea4a13a51f2015d7af
perl-Locale-Maketext-Simple-0.21-291.el7_3.1.noarch.rpm	SHA-256: 2fc02018d6b36912a2d0bd7ce22e967b79cf28efe84bc2bf695541fbcf2a6c4b
perl-Module-CoreList-2.76.02-291.el7_3.1.noarch.rpm	SHA-256: ae8d023a36fc39a3ba87b49192d060ef18aa5c10d290349cfc125da90293ec17
perl-Module-Loaded-0.08-291.el7_3.1.noarch.rpm	SHA-256: aeb080aafe8cd3725f960db4efd40442b34a7431d2f419c3c2e82182357d2898
perl-Object-Accessor-0.42-291.el7_3.1.noarch.rpm	SHA-256: 2345493edc68bf5c7e8cc41876978ae5a91a1b5e55c78358c579e78ad5f9d7ae
perl-Package-Constants-0.02-291.el7_3.1.noarch.rpm	SHA-256: fca1109cc1e48d3cf07c5f26017dbd398a374e71f4d5ddb5b7f0836ceba3291c
perl-Perl4-CoreLibs-0.001-291.el7_3.1.noarch.rpm	SHA-256: 528fa2f20ed3d103c98691fe1fc7e802df7c592cdac57cf0cb87df768d6694ce
perl-Pod-Escapes-1.04-291.el7_3.1.noarch.rpm	SHA-256: 5bd6f3e196d2297712e463041dbd2b9e383c16847f909390cafb742c5269aec4
perl-Time-Piece-1.20.1-291.el7_3.1.x86_64.rpm	SHA-256: e1aa6de802772fbfae258401eec6242502fa016519e57294b839c7d1ac668ceb
perl-core-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: b0695375fc642d50b59753a87e15fc484a807f9934a40fd61cd97504fe459f8e
perl-debuginfo-5.16.3-291.el7_3.1.i686.rpm	SHA-256: d3841081688ee2fd48754561a890316b96172bce4ad9f9439046b248a33c4a69
perl-debuginfo-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: f4ed86c5f425616b1a7ae0386b8420718d56fb68d31bcf99c37737cf14816b59
perl-debuginfo-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: f4ed86c5f425616b1a7ae0386b8420718d56fb68d31bcf99c37737cf14816b59
perl-devel-5.16.3-291.el7_3.1.i686.rpm	SHA-256: 265a588e81ce1a9fc89af1d6f6a964fd43532e9113e624ff139b6116543ba6bb
perl-devel-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: 8e2e7e0dfa819677cd26df36469a6cb2c5b58e7dd90a2b87f451a4cfa07d5a3f
perl-libs-5.16.3-291.el7_3.1.i686.rpm	SHA-256: 34362925cde2f2a46d573d0be5e896d563bef5c7a9754b0beacf5e7bc5122444
perl-libs-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: 30020fa21e21b4cb44354d4c30c2d80c6a020e71205c4d448edf30db10fade76
perl-macros-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: a42cdb270681424cd2d9e02f561cb919373b9204cafc36845396fcfeb38265c8
perl-tests-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: 168e59468a5c61f19383d24deae2e792f45bc9797fc916e5fd3197ffa7ab2e84

Red Hat Enterprise Linux Server - TUS 7.3

SRPM
perl-5.16.3-291.el7_3.1.src.rpm	SHA-256: a861322eb6ec123312089b2160915469393d8167962587672c9116e2b464b750
x86_64
perl-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: b712d3a0f1a7b1f60d971699d20c185be7329c968bd653f1e994852111442183
perl-CPAN-1.9800-291.el7_3.1.noarch.rpm	SHA-256: 5e8562952baba27d4ef4838aea46d0f1a1bc5e414a49bddb40c4f135cf0b8e56
perl-ExtUtils-CBuilder-0.28.2.6-291.el7_3.1.noarch.rpm	SHA-256: 1c111ae44e4eb3a120aac6d0f37da67d92401f20a36bbedea1014fe41d1d7630
