File _patchinfo of Package patchinfo.33799
<patchinfo incident="33799">
<issue tracker="bnc" id="1082216">VUL-0: CVE-2018-6913: perl: heap buffer overflow bug</issue>
<issue tracker="bnc" id="1210999">VUL-0: CVE-2023-31484: perl: Perl's HTTP:Tiny has insecure TLS cert default, affecting CPAN.pm</issue>
<issue tracker="bnc" id="1047178">VUL-0: CVE-2017-6512 perl: File::Path rmtree/remove_tree race condition</issue>
<issue tracker="bnc" id="1082233">VUL-0: CVE-2018-6798: perl: heap buffer overflow bug</issue>
<issue tracker="cve" id="2018-6913"/>
<issue tracker="cve" id="2017-6512"/>
<issue tracker="cve" id="2018-6798"/>
<issue tracker="cve" id="2023-31484"/>
<packager>mlschroe</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for perl</summary>
<description>This update for perl fixes the following issues:
Security issues fixed:
- CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216)
- CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233)
- CVE-2023-31484: Enabled TLS certificate verification in CPAN (bsc#1210999)
- CVE-2017-6512: Fixed File::Path rmtree/remove_tree race condition (bsc#1047178)
</description>
</patchinfo>