====================================================================                   Red Hat Security Advisory

Synopsis:          Moderate: perl security and bug fix update
Advisory ID:       RHSA-2011:0558-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2011:0558.html
Issue date:        2011-05-19
CVE Names:         CVE-2010-2761 CVE-2010-4410 CVE-2011-1487 
====================================================================
1. Summary:

Updated perl packages that fix three security issues and several bugs are
now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64
Red Hat Enterprise Linux HPC Node (v. 6) - x86_64
Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64
Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64

3. Description:

Perl is a high-level programming language commonly used for system
administration utilities and web programming. The Perl CGI module provides
resources for preparing and processing Common Gateway Interface (CGI) based
HTTP requests and responses.

It was found that the Perl CGI module used a hard-coded value for the MIME
boundary string in multipart/x-mixed-replace content. A remote attacker
could possibly use this flaw to conduct an HTTP response splitting attack
via a specially-crafted HTTP request. (CVE-2010-2761)

A CRLF injection flaw was found in the way the Perl CGI module processed a
sequence of non-whitespace preceded by newline characters in the header. A
remote attacker could use this flaw to conduct an HTTP response splitting
attack via a specially-crafted sequence of characters provided to the CGI
module. (CVE-2010-4410)

It was found that certain Perl string manipulation functions (such as uc()
and lc()) failed to preserve the taint bit. A remote attacker could use
this flaw to bypass the Perl taint mode protection mechanism in scripts
that use the affected functions to process tainted input. (CVE-2011-1487)

These packages upgrade the CGI module to version 3.51. Refer to the CGI
module's Changes file, linked to in the References, for a full list of
changes.

This update also fixes the following bugs:

* When using the "threads" module, an attempt to send a signal to a thread
that did not have a signal handler specified caused the perl interpreter to
terminate unexpectedly with a segmentation fault. With this update, the
"threads" module has been updated to upstream version 1.82, which fixes
this bug. As a result, sending a signal to a thread that does not have the
signal handler specified no longer causes perl to crash. (BZ#626330)

* Prior to this update, the perl packages did not require the Digest::SHA
module as a dependency. Consequent to this, when a user started the cpan
command line interface and attempted to download a distribution from CPAN,
they may have been presented with the following message:

CPAN: checksum security checks disabled because Digest::SHA not installed.
Please consider installing the Digest::SHA module.

This update corrects the spec file for the perl package to require the
perl-Digest-SHA package as a dependency, and cpan no longer displays the
above message. (BZ#640716)

* When using the "threads" module, continual creation and destruction of
threads could cause the Perl program to consume an increasing amount of
memory. With this update, the underlying source code has been corrected to
free the allocated memory when a thread is destroyed, and the continual
creation and destruction of threads in Perl programs no longer leads to
memory leaks. (BZ#640720)

* Due to a packaging error, the perl packages did not include the
"NDBM_File" module. This update corrects this error, and "NDBM_File" is now
included as expected. (BZ#640729)

* Prior to this update, the prove(1) manual page and the "prove --help"
command listed "--fork" as a valid command line option. However, version
3.17 of the Test::Harness distribution removed the support for the
fork-based parallel testing, and the prove utility thus no longer supports
this option. This update corrects both the manual page and the output of
the "prove --help" command, so that "--fork" is no longer included in the
list of available command line options. (BZ#609492)

Users of Perl, especially those of Perl threads, are advised to upgrade to
these updated packages, which correct these issues.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

609492 - unknown option fork with prove
626330 - Sending signal to thread without signal handler in thread causes perl to segfault
640716 - Let perl-CPAN Require: perl(Digest::SHA)
640720 - Thread desctructor leaks
640729 - NDBM_File module is missing in perl core
658976 - perl-CGI, perl-CGI-Simple: CVE-2010-2761 - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting
692898 - CVE-2011-1487 perl: lc(), uc() routines are laundering tainted data

6. Package List:

Red Hat Enterprise Linux Desktop (v. 6):

Source:

i386:
perl-5.10.1-119.el6.i686.rpm
perl-Archive-Extract-0.38-119.el6.i686.rpm
perl-Archive-Tar-1.58-119.el6.i686.rpm
perl-CGI-3.51-119.el6.i686.rpm
perl-CPAN-1.9402-119.el6.i686.rpm
perl-CPANPLUS-0.88-119.el6.i686.rpm
perl-Compress-Raw-Zlib-2.023-119.el6.i686.rpm
perl-Compress-Zlib-2.020-119.el6.i686.rpm
perl-Digest-SHA-5.47-119.el6.i686.rpm
perl-ExtUtils-CBuilder-0.27-119.el6.i686.rpm
perl-ExtUtils-Embed-1.28-119.el6.i686.rpm
perl-ExtUtils-MakeMaker-6.55-119.el6.i686.rpm
perl-ExtUtils-ParseXS-2.2003.0-119.el6.i686.rpm
perl-File-Fetch-0.26-119.el6.i686.rpm
perl-IO-Compress-Base-2.020-119.el6.i686.rpm
perl-IO-Compress-Zlib-2.020-119.el6.i686.rpm
perl-IO-Zlib-1.09-119.el6.i686.rpm
perl-IPC-Cmd-0.56-119.el6.i686.rpm
perl-Locale-Maketext-Simple-0.18-119.el6.i686.rpm
perl-Log-Message-0.02-119.el6.i686.rpm
perl-Log-Message-Simple-0.04-119.el6.i686.rpm
perl-Module-Build-0.3500-119.el6.i686.rpm
perl-Module-CoreList-2.18-119.el6.i686.rpm
perl-Module-Load-0.16-119.el6.i686.rpm
perl-Module-Load-Conditional-0.30-119.el6.i686.rpm
perl-Module-Loaded-0.02-119.el6.i686.rpm
perl-Module-Pluggable-3.90-119.el6.i686.rpm
perl-Object-Accessor-0.34-119.el6.i686.rpm
perl-Package-Constants-0.02-119.el6.i686.rpm
perl-Params-Check-0.26-119.el6.i686.rpm
perl-Parse-CPAN-Meta-1.40-119.el6.i686.rpm
perl-Pod-Escapes-1.04-119.el6.i686.rpm
perl-Pod-Simple-3.13-119.el6.i686.rpm
perl-Term-UI-0.20-119.el6.i686.rpm
perl-Test-Harness-3.17-119.el6.i686.rpm
perl-Test-Simple-0.92-119.el6.i686.rpm
perl-Time-HiRes-1.9721-119.el6.i686.rpm
perl-Time-Piece-1.15-119.el6.i686.rpm
perl-core-5.10.1-119.el6.i686.rpm
perl-debuginfo-5.10.1-119.el6.i686.rpm
perl-devel-5.10.1-119.el6.i686.rpm
perl-libs-5.10.1-119.el6.i686.rpm
perl-parent-0.221-119.el6.i686.rpm
perl-suidperl-5.10.1-119.el6.i686.rpm
perl-version-0.77-119.el6.i686.rpm