perl-ExtUtils-Embed-1.30-291.el7_3.1.noarch.rpm	SHA-256: e397c1e0b464ae5434e4ba24f320580b2d18ff72317b2639c5a1d7a42025e7e7
perl-ExtUtils-Install-1.58-291.el7_3.1.noarch.rpm	SHA-256: d3ae5d45b1889d0061aaa17ead17047e94440d82eaaaec0c1f3e2c3ccb4fa4c5
perl-IO-Zlib-1.10-291.el7_3.1.noarch.rpm	SHA-256: 19c58941319201df363417265e7b337693bdf618c58457ea4a13a51f2015d7af
perl-Locale-Maketext-Simple-0.21-291.el7_3.1.noarch.rpm	SHA-256: 2fc02018d6b36912a2d0bd7ce22e967b79cf28efe84bc2bf695541fbcf2a6c4b
perl-Module-CoreList-2.76.02-291.el7_3.1.noarch.rpm	SHA-256: ae8d023a36fc39a3ba87b49192d060ef18aa5c10d290349cfc125da90293ec17
perl-Module-Loaded-0.08-291.el7_3.1.noarch.rpm	SHA-256: aeb080aafe8cd3725f960db4efd40442b34a7431d2f419c3c2e82182357d2898
perl-Object-Accessor-0.42-291.el7_3.1.noarch.rpm	SHA-256: 2345493edc68bf5c7e8cc41876978ae5a91a1b5e55c78358c579e78ad5f9d7ae
perl-Package-Constants-0.02-291.el7_3.1.noarch.rpm	SHA-256: fca1109cc1e48d3cf07c5f26017dbd398a374e71f4d5ddb5b7f0836ceba3291c
perl-Perl4-CoreLibs-0.001-291.el7_3.1.noarch.rpm	SHA-256: 528fa2f20ed3d103c98691fe1fc7e802df7c592cdac57cf0cb87df768d6694ce
perl-Pod-Escapes-1.04-291.el7_3.1.noarch.rpm	SHA-256: 5bd6f3e196d2297712e463041dbd2b9e383c16847f909390cafb742c5269aec4
perl-Time-Piece-1.20.1-291.el7_3.1.x86_64.rpm	SHA-256: e1aa6de802772fbfae258401eec6242502fa016519e57294b839c7d1ac668ceb
perl-core-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: b0695375fc642d50b59753a87e15fc484a807f9934a40fd61cd97504fe459f8e
perl-debuginfo-5.16.3-291.el7_3.1.i686.rpm	SHA-256: d3841081688ee2fd48754561a890316b96172bce4ad9f9439046b248a33c4a69
perl-debuginfo-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: f4ed86c5f425616b1a7ae0386b8420718d56fb68d31bcf99c37737cf14816b59
perl-debuginfo-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: f4ed86c5f425616b1a7ae0386b8420718d56fb68d31bcf99c37737cf14816b59
perl-devel-5.16.3-291.el7_3.1.i686.rpm	SHA-256: 265a588e81ce1a9fc89af1d6f6a964fd43532e9113e624ff139b6116543ba6bb
perl-devel-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: 8e2e7e0dfa819677cd26df36469a6cb2c5b58e7dd90a2b87f451a4cfa07d5a3f
perl-libs-5.16.3-291.el7_3.1.i686.rpm	SHA-256: 34362925cde2f2a46d573d0be5e896d563bef5c7a9754b0beacf5e7bc5122444
perl-libs-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: 30020fa21e21b4cb44354d4c30c2d80c6a020e71205c4d448edf30db10fade76
perl-macros-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: a42cdb270681424cd2d9e02f561cb919373b9204cafc36845396fcfeb38265c8
perl-tests-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: 168e59468a5c61f19383d24deae2e792f45bc9797fc916e5fd3197ffa7ab2e84

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.3

SRPM
perl-5.16.3-291.el7_3.1.src.rpm	SHA-256: a861322eb6ec123312089b2160915469393d8167962587672c9116e2b464b750
ppc64le
