Описание
Security update for perl
This update for perl fixes the following issue:
- CVE-2017-20230: Storable versions before 3.05 for Perl has a stack overflow (bsc#1262486).
Список пакетов
Image SLES12-SP5-Azure-BYOS
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-Azure-HPC-BYOS
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-Azure-HPC-On-Demand
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-Azure-SAP-BYOS
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-Azure-SAP-On-Demand
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-Azure-Standard-On-Demand
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-EC2-BYOS
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-EC2-ECS-On-Demand
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-EC2-On-Demand
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-EC2-SAP-BYOS
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-EC2-SAP-On-Demand
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-GCE-BYOS
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-GCE-On-Demand
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-GCE-SAP-BYOS
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
Image SLES12-SP5-GCE-SAP-On-Demand
perl-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
SUSE Linux Enterprise Server 12 SP5-LTSS
perl-5.18.2-12.32.1
perl-32bit-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
perl-doc-5.18.2-12.32.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
perl-5.18.2-12.32.1
perl-32bit-5.18.2-12.32.1
perl-base-5.18.2-12.32.1
perl-doc-5.18.2-12.32.1
Ссылки
- Link for SUSE-SU-2026:1567-1
- E-Mail link for SUSE-SU-2026:1567-1
- SUSE Security Ratings
- SUSE Bug 1262486
- SUSE CVE CVE-2017-20230 page
Описание
Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow.
Затронутые продукты
Image SLES12-SP5-Azure-BYOS:perl-5.18.2-12.32.1
Image SLES12-SP5-Azure-BYOS:perl-base-5.18.2-12.32.1
Image SLES12-SP5-Azure-HPC-BYOS:perl-5.18.2-12.32.1
Image SLES12-SP5-Azure-HPC-BYOS:perl-base-5.18.2-12.32.1
Ссылки
- CVE-2017-20230
- SUSE Bug 1262486