x86_64:
perl-5.10.1-119.el6.x86_64.rpm
perl-Archive-Extract-0.38-119.el6.x86_64.rpm
perl-Archive-Tar-1.58-119.el6.x86_64.rpm
perl-CGI-3.51-119.el6.x86_64.rpm
perl-CPAN-1.9402-119.el6.x86_64.rpm
perl-CPANPLUS-0.88-119.el6.x86_64.rpm
perl-Compress-Raw-Zlib-2.023-119.el6.x86_64.rpm
perl-Compress-Zlib-2.020-119.el6.x86_64.rpm
perl-Digest-SHA-5.47-119.el6.x86_64.rpm
perl-ExtUtils-CBuilder-0.27-119.el6.x86_64.rpm
perl-ExtUtils-Embed-1.28-119.el6.x86_64.rpm
perl-ExtUtils-MakeMaker-6.55-119.el6.x86_64.rpm
perl-ExtUtils-ParseXS-2.2003.0-119.el6.x86_64.rpm
perl-File-Fetch-0.26-119.el6.x86_64.rpm
perl-IO-Compress-Base-2.020-119.el6.x86_64.rpm
perl-IO-Compress-Zlib-2.020-119.el6.x86_64.rpm
perl-IO-Zlib-1.09-119.el6.x86_64.rpm
perl-IPC-Cmd-0.56-119.el6.x86_64.rpm
perl-Locale-Maketext-Simple-0.18-119.el6.x86_64.rpm
perl-Log-Message-0.02-119.el6.x86_64.rpm
perl-Log-Message-Simple-0.04-119.el6.x86_64.rpm
perl-Module-Build-0.3500-119.el6.x86_64.rpm
perl-Module-CoreList-2.18-119.el6.x86_64.rpm
perl-Module-Load-0.16-119.el6.x86_64.rpm
perl-Module-Load-Conditional-0.30-119.el6.x86_64.rpm
perl-Module-Loaded-0.02-119.el6.x86_64.rpm
perl-Module-Pluggable-3.90-119.el6.x86_64.rpm
perl-Object-Accessor-0.34-119.el6.x86_64.rpm
perl-Package-Constants-0.02-119.el6.x86_64.rpm
perl-Params-Check-0.26-119.el6.x86_64.rpm
perl-Parse-CPAN-Meta-1.40-119.el6.x86_64.rpm
perl-Pod-Escapes-1.04-119.el6.x86_64.rpm
perl-Pod-Simple-3.13-119.el6.x86_64.rpm
perl-Term-UI-0.20-119.el6.x86_64.rpm
perl-Test-Harness-3.17-119.el6.x86_64.rpm
perl-Test-Simple-0.92-119.el6.x86_64.rpm
perl-Time-HiRes-1.9721-119.el6.x86_64.rpm
perl-Time-Piece-1.15-119.el6.x86_64.rpm
perl-core-5.10.1-119.el6.x86_64.rpm
perl-debuginfo-5.10.1-119.el6.i686.rpm
perl-debuginfo-5.10.1-119.el6.x86_64.rpm
perl-devel-5.10.1-119.el6.i686.rpm
perl-devel-5.10.1-119.el6.x86_64.rpm
perl-libs-5.10.1-119.el6.i686.rpm
perl-libs-5.10.1-119.el6.x86_64.rpm
perl-parent-0.221-119.el6.x86_64.rpm
perl-suidperl-5.10.1-119.el6.x86_64.rpm
perl-version-0.77-119.el6.x86_64.rpm

Red Hat Enterprise Linux HPC Node (v. 6):

Source:

x86_64:
perl-5.10.1-119.el6.x86_64.rpm
perl-Archive-Extract-0.38-119.el6.x86_64.rpm
perl-Archive-Tar-1.58-119.el6.x86_64.rpm
perl-CGI-3.51-119.el6.x86_64.rpm
perl-CPAN-1.9402-119.el6.x86_64.rpm
perl-CPANPLUS-0.88-119.el6.x86_64.rpm
perl-Compress-Raw-Zlib-2.023-119.el6.x86_64.rpm
perl-Compress-Zlib-2.020-119.el6.x86_64.rpm
perl-Digest-SHA-5.47-119.el6.x86_64.rpm
perl-ExtUtils-CBuilder-0.27-119.el6.x86_64.rpm
perl-ExtUtils-Embed-1.28-119.el6.x86_64.rpm
perl-ExtUtils-MakeMaker-6.55-119.el6.x86_64.rpm
perl-ExtUtils-ParseXS-2.2003.0-119.el6.x86_64.rpm
perl-File-Fetch-0.26-119.el6.x86_64.rpm
perl-IO-Compress-Base-2.020-119.el6.x86_64.rpm
perl-IO-Compress-Zlib-2.020-119.el6.x86_64.rpm
perl-IO-Zlib-1.09-119.el6.x86_64.rpm
perl-IPC-Cmd-0.56-119.el6.x86_64.rpm
perl-Locale-Maketext-Simple-0.18-119.el6.x86_64.rpm
perl-Log-Message-0.02-119.el6.x86_64.rpm
perl-Log-Message-Simple-0.04-119.el6.x86_64.rpm
perl-Module-Build-0.3500-119.el6.x86_64.rpm
perl-Module-CoreList-2.18-119.el6.x86_64.rpm
perl-Module-Load-0.16-119.el6.x86_64.rpm
perl-Module-Load-Conditional-0.30-119.el6.x86_64.rpm
perl-Module-Loaded-0.02-119.el6.x86_64.rpm
perl-Module-Pluggable-3.90-119.el6.x86_64.rpm
perl-Object-Accessor-0.34-119.el6.x86_64.rpm
perl-Package-Constants-0.02-119.el6.x86_64.rpm
perl-Params-Check-0.26-119.el6.x86_64.rpm
perl-Parse-CPAN-Meta-1.40-119.el6.x86_64.rpm
perl-Pod-Escapes-1.04-119.el6.x86_64.rpm
perl-Pod-Simple-3.13-119.el6.x86_64.rpm
perl-Term-UI-0.20-119.el6.x86_64.rpm
perl-Test-Harness-3.17-119.el6.x86_64.rpm
perl-Test-Simple-0.92-119.el6.x86_64.rpm
perl-Time-HiRes-1.9721-119.el6.x86_64.rpm
perl-Time-Piece-1.15-119.el6.x86_64.rpm
perl-core-5.10.1-119.el6.x86_64.rpm
perl-debuginfo-5.10.1-119.el6.i686.rpm
perl-debuginfo-5.10.1-119.el6.x86_64.rpm
perl-devel-5.10.1-119.el6.i686.rpm
perl-devel-5.10.1-119.el6.x86_64.rpm
perl-libs-5.10.1-119.el6.i686.rpm
perl-libs-5.10.1-119.el6.x86_64.rpm
perl-parent-0.221-119.el6.x86_64.rpm
perl-suidperl-5.10.1-119.el6.x86_64.rpm
perl-version-0.77-119.el6.x86_64.rpm

Red Hat Enterprise Linux Server (v. 6):

Source:

i386:
perl-5.10.1-119.el6.i686.rpm
perl-Archive-Extract-0.38-119.el6.i686.rpm
perl-Archive-Tar-1.58-119.el6.i686.rpm
perl-CGI-3.51-119.el6.i686.rpm
perl-CPAN-1.9402-119.el6.i686.rpm
perl-CPANPLUS-0.88-119.el6.i686.rpm
perl-Compress-Raw-Zlib-2.023-119.el6.i686.rpm
perl-Compress-Zlib-2.020-119.el6.i686.rpm
perl-Digest-SHA-5.47-119.el6.i686.rpm
perl-ExtUtils-CBuilder-0.27-119.el6.i686.rpm
perl-ExtUtils-Embed-1.28-119.el6.i686.rpm
perl-ExtUtils-MakeMaker-6.55-119.el6.i686.rpm
perl-ExtUtils-ParseXS-2.2003.0-119.el6.i686.rpm
perl-File-Fetch-0.26-119.el6.i686.rpm
perl-IO-Compress-Base-2.020-119.el6.i686.rpm
perl-IO-Compress-Zlib-2.020-119.el6.i686.rpm
perl-IO-Zlib-1.09-119.el6.i686.rpm
perl-IPC-Cmd-0.56-119.el6.i686.rpm
perl-Locale-Maketext-Simple-0.18-119.el6.i686.rpm
perl-Log-Message-0.02-119.el6.i686.rpm
perl-Log-Message-Simple-0.04-119.el6.i686.rpm
perl-Module-Build-0.3500-119.el6.i686.rpm
perl-Module-CoreList-2.18-119.el6.i686.rpm
perl-Module-Load-0.16-119.el6.i686.rpm
perl-Module-Load-Conditional-0.30-119.el6.i686.rpm
perl-Module-Loaded-0.02-119.el6.i686.rpm
perl-Module-Pluggable-3.90-119.el6.i686.rpm
perl-Object-Accessor-0.34-119.el6.i686.rpm
perl-Package-Constants-0.02-119.el6.i686.rpm
perl-Params-Check-0.26-119.el6.i686.rpm
perl-Parse-CPAN-Meta-1.40-119.el6.i686.rpm
perl-Pod-Escapes-1.04-119.el6.i686.rpm
perl-Pod-Simple-3.13-119.el6.i686.rpm
perl-Term-UI-0.20-119.el6.i686.rpm
perl-Test-Harness-3.17-119.el6.i686.rpm
perl-Test-Simple-0.92-119.el6.i686.rpm
perl-Time-HiRes-1.9721-119.el6.i686.rpm
perl-Time-Piece-1.15-119.el6.i686.rpm
perl-core-5.10.1-119.el6.i686.rpm
perl-debuginfo-5.10.1-119.el6.i686.rpm
perl-devel-5.10.1-119.el6.i686.rpm
perl-libs-5.10.1-119.el6.i686.rpm
perl-parent-0.221-119.el6.i686.rpm
perl-suidperl-5.10.1-119.el6.i686.rpm
perl-version-0.77-119.el6.i686.rpm

ppc64:
perl-5.10.1-119.el6.ppc64.rpm
perl-Archive-Extract-0.38-119.el6.ppc64.rpm
perl-Archive-Tar-1.58-119.el6.ppc64.rpm
perl-CGI-3.51-119.el6.ppc64.rpm
perl-CPAN-1.9402-119.el6.ppc64.rpm
perl-CPANPLUS-0.88-119.el6.ppc64.rpm
perl-Compress-Raw-Zlib-2.023-119.el6.ppc64.rpm
perl-Compress-Zlib-2.020-119.el6.ppc64.rpm
perl-Digest-SHA-5.47-119.el6.ppc64.rpm
perl-ExtUtils-CBuilder-0.27-119.el6.ppc64.rpm
perl-ExtUtils-Embed-1.28-119.el6.ppc64.rpm
perl-ExtUtils-MakeMaker-6.55-119.el6.ppc64.rpm
perl-ExtUtils-ParseXS-2.2003.0-119.el6.ppc64.rpm
perl-File-Fetch-0.26-119.el6.ppc64.rpm
perl-IO-Compress-Base-2.020-119.el6.ppc64.rpm
perl-IO-Compress-Zlib-2.020-119.el6.ppc64.rpm
perl-IO-Zlib-1.09-119.el6.ppc64.rpm
perl-IPC-Cmd-0.56-119.el6.ppc64.rpm
perl-Locale-Maketext-Simple-0.18-119.el6.ppc64.rpm
perl-Log-Message-0.02-119.el6.ppc64.rpm
perl-Log-Message-Simple-0.04-119.el6.ppc64.rpm
perl-Module-Build-0.3500-119.el6.ppc64.rpm
perl-Module-CoreList-2.18-119.el6.ppc64.rpm
perl-Module-Load-0.16-119.el6.ppc64.rpm
perl-Module-Load-Conditional-0.30-119.el6.ppc64.rpm
perl-Module-Loaded-0.02-119.el6.ppc64.rpm
perl-Module-Pluggable-3.90-119.el6.ppc64.rpm
perl-Object-Accessor-0.34-119.el6.ppc64.rpm
perl-Package-Constants-0.02-119.el6.ppc64.rpm
perl-Params-Check-0.26-119.el6.ppc64.rpm
perl-Parse-CPAN-Meta-1.40-119.el6.ppc64.rpm
perl-Pod-Escapes-1.04-119.el6.ppc64.rpm
perl-Pod-Simple-3.13-119.el6.ppc64.rpm
perl-Term-UI-0.20-119.el6.ppc64.rpm
perl-Test-Harness-3.17-119.el6.ppc64.rpm
perl-Test-Simple-0.92-119.el6.ppc64.rpm
perl-Time-HiRes-1.9721-119.el6.ppc64.rpm
perl-Time-Piece-1.15-119.el6.ppc64.rpm
perl-core-5.10.1-119.el6.ppc64.rpm
perl-debuginfo-5.10.1-119.el6.ppc.rpm
perl-debuginfo-5.10.1-119.el6.ppc64.rpm
perl-devel-5.10.1-119.el6.ppc.rpm
perl-devel-5.10.1-119.el6.ppc64.rpm
perl-libs-5.10.1-119.el6.ppc.rpm
perl-libs-5.10.1-119.el6.ppc64.rpm
perl-parent-0.221-119.el6.ppc64.rpm
perl-suidperl-5.10.1-119.el6.ppc64.rpm
perl-version-0.77-119.el6.ppc64.rpm

s390x:
perl-5.10.1-119.el6.s390x.rpm
perl-Archive-Extract-0.38-119.el6.s390x.rpm
perl-Archive-Tar-1.58-119.el6.s390x.rpm
perl-CGI-3.51-119.el6.s390x.rpm
perl-CPAN-1.9402-119.el6.s390x.rpm
perl-CPANPLUS-0.88-119.el6.s390x.rpm
perl-Compress-Raw-Zlib-2.023-119.el6.s390x.rpm
perl-Compress-Zlib-2.020-119.el6.s390x.rpm
perl-Digest-SHA-5.47-119.el6.s390x.rpm
perl-ExtUtils-CBuilder-0.27-119.el6.s390x.rpm
perl-ExtUtils-Embed-1.28-119.el6.s390x.rpm
perl-ExtUtils-MakeMaker-6.55-119.el6.s390x.rpm
perl-ExtUtils-ParseXS-2.2003.0-119.el6.s390x.rpm
perl-File-Fetch-0.26-119.el6.s390x.rpm
perl-IO-Compress-Base-2.020-119.el6.s390x.rpm
perl-IO-Compress-Zlib-2.020-119.el6.s390x.rpm
perl-IO-Zlib-1.09-119.el6.s390x.rpm
perl-IPC-Cmd-0.56-119.el6.s390x.rpm
perl-Locale-Maketext-Simple-0.18-119.el6.s390x.rpm
perl-Log-Message-0.02-119.el6.s390x.rpm
perl-Log-Message-Simple-0.04-119.el6.s390x.rpm
perl-Module-Build-0.3500-119.el6.s390x.rpm
perl-Module-CoreList-2.18-119.el6.s390x.rpm
perl-Module-Load-0.16-119.el6.s390x.rpm
perl-Module-Load-Conditional-0.30-119.el6.s390x.rpm
perl-Module-Loaded-0.02-119.el6.s390x.rpm
perl-Module-Pluggable-3.90-119.el6.s390x.rpm
perl-Object-Accessor-0.34-119.el6.s390x.rpm
perl-Package-Constants-0.02-119.el6.s390x.rpm
perl-Params-Check-0.26-119.el6.s390x.rpm
perl-Parse-CPAN-Meta-1.40-119.el6.s390x.rpm
perl-Pod-Escapes-1.04-119.el6.s390x.rpm
perl-Pod-Simple-3.13-119.el6.s390x.rpm
perl-Term-UI-0.20-119.el6.s390x.rpm
perl-Test-Harness-3.17-119.el6.s390x.rpm
perl-Test-Simple-0.92-119.el6.s390x.rpm
perl-Time-HiRes-1.9721-119.el6.s390x.rpm
perl-Time-Piece-1.15-119.el6.s390x.rpm
perl-core-5.10.1-119.el6.s390x.rpm
perl-debuginfo-5.10.1-119.el6.s390.rpm
perl-debuginfo-5.10.1-119.el6.s390x.rpm
perl-devel-5.10.1-119.el6.s390.rpm
perl-devel-5.10.1-119.el6.s390x.rpm
perl-libs-5.10.1-119.el6.s390.rpm
perl-libs-5.10.1-119.el6.s390x.rpm
perl-parent-0.221-119.el6.s390x.rpm
perl-suidperl-5.10.1-119.el6.s390x.rpm
perl-version-0.77-119.el6.s390x.rpm