perl-5.16.3-291.el7_3.1.ppc64le.rpm	SHA-256: b123df75f629fee38c095bcb5679e91025c6e6b22f02dbecaaf9193202faf84f
perl-CPAN-1.9800-291.el7_3.1.noarch.rpm	SHA-256: 5e8562952baba27d4ef4838aea46d0f1a1bc5e414a49bddb40c4f135cf0b8e56
perl-ExtUtils-CBuilder-0.28.2.6-291.el7_3.1.noarch.rpm	SHA-256: 1c111ae44e4eb3a120aac6d0f37da67d92401f20a36bbedea1014fe41d1d7630
perl-ExtUtils-Embed-1.30-291.el7_3.1.noarch.rpm	SHA-256: e397c1e0b464ae5434e4ba24f320580b2d18ff72317b2639c5a1d7a42025e7e7
perl-ExtUtils-Install-1.58-291.el7_3.1.noarch.rpm	SHA-256: d3ae5d45b1889d0061aaa17ead17047e94440d82eaaaec0c1f3e2c3ccb4fa4c5
perl-IO-Zlib-1.10-291.el7_3.1.noarch.rpm	SHA-256: 19c58941319201df363417265e7b337693bdf618c58457ea4a13a51f2015d7af
perl-Locale-Maketext-Simple-0.21-291.el7_3.1.noarch.rpm	SHA-256: 2fc02018d6b36912a2d0bd7ce22e967b79cf28efe84bc2bf695541fbcf2a6c4b
perl-Module-CoreList-2.76.02-291.el7_3.1.noarch.rpm	SHA-256: ae8d023a36fc39a3ba87b49192d060ef18aa5c10d290349cfc125da90293ec17
perl-Module-Loaded-0.08-291.el7_3.1.noarch.rpm	SHA-256: aeb080aafe8cd3725f960db4efd40442b34a7431d2f419c3c2e82182357d2898
perl-Object-Accessor-0.42-291.el7_3.1.noarch.rpm	SHA-256: 2345493edc68bf5c7e8cc41876978ae5a91a1b5e55c78358c579e78ad5f9d7ae
perl-Package-Constants-0.02-291.el7_3.1.noarch.rpm	SHA-256: fca1109cc1e48d3cf07c5f26017dbd398a374e71f4d5ddb5b7f0836ceba3291c
perl-Perl4-CoreLibs-0.001-291.el7_3.1.noarch.rpm	SHA-256: 528fa2f20ed3d103c98691fe1fc7e802df7c592cdac57cf0cb87df768d6694ce
perl-Pod-Escapes-1.04-291.el7_3.1.noarch.rpm	SHA-256: 5bd6f3e196d2297712e463041dbd2b9e383c16847f909390cafb742c5269aec4
perl-Time-Piece-1.20.1-291.el7_3.1.ppc64le.rpm	SHA-256: b36c55f3050dea340d8a8e9b962ad1533d3360394a14186a631279462537751e
perl-core-5.16.3-291.el7_3.1.ppc64le.rpm	SHA-256: f37a998500ac150564d2874d5d85fd8cd21da2e340e2a3e9cd6e067021fdba06
perl-debuginfo-5.16.3-291.el7_3.1.ppc64le.rpm	SHA-256: 1d95e7c85321187c4c04cb3c07aed32ae0437c24f50d0c6139718fe22a82380f
perl-debuginfo-5.16.3-291.el7_3.1.ppc64le.rpm	SHA-256: 1d95e7c85321187c4c04cb3c07aed32ae0437c24f50d0c6139718fe22a82380f
perl-devel-5.16.3-291.el7_3.1.ppc64le.rpm	SHA-256: cf461e62a79c148851e166975b22e0125fefc24061e036154fd27268db0e1028
perl-libs-5.16.3-291.el7_3.1.ppc64le.rpm	SHA-256: 1d2c5bcbd1a1b127b3eb2c256832ecf65c7a1e567432aef4289d54449a6cafc3
perl-macros-5.16.3-291.el7_3.1.ppc64le.rpm	SHA-256: 3c89335c2bbb08b81efedf4b12d406a24680be45f3d024d7b10b036eb2b95514
perl-tests-5.16.3-291.el7_3.1.ppc64le.rpm	SHA-256: 1c3ba5f4c4c3e9df37ddb6c6d686613109dab6698c2dc543b35a02376e03b896

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.3

SRPM
perl-5.16.3-291.el7_3.1.src.rpm	SHA-256: a861322eb6ec123312089b2160915469393d8167962587672c9116e2b464b750
x86_64
perl-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: b712d3a0f1a7b1f60d971699d20c185be7329c968bd653f1e994852111442183