x86_64:
perl-5.10.1-119.el6.x86_64.rpm
perl-Archive-Extract-0.38-119.el6.x86_64.rpm
perl-Archive-Tar-1.58-119.el6.x86_64.rpm
perl-CGI-3.51-119.el6.x86_64.rpm
perl-CPAN-1.9402-119.el6.x86_64.rpm
perl-CPANPLUS-0.88-119.el6.x86_64.rpm
perl-Compress-Raw-Zlib-2.023-119.el6.x86_64.rpm
perl-Compress-Zlib-2.020-119.el6.x86_64.rpm
perl-Digest-SHA-5.47-119.el6.x86_64.rpm
perl-ExtUtils-CBuilder-0.27-119.el6.x86_64.rpm
perl-ExtUtils-Embed-1.28-119.el6.x86_64.rpm
perl-ExtUtils-MakeMaker-6.55-119.el6.x86_64.rpm
perl-ExtUtils-ParseXS-2.2003.0-119.el6.x86_64.rpm
perl-File-Fetch-0.26-119.el6.x86_64.rpm
perl-IO-Compress-Base-2.020-119.el6.x86_64.rpm
perl-IO-Compress-Zlib-2.020-119.el6.x86_64.rpm
perl-IO-Zlib-1.09-119.el6.x86_64.rpm
perl-IPC-Cmd-0.56-119.el6.x86_64.rpm
perl-Locale-Maketext-Simple-0.18-119.el6.x86_64.rpm
perl-Log-Message-0.02-119.el6.x86_64.rpm
perl-Log-Message-Simple-0.04-119.el6.x86_64.rpm
perl-Module-Build-0.3500-119.el6.x86_64.rpm
perl-Module-CoreList-2.18-119.el6.x86_64.rpm
perl-Module-Load-0.16-119.el6.x86_64.rpm
perl-Module-Load-Conditional-0.30-119.el6.x86_64.rpm
perl-Module-Loaded-0.02-119.el6.x86_64.rpm
perl-Module-Pluggable-3.90-119.el6.x86_64.rpm
perl-Object-Accessor-0.34-119.el6.x86_64.rpm
perl-Package-Constants-0.02-119.el6.x86_64.rpm
perl-Params-Check-0.26-119.el6.x86_64.rpm
perl-Parse-CPAN-Meta-1.40-119.el6.x86_64.rpm
perl-Pod-Escapes-1.04-119.el6.x86_64.rpm
perl-Pod-Simple-3.13-119.el6.x86_64.rpm
perl-Term-UI-0.20-119.el6.x86_64.rpm
perl-Test-Harness-3.17-119.el6.x86_64.rpm
perl-Test-Simple-0.92-119.el6.x86_64.rpm
perl-Time-HiRes-1.9721-119.el6.x86_64.rpm
perl-Time-Piece-1.15-119.el6.x86_64.rpm
perl-core-5.10.1-119.el6.x86_64.rpm
perl-debuginfo-5.10.1-119.el6.i686.rpm
perl-debuginfo-5.10.1-119.el6.x86_64.rpm
perl-devel-5.10.1-119.el6.i686.rpm
perl-devel-5.10.1-119.el6.x86_64.rpm
perl-libs-5.10.1-119.el6.i686.rpm
perl-libs-5.10.1-119.el6.x86_64.rpm
perl-parent-0.221-119.el6.x86_64.rpm
perl-suidperl-5.10.1-119.el6.x86_64.rpm
perl-version-0.77-119.el6.x86_64.rpm

Red Hat Enterprise Linux Workstation (v. 6):

Source:

i386:
perl-5.10.1-119.el6.i686.rpm
perl-Archive-Extract-0.38-119.el6.i686.rpm
perl-Archive-Tar-1.58-119.el6.i686.rpm
perl-CGI-3.51-119.el6.i686.rpm
perl-CPAN-1.9402-119.el6.i686.rpm
perl-CPANPLUS-0.88-119.el6.i686.rpm
perl-Compress-Raw-Zlib-2.023-119.el6.i686.rpm
perl-Compress-Zlib-2.020-119.el6.i686.rpm
perl-Digest-SHA-5.47-119.el6.i686.rpm
perl-ExtUtils-CBuilder-0.27-119.el6.i686.rpm
perl-ExtUtils-Embed-1.28-119.el6.i686.rpm
perl-ExtUtils-MakeMaker-6.55-119.el6.i686.rpm
perl-ExtUtils-ParseXS-2.2003.0-119.el6.i686.rpm
perl-File-Fetch-0.26-119.el6.i686.rpm
perl-IO-Compress-Base-2.020-119.el6.i686.rpm
perl-IO-Compress-Zlib-2.020-119.el6.i686.rpm
perl-IO-Zlib-1.09-119.el6.i686.rpm
perl-IPC-Cmd-0.56-119.el6.i686.rpm
perl-Locale-Maketext-Simple-0.18-119.el6.i686.rpm
perl-Log-Message-0.02-119.el6.i686.rpm
perl-Log-Message-Simple-0.04-119.el6.i686.rpm
perl-Module-Build-0.3500-119.el6.i686.rpm
perl-Module-CoreList-2.18-119.el6.i686.rpm
perl-Module-Load-0.16-119.el6.i686.rpm
perl-Module-Load-Conditional-0.30-119.el6.i686.rpm
perl-Module-Loaded-0.02-119.el6.i686.rpm
perl-Module-Pluggable-3.90-119.el6.i686.rpm
perl-Object-Accessor-0.34-119.el6.i686.rpm
perl-Package-Constants-0.02-119.el6.i686.rpm
perl-Params-Check-0.26-119.el6.i686.rpm
perl-Parse-CPAN-Meta-1.40-119.el6.i686.rpm
perl-Pod-Escapes-1.04-119.el6.i686.rpm
perl-Pod-Simple-3.13-119.el6.i686.rpm
perl-Term-UI-0.20-119.el6.i686.rpm
perl-Test-Harness-3.17-119.el6.i686.rpm
perl-Test-Simple-0.92-119.el6.i686.rpm
perl-Time-HiRes-1.9721-119.el6.i686.rpm
perl-Time-Piece-1.15-119.el6.i686.rpm
perl-core-5.10.1-119.el6.i686.rpm
perl-debuginfo-5.10.1-119.el6.i686.rpm
perl-devel-5.10.1-119.el6.i686.rpm
perl-libs-5.10.1-119.el6.i686.rpm
perl-parent-0.221-119.el6.i686.rpm
perl-suidperl-5.10.1-119.el6.i686.rpm
perl-version-0.77-119.el6.i686.rpm

x86_64:
perl-5.10.1-119.el6.x86_64.rpm
perl-Archive-Extract-0.38-119.el6.x86_64.rpm
perl-Archive-Tar-1.58-119.el6.x86_64.rpm
perl-CGI-3.51-119.el6.x86_64.rpm
perl-CPAN-1.9402-119.el6.x86_64.rpm
perl-CPANPLUS-0.88-119.el6.x86_64.rpm
perl-Compress-Raw-Zlib-2.023-119.el6.x86_64.rpm
perl-Compress-Zlib-2.020-119.el6.x86_64.rpm
perl-Digest-SHA-5.47-119.el6.x86_64.rpm
perl-ExtUtils-CBuilder-0.27-119.el6.x86_64.rpm
perl-ExtUtils-Embed-1.28-119.el6.x86_64.rpm
perl-ExtUtils-MakeMaker-6.55-119.el6.x86_64.rpm
perl-ExtUtils-ParseXS-2.2003.0-119.el6.x86_64.rpm
perl-File-Fetch-0.26-119.el6.x86_64.rpm
perl-IO-Compress-Base-2.020-119.el6.x86_64.rpm
perl-IO-Compress-Zlib-2.020-119.el6.x86_64.rpm
perl-IO-Zlib-1.09-119.el6.x86_64.rpm
perl-IPC-Cmd-0.56-119.el6.x86_64.rpm
perl-Locale-Maketext-Simple-0.18-119.el6.x86_64.rpm
perl-Log-Message-0.02-119.el6.x86_64.rpm
perl-Log-Message-Simple-0.04-119.el6.x86_64.rpm
perl-Module-Build-0.3500-119.el6.x86_64.rpm
perl-Module-CoreList-2.18-119.el6.x86_64.rpm
perl-Module-Load-0.16-119.el6.x86_64.rpm
perl-Module-Load-Conditional-0.30-119.el6.x86_64.rpm
perl-Module-Loaded-0.02-119.el6.x86_64.rpm
perl-Module-Pluggable-3.90-119.el6.x86_64.rpm
perl-Object-Accessor-0.34-119.el6.x86_64.rpm
perl-Package-Constants-0.02-119.el6.x86_64.rpm
perl-Params-Check-0.26-119.el6.x86_64.rpm
perl-Parse-CPAN-Meta-1.40-119.el6.x86_64.rpm
perl-Pod-Escapes-1.04-119.el6.x86_64.rpm
perl-Pod-Simple-3.13-119.el6.x86_64.rpm
perl-Term-UI-0.20-119.el6.x86_64.rpm
perl-Test-Harness-3.17-119.el6.x86_64.rpm
perl-Test-Simple-0.92-119.el6.x86_64.rpm
perl-Time-HiRes-1.9721-119.el6.x86_64.rpm
perl-Time-Piece-1.15-119.el6.x86_64.rpm
perl-core-5.10.1-119.el6.x86_64.rpm
perl-debuginfo-5.10.1-119.el6.i686.rpm
perl-debuginfo-5.10.1-119.el6.x86_64.rpm
perl-devel-5.10.1-119.el6.i686.rpm
perl-devel-5.10.1-119.el6.x86_64.rpm
perl-libs-5.10.1-119.el6.i686.rpm
perl-libs-5.10.1-119.el6.x86_64.rpm
perl-parent-0.221-119.el6.x86_64.rpm
perl-suidperl-5.10.1-119.el6.x86_64.rpm
perl-version-0.77-119.el6.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and 
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/#package

7. References:

https://www.redhat.com/security/data/cve/CVE-2010-2761.html
https://www.redhat.com/security/data/cve/CVE-2010-4410.html
https://www.redhat.com/security/data/cve/CVE-2011-1487.html
https://access.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is .  More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2011 Red Hat, Inc.

Red Hat: 2011:0558-01: perl: Moderate Advisory

Updated perl packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 6

Summary

Perl is a high-level programming language commonly used for system administration utilities and web programming. The Perl CGI module provides resources for preparing and processing Common Gateway Interface (CGI) based HTTP requests and responses.
It was found that the Perl CGI module used a hard-coded value for the MIME boundary string in multipart/x-mixed-replace content. A remote attacker could possibly use this flaw to conduct an HTTP response splitting attack via a specially-crafted HTTP request. (CVE-2010-2761)
A CRLF injection flaw was found in the way the Perl CGI module processed a sequence of non-whitespace preceded by newline characters in the header. A remote attacker could use this flaw to conduct an HTTP response splitting attack via a specially-crafted sequence of characters provided to the CGI module. (CVE-2010-4410)
It was found that certain Perl string manipulation functions (such as uc() and lc()) failed to preserve the taint bit. A remote attacker could use this flaw to bypass the Perl taint mode protection mechanism in scripts that use the affected functions to process tainted input. (CVE-2011-1487)
These packages upgrade the CGI module to version 3.51. Refer to the CGI module's Changes file, linked to in the References, for a full list of changes.
This update also fixes the following bugs:
* When using the "threads" module, an attempt to send a signal to a thread that did not have a signal handler specified caused the perl interpreter to terminate unexpectedly with a segmentation fault. With this update, the "threads" module has been updated to upstream version 1.82, which fixes this bug. As a result, sending a signal to a thread that does not have the signal handler specified no longer causes perl to crash. (BZ#626330)
* Prior to this update, the perl packages did not require the Digest::SHA module as a dependency. Consequent to this, when a user started the cpan command line interface and attempted to download a distribution from CPAN, they may have been presented with the following message:
CPAN: checksum security checks disabled because Digest::SHA not installed. Please consider installing the Digest::SHA module.
This update corrects the spec file for the perl package to require the perl-Digest-SHA package as a dependency, and cpan no longer displays the above message. (BZ#640716)
* When using the "threads" module, continual creation and destruction of threads could cause the Perl program to consume an increasing amount of memory. With this update, the underlying source code has been corrected to free the allocated memory when a thread is destroyed, and the continual creation and destruction of threads in Perl programs no longer leads to memory leaks. (BZ#640720)
* Due to a packaging error, the perl packages did not include the "NDBM_File" module. This update corrects this error, and "NDBM_File" is now included as expected. (BZ#640729)
* Prior to this update, the prove(1) manual page and the "prove --help" command listed "--fork" as a valid command line option. However, version 3.17 of the Test::Harness distribution removed the support for the fork-based parallel testing, and the prove utility thus no longer supports this option. This update corrects both the manual page and the output of the "prove --help" command, so that "--fork" is no longer included in the list of available command line options. (BZ#609492)
Users of Perl, especially those of Perl threads, are advised to upgrade to these updated packages, which correct these issues.



Summary


Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259

References

https://www.redhat.com/security/data/cve/CVE-2010-2761.html https://www.redhat.com/security/data/cve/CVE-2010-4410.html https://www.redhat.com/security/data/cve/CVE-2011-1487.html https://access.redhat.com/security/updates/classification/#moderate

Package List

Red Hat Enterprise Linux Desktop (v. 6):
Source:
i386: perl-5.10.1-119.el6.i686.rpm perl-Archive-Extract-0.38-119.el6.i686.rpm perl-Archive-Tar-1.58-119.el6.i686.rpm perl-CGI-3.51-119.el6.i686.rpm perl-CPAN-1.9402-119.el6.i686.rpm perl-CPANPLUS-0.88-119.el6.i686.rpm perl-Compress-Raw-Zlib-2.023-119.el6.i686.rpm perl-Compress-Zlib-2.020-119.el6.i686.rpm perl-Digest-SHA-5.47-119.el6.i686.rpm perl-ExtUtils-CBuilder-0.27-119.el6.i686.rpm perl-ExtUtils-Embed-1.28-119.el6.i686.rpm perl-ExtUtils-MakeMaker-6.55-119.el6.i686.rpm perl-ExtUtils-ParseXS-2.2003.0-119.el6.i686.rpm perl-File-Fetch-0.26-119.el6.i686.rpm perl-IO-Compress-Base-2.020-119.el6.i686.rpm perl-IO-Compress-Zlib-2.020-119.el6.i686.rpm perl-IO-Zlib-1.09-119.el6.i686.rpm perl-IPC-Cmd-0.56-119.el6.i686.rpm perl-Locale-Maketext-Simple-0.18-119.el6.i686.rpm perl-Log-Message-0.02-119.el6.i686.rpm perl-Log-Message-Simple-0.04-119.el6.i686.rpm perl-Module-Build-0.3500-119.el6.i686.rpm perl-Module-CoreList-2.18-119.el6.i686.rpm perl-Module-Load-0.16-119.el6.i686.rpm perl-Module-Load-Conditional-0.30-119.el6.i686.rpm perl-Module-Loaded-0.02-119.el6.i686.rpm perl-Module-Pluggable-3.90-119.el6.i686.rpm perl-Object-Accessor-0.34-119.el6.i686.rpm perl-Package-Constants-0.02-119.el6.i686.rpm perl-Params-Check-0.26-119.el6.i686.rpm perl-Parse-CPAN-Meta-1.40-119.el6.i686.rpm perl-Pod-Escapes-1.04-119.el6.i686.rpm perl-Pod-Simple-3.13-119.el6.i686.rpm perl-Term-UI-0.20-119.el6.i686.rpm perl-Test-Harness-3.17-119.el6.i686.rpm perl-Test-Simple-0.92-119.el6.i686.rpm perl-Time-HiRes-1.9721-119.el6.i686.rpm perl-Time-Piece-1.15-119.el6.i686.rpm perl-core-5.10.1-119.el6.i686.rpm perl-debuginfo-5.10.1-119.el6.i686.rpm perl-devel-5.10.1-119.el6.i686.rpm perl-libs-5.10.1-119.el6.i686.rpm perl-parent-0.221-119.el6.i686.rpm perl-suidperl-5.10.1-119.el6.i686.rpm perl-version-0.77-119.el6.i686.rpm
x86_64: perl-5.10.1-119.el6.x86_64.rpm perl-Archive-Extract-0.38-119.el6.x86_64.rpm perl-Archive-Tar-1.58-119.el6.x86_64.rpm perl-CGI-3.51-119.el6.x86_64.rpm perl-CPAN-1.9402-119.el6.x86_64.rpm perl-CPANPLUS-0.88-119.el6.x86_64.rpm perl-Compress-Raw-Zlib-2.023-119.el6.x86_64.rpm perl-Compress-Zlib-2.020-119.el6.x86_64.rpm perl-Digest-SHA-5.47-119.el6.x86_64.rpm perl-ExtUtils-CBuilder-0.27-119.el6.x86_64.rpm perl-ExtUtils-Embed-1.28-119.el6.x86_64.rpm perl-ExtUtils-MakeMaker-6.55-119.el6.x86_64.rpm perl-ExtUtils-ParseXS-2.2003.0-119.el6.x86_64.rpm perl-File-Fetch-0.26-119.el6.x86_64.rpm perl-IO-Compress-Base-2.020-119.el6.x86_64.rpm perl-IO-Compress-Zlib-2.020-119.el6.x86_64.rpm perl-IO-Zlib-1.09-119.el6.x86_64.rpm perl-IPC-Cmd-0.56-119.el6.x86_64.rpm perl-Locale-Maketext-Simple-0.18-119.el6.x86_64.rpm perl-Log-Message-0.02-119.el6.x86_64.rpm perl-Log-Message-Simple-0.04-119.el6.x86_64.rpm perl-Module-Build-0.3500-119.el6.x86_64.rpm perl-Module-CoreList-2.18-119.el6.x86_64.rpm perl-Module-Load-0.16-119.el6.x86_64.rpm perl-Module-Load-Conditional-0.30-119.el6.x86_64.rpm perl-Module-Loaded-0.02-119.el6.x86_64.rpm perl-Module-Pluggable-3.90-119.el6.x86_64.rpm perl-Object-Accessor-0.34-119.el6.x86_64.rpm perl-Package-Constants-0.02-119.el6.x86_64.rpm perl-Params-Check-0.26-119.el6.x86_64.rpm perl-Parse-CPAN-Meta-1.40-119.el6.x86_64.rpm perl-Pod-Escapes-1.04-119.el6.x86_64.rpm perl-Pod-Simple-3.13-119.el6.x86_64.rpm perl-Term-UI-0.20-119.el6.x86_64.rpm perl-Test-Harness-3.17-119.el6.x86_64.rpm perl-Test-Simple-0.92-119.el6.x86_64.rpm perl-Time-HiRes-1.9721-119.el6.x86_64.rpm perl-Time-Piece-1.15-119.el6.x86_64.rpm perl-core-5.10.1-119.el6.x86_64.rpm perl-debuginfo-5.10.1-119.el6.i686.rpm perl-debuginfo-5.10.1-119.el6.x86_64.rpm perl-devel-5.10.1-119.el6.i686.rpm perl-devel-5.10.1-119.el6.x86_64.rpm perl-libs-5.10.1-119.el6.i686.rpm perl-libs-5.10.1-119.el6.x86_64.rpm perl-parent-0.221-119.el6.x86_64.rpm perl-suidperl-5.10.1-119.el6.x86_64.rpm perl-version-0.77-119.el6.x86_64.rpm
Red Hat Enterprise Linux HPC Node (v. 6):
Source:
x86_64: perl-5.10.1-119.el6.x86_64.rpm perl-Archive-Extract-0.38-119.el6.x86_64.rpm perl-Archive-Tar-1.58-119.el6.x86_64.rpm perl-CGI-3.51-119.el6.x86_64.rpm perl-CPAN-1.9402-119.el6.x86_64.rpm perl-CPANPLUS-0.88-119.el6.x86_64.rpm perl-Compress-Raw-Zlib-2.023-119.el6.x86_64.rpm perl-Compress-Zlib-2.020-119.el6.x86_64.rpm perl-Digest-SHA-5.47-119.el6.x86_64.rpm perl-ExtUtils-CBuilder-0.27-119.el6.x86_64.rpm perl-ExtUtils-Embed-1.28-119.el6.x86_64.rpm perl-ExtUtils-MakeMaker-6.55-119.el6.x86_64.rpm perl-ExtUtils-ParseXS-2.2003.0-119.el6.x86_64.rpm perl-File-Fetch-0.26-119.el6.x86_64.rpm perl-IO-Compress-Base-2.020-119.el6.x86_64.rpm perl-IO-Compress-Zlib-2.020-119.el6.x86_64.rpm perl-IO-Zlib-1.09-119.el6.x86_64.rpm perl-IPC-Cmd-0.56-119.el6.x86_64.rpm perl-Locale-Maketext-Simple-0.18-119.el6.x86_64.rpm perl-Log-Message-0.02-119.el6.x86_64.rpm perl-Log-Message-Simple-0.04-119.el6.x86_64.rpm perl-Module-Build-0.3500-119.el6.x86_64.rpm perl-Module-CoreList-2.18-119.el6.x86_64.rpm