perl-CPAN-1.9800-291.el7_3.1.noarch.rpm	SHA-256: 5e8562952baba27d4ef4838aea46d0f1a1bc5e414a49bddb40c4f135cf0b8e56
perl-ExtUtils-CBuilder-0.28.2.6-291.el7_3.1.noarch.rpm	SHA-256: 1c111ae44e4eb3a120aac6d0f37da67d92401f20a36bbedea1014fe41d1d7630
perl-ExtUtils-Embed-1.30-291.el7_3.1.noarch.rpm	SHA-256: e397c1e0b464ae5434e4ba24f320580b2d18ff72317b2639c5a1d7a42025e7e7
perl-ExtUtils-Install-1.58-291.el7_3.1.noarch.rpm	SHA-256: d3ae5d45b1889d0061aaa17ead17047e94440d82eaaaec0c1f3e2c3ccb4fa4c5
perl-IO-Zlib-1.10-291.el7_3.1.noarch.rpm	SHA-256: 19c58941319201df363417265e7b337693bdf618c58457ea4a13a51f2015d7af
perl-Locale-Maketext-Simple-0.21-291.el7_3.1.noarch.rpm	SHA-256: 2fc02018d6b36912a2d0bd7ce22e967b79cf28efe84bc2bf695541fbcf2a6c4b
perl-Module-CoreList-2.76.02-291.el7_3.1.noarch.rpm	SHA-256: ae8d023a36fc39a3ba87b49192d060ef18aa5c10d290349cfc125da90293ec17
perl-Module-Loaded-0.08-291.el7_3.1.noarch.rpm	SHA-256: aeb080aafe8cd3725f960db4efd40442b34a7431d2f419c3c2e82182357d2898
perl-Object-Accessor-0.42-291.el7_3.1.noarch.rpm	SHA-256: 2345493edc68bf5c7e8cc41876978ae5a91a1b5e55c78358c579e78ad5f9d7ae
perl-Package-Constants-0.02-291.el7_3.1.noarch.rpm	SHA-256: fca1109cc1e48d3cf07c5f26017dbd398a374e71f4d5ddb5b7f0836ceba3291c
perl-Perl4-CoreLibs-0.001-291.el7_3.1.noarch.rpm	SHA-256: 528fa2f20ed3d103c98691fe1fc7e802df7c592cdac57cf0cb87df768d6694ce
perl-Pod-Escapes-1.04-291.el7_3.1.noarch.rpm	SHA-256: 5bd6f3e196d2297712e463041dbd2b9e383c16847f909390cafb742c5269aec4
perl-Time-Piece-1.20.1-291.el7_3.1.x86_64.rpm	SHA-256: e1aa6de802772fbfae258401eec6242502fa016519e57294b839c7d1ac668ceb
perl-core-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: b0695375fc642d50b59753a87e15fc484a807f9934a40fd61cd97504fe459f8e
perl-debuginfo-5.16.3-291.el7_3.1.i686.rpm	SHA-256: d3841081688ee2fd48754561a890316b96172bce4ad9f9439046b248a33c4a69
perl-debuginfo-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: f4ed86c5f425616b1a7ae0386b8420718d56fb68d31bcf99c37737cf14816b59
perl-debuginfo-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: f4ed86c5f425616b1a7ae0386b8420718d56fb68d31bcf99c37737cf14816b59
perl-devel-5.16.3-291.el7_3.1.i686.rpm	SHA-256: 265a588e81ce1a9fc89af1d6f6a964fd43532e9113e624ff139b6116543ba6bb
perl-devel-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: 8e2e7e0dfa819677cd26df36469a6cb2c5b58e7dd90a2b87f451a4cfa07d5a3f
perl-libs-5.16.3-291.el7_3.1.i686.rpm	SHA-256: 34362925cde2f2a46d573d0be5e896d563bef5c7a9754b0beacf5e7bc5122444
perl-libs-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: 30020fa21e21b4cb44354d4c30c2d80c6a020e71205c4d448edf30db10fade76
perl-macros-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: a42cdb270681424cd2d9e02f561cb919373b9204cafc36845396fcfeb38265c8
perl-tests-5.16.3-291.el7_3.1.x86_64.rpm	SHA-256: 168e59468a5c61f19383d24deae2e792f45bc9797fc916e5fd3197ffa7ab2e84