perl-Module-Load-0.16-119.el6.x86_64.rpm perl-Module-Load-Conditional-0.30-119.el6.x86_64.rpm perl-Module-Loaded-0.02-119.el6.x86_64.rpm perl-Module-Pluggable-3.90-119.el6.x86_64.rpm perl-Object-Accessor-0.34-119.el6.x86_64.rpm perl-Package-Constants-0.02-119.el6.x86_64.rpm perl-Params-Check-0.26-119.el6.x86_64.rpm perl-Parse-CPAN-Meta-1.40-119.el6.x86_64.rpm perl-Pod-Escapes-1.04-119.el6.x86_64.rpm perl-Pod-Simple-3.13-119.el6.x86_64.rpm perl-Term-UI-0.20-119.el6.x86_64.rpm perl-Test-Harness-3.17-119.el6.x86_64.rpm perl-Test-Simple-0.92-119.el6.x86_64.rpm perl-Time-HiRes-1.9721-119.el6.x86_64.rpm perl-Time-Piece-1.15-119.el6.x86_64.rpm perl-core-5.10.1-119.el6.x86_64.rpm perl-debuginfo-5.10.1-119.el6.i686.rpm perl-debuginfo-5.10.1-119.el6.x86_64.rpm perl-devel-5.10.1-119.el6.i686.rpm perl-devel-5.10.1-119.el6.x86_64.rpm perl-libs-5.10.1-119.el6.i686.rpm perl-libs-5.10.1-119.el6.x86_64.rpm perl-parent-0.221-119.el6.x86_64.rpm perl-suidperl-5.10.1-119.el6.x86_64.rpm perl-version-0.77-119.el6.x86_64.rpm
Red Hat Enterprise Linux Server (v. 6):
Source:
i386: perl-5.10.1-119.el6.i686.rpm perl-Archive-Extract-0.38-119.el6.i686.rpm perl-Archive-Tar-1.58-119.el6.i686.rpm perl-CGI-3.51-119.el6.i686.rpm perl-CPAN-1.9402-119.el6.i686.rpm perl-CPANPLUS-0.88-119.el6.i686.rpm perl-Compress-Raw-Zlib-2.023-119.el6.i686.rpm perl-Compress-Zlib-2.020-119.el6.i686.rpm perl-Digest-SHA-5.47-119.el6.i686.rpm perl-ExtUtils-CBuilder-0.27-119.el6.i686.rpm perl-ExtUtils-Embed-1.28-119.el6.i686.rpm perl-ExtUtils-MakeMaker-6.55-119.el6.i686.rpm perl-ExtUtils-ParseXS-2.2003.0-119.el6.i686.rpm perl-File-Fetch-0.26-119.el6.i686.rpm perl-IO-Compress-Base-2.020-119.el6.i686.rpm perl-IO-Compress-Zlib-2.020-119.el6.i686.rpm perl-IO-Zlib-1.09-119.el6.i686.rpm perl-IPC-Cmd-0.56-119.el6.i686.rpm perl-Locale-Maketext-Simple-0.18-119.el6.i686.rpm perl-Log-Message-0.02-119.el6.i686.rpm perl-Log-Message-Simple-0.04-119.el6.i686.rpm perl-Module-Build-0.3500-119.el6.i686.rpm perl-Module-CoreList-2.18-119.el6.i686.rpm perl-Module-Load-0.16-119.el6.i686.rpm perl-Module-Load-Conditional-0.30-119.el6.i686.rpm perl-Module-Loaded-0.02-119.el6.i686.rpm perl-Module-Pluggable-3.90-119.el6.i686.rpm perl-Object-Accessor-0.34-119.el6.i686.rpm perl-Package-Constants-0.02-119.el6.i686.rpm perl-Params-Check-0.26-119.el6.i686.rpm perl-Parse-CPAN-Meta-1.40-119.el6.i686.rpm perl-Pod-Escapes-1.04-119.el6.i686.rpm perl-Pod-Simple-3.13-119.el6.i686.rpm perl-Term-UI-0.20-119.el6.i686.rpm perl-Test-Harness-3.17-119.el6.i686.rpm perl-Test-Simple-0.92-119.el6.i686.rpm perl-Time-HiRes-1.9721-119.el6.i686.rpm perl-Time-Piece-1.15-119.el6.i686.rpm perl-core-5.10.1-119.el6.i686.rpm perl-debuginfo-5.10.1-119.el6.i686.rpm perl-devel-5.10.1-119.el6.i686.rpm perl-libs-5.10.1-119.el6.i686.rpm perl-parent-0.221-119.el6.i686.rpm perl-suidperl-5.10.1-119.el6.i686.rpm perl-version-0.77-119.el6.i686.rpm
ppc64: perl-5.10.1-119.el6.ppc64.rpm perl-Archive-Extract-0.38-119.el6.ppc64.rpm perl-Archive-Tar-1.58-119.el6.ppc64.rpm perl-CGI-3.51-119.el6.ppc64.rpm perl-CPAN-1.9402-119.el6.ppc64.rpm perl-CPANPLUS-0.88-119.el6.ppc64.rpm perl-Compress-Raw-Zlib-2.023-119.el6.ppc64.rpm perl-Compress-Zlib-2.020-119.el6.ppc64.rpm perl-Digest-SHA-5.47-119.el6.ppc64.rpm perl-ExtUtils-CBuilder-0.27-119.el6.ppc64.rpm perl-ExtUtils-Embed-1.28-119.el6.ppc64.rpm perl-ExtUtils-MakeMaker-6.55-119.el6.ppc64.rpm perl-ExtUtils-ParseXS-2.2003.0-119.el6.ppc64.rpm perl-File-Fetch-0.26-119.el6.ppc64.rpm perl-IO-Compress-Base-2.020-119.el6.ppc64.rpm perl-IO-Compress-Zlib-2.020-119.el6.ppc64.rpm perl-IO-Zlib-1.09-119.el6.ppc64.rpm perl-IPC-Cmd-0.56-119.el6.ppc64.rpm perl-Locale-Maketext-Simple-0.18-119.el6.ppc64.rpm perl-Log-Message-0.02-119.el6.ppc64.rpm perl-Log-Message-Simple-0.04-119.el6.ppc64.rpm perl-Module-Build-0.3500-119.el6.ppc64.rpm perl-Module-CoreList-2.18-119.el6.ppc64.rpm perl-Module-Load-0.16-119.el6.ppc64.rpm perl-Module-Load-Conditional-0.30-119.el6.ppc64.rpm perl-Module-Loaded-0.02-119.el6.ppc64.rpm perl-Module-Pluggable-3.90-119.el6.ppc64.rpm perl-Object-Accessor-0.34-119.el6.ppc64.rpm perl-Package-Constants-0.02-119.el6.ppc64.rpm perl-Params-Check-0.26-119.el6.ppc64.rpm perl-Parse-CPAN-Meta-1.40-119.el6.ppc64.rpm perl-Pod-Escapes-1.04-119.el6.ppc64.rpm perl-Pod-Simple-3.13-119.el6.ppc64.rpm perl-Term-UI-0.20-119.el6.ppc64.rpm perl-Test-Harness-3.17-119.el6.ppc64.rpm perl-Test-Simple-0.92-119.el6.ppc64.rpm perl-Time-HiRes-1.9721-119.el6.ppc64.rpm perl-Time-Piece-1.15-119.el6.ppc64.rpm perl-core-5.10.1-119.el6.ppc64.rpm perl-debuginfo-5.10.1-119.el6.ppc.rpm perl-debuginfo-5.10.1-119.el6.ppc64.rpm perl-devel-5.10.1-119.el6.ppc.rpm perl-devel-5.10.1-119.el6.ppc64.rpm perl-libs-5.10.1-119.el6.ppc.rpm perl-libs-5.10.1-119.el6.ppc64.rpm perl-parent-0.221-119.el6.ppc64.rpm perl-suidperl-5.10.1-119.el6.ppc64.rpm perl-version-0.77-119.el6.ppc64.rpm
s390x: perl-5.10.1-119.el6.s390x.rpm perl-Archive-Extract-0.38-119.el6.s390x.rpm perl-Archive-Tar-1.58-119.el6.s390x.rpm perl-CGI-3.51-119.el6.s390x.rpm perl-CPAN-1.9402-119.el6.s390x.rpm perl-CPANPLUS-0.88-119.el6.s390x.rpm perl-Compress-Raw-Zlib-2.023-119.el6.s390x.rpm perl-Compress-Zlib-2.020-119.el6.s390x.rpm perl-Digest-SHA-5.47-119.el6.s390x.rpm perl-ExtUtils-CBuilder-0.27-119.el6.s390x.rpm perl-ExtUtils-Embed-1.28-119.el6.s390x.rpm perl-ExtUtils-MakeMaker-6.55-119.el6.s390x.rpm perl-ExtUtils-ParseXS-2.2003.0-119.el6.s390x.rpm perl-File-Fetch-0.26-119.el6.s390x.rpm perl-IO-Compress-Base-2.020-119.el6.s390x.rpm perl-IO-Compress-Zlib-2.020-119.el6.s390x.rpm perl-IO-Zlib-1.09-119.el6.s390x.rpm perl-IPC-Cmd-0.56-119.el6.s390x.rpm perl-Locale-Maketext-Simple-0.18-119.el6.s390x.rpm perl-Log-Message-0.02-119.el6.s390x.rpm perl-Log-Message-Simple-0.04-119.el6.s390x.rpm perl-Module-Build-0.3500-119.el6.s390x.rpm perl-Module-CoreList-2.18-119.el6.s390x.rpm perl-Module-Load-0.16-119.el6.s390x.rpm perl-Module-Load-Conditional-0.30-119.el6.s390x.rpm perl-Module-Loaded-0.02-119.el6.s390x.rpm perl-Module-Pluggable-3.90-119.el6.s390x.rpm perl-Object-Accessor-0.34-119.el6.s390x.rpm perl-Package-Constants-0.02-119.el6.s390x.rpm perl-Params-Check-0.26-119.el6.s390x.rpm perl-Parse-CPAN-Meta-1.40-119.el6.s390x.rpm perl-Pod-Escapes-1.04-119.el6.s390x.rpm perl-Pod-Simple-3.13-119.el6.s390x.rpm perl-Term-UI-0.20-119.el6.s390x.rpm perl-Test-Harness-3.17-119.el6.s390x.rpm perl-Test-Simple-0.92-119.el6.s390x.rpm perl-Time-HiRes-1.9721-119.el6.s390x.rpm perl-Time-Piece-1.15-119.el6.s390x.rpm perl-core-5.10.1-119.el6.s390x.rpm perl-debuginfo-5.10.1-119.el6.s390.rpm perl-debuginfo-5.10.1-119.el6.s390x.rpm perl-devel-5.10.1-119.el6.s390.rpm perl-devel-5.10.1-119.el6.s390x.rpm perl-libs-5.10.1-119.el6.s390.rpm perl-libs-5.10.1-119.el6.s390x.rpm perl-parent-0.221-119.el6.s390x.rpm perl-suidperl-5.10.1-119.el6.s390x.rpm perl-version-0.77-119.el6.s390x.rpm
x86_64: perl-5.10.1-119.el6.x86_64.rpm perl-Archive-Extract-0.38-119.el6.x86_64.rpm perl-Archive-Tar-1.58-119.el6.x86_64.rpm perl-CGI-3.51-119.el6.x86_64.rpm perl-CPAN-1.9402-119.el6.x86_64.rpm perl-CPANPLUS-0.88-119.el6.x86_64.rpm perl-Compress-Raw-Zlib-2.023-119.el6.x86_64.rpm perl-Compress-Zlib-2.020-119.el6.x86_64.rpm perl-Digest-SHA-5.47-119.el6.x86_64.rpm perl-ExtUtils-CBuilder-0.27-119.el6.x86_64.rpm perl-ExtUtils-Embed-1.28-119.el6.x86_64.rpm perl-ExtUtils-MakeMaker-6.55-119.el6.x86_64.rpm perl-ExtUtils-ParseXS-2.2003.0-119.el6.x86_64.rpm perl-File-Fetch-0.26-119.el6.x86_64.rpm perl-IO-Compress-Base-2.020-119.el6.x86_64.rpm perl-IO-Compress-Zlib-2.020-119.el6.x86_64.rpm perl-IO-Zlib-1.09-119.el6.x86_64.rpm perl-IPC-Cmd-0.56-119.el6.x86_64.rpm perl-Locale-Maketext-Simple-0.18-119.el6.x86_64.rpm perl-Log-Message-0.02-119.el6.x86_64.rpm perl-Log-Message-Simple-0.04-119.el6.x86_64.rpm perl-Module-Build-0.3500-119.el6.x86_64.rpm perl-Module-CoreList-2.18-119.el6.x86_64.rpm perl-Module-Load-0.16-119.el6.x86_64.rpm perl-Module-Load-Conditional-0.30-119.el6.x86_64.rpm perl-Module-Loaded-0.02-119.el6.x86_64.rpm perl-Module-Pluggable-3.90-119.el6.x86_64.rpm perl-Object-Accessor-0.34-119.el6.x86_64.rpm perl-Package-Constants-0.02-119.el6.x86_64.rpm perl-Params-Check-0.26-119.el6.x86_64.rpm perl-Parse-CPAN-Meta-1.40-119.el6.x86_64.rpm perl-Pod-Escapes-1.04-119.el6.x86_64.rpm perl-Pod-Simple-3.13-119.el6.x86_64.rpm perl-Term-UI-0.20-119.el6.x86_64.rpm perl-Test-Harness-3.17-119.el6.x86_64.rpm perl-Test-Simple-0.92-119.el6.x86_64.rpm perl-Time-HiRes-1.9721-119.el6.x86_64.rpm perl-Time-Piece-1.15-119.el6.x86_64.rpm perl-core-5.10.1-119.el6.x86_64.rpm perl-debuginfo-5.10.1-119.el6.i686.rpm perl-debuginfo-5.10.1-119.el6.x86_64.rpm perl-devel-5.10.1-119.el6.i686.rpm perl-devel-5.10.1-119.el6.x86_64.rpm perl-libs-5.10.1-119.el6.i686.rpm perl-libs-5.10.1-119.el6.x86_64.rpm perl-parent-0.221-119.el6.x86_64.rpm perl-suidperl-5.10.1-119.el6.x86_64.rpm perl-version-0.77-119.el6.x86_64.rpm
Red Hat Enterprise Linux Workstation (v. 6):
Source:
i386: perl-5.10.1-119.el6.i686.rpm perl-Archive-Extract-0.38-119.el6.i686.rpm perl-Archive-Tar-1.58-119.el6.i686.rpm perl-CGI-3.51-119.el6.i686.rpm perl-CPAN-1.9402-119.el6.i686.rpm perl-CPANPLUS-0.88-119.el6.i686.rpm perl-Compress-Raw-Zlib-2.023-119.el6.i686.rpm perl-Compress-Zlib-2.020-119.el6.i686.rpm perl-Digest-SHA-5.47-119.el6.i686.rpm perl-ExtUtils-CBuilder-0.27-119.el6.i686.rpm perl-ExtUtils-Embed-1.28-119.el6.i686.rpm perl-ExtUtils-MakeMaker-6.55-119.el6.i686.rpm perl-ExtUtils-ParseXS-2.2003.0-119.el6.i686.rpm perl-File-Fetch-0.26-119.el6.i686.rpm perl-IO-Compress-Base-2.020-119.el6.i686.rpm perl-IO-Compress-Zlib-2.020-119.el6.i686.rpm perl-IO-Zlib-1.09-119.el6.i686.rpm perl-IPC-Cmd-0.56-119.el6.i686.rpm perl-Locale-Maketext-Simple-0.18-119.el6.i686.rpm perl-Log-Message-0.02-119.el6.i686.rpm perl-Log-Message-Simple-0.04-119.el6.i686.rpm perl-Module-Build-0.3500-119.el6.i686.rpm perl-Module-CoreList-2.18-119.el6.i686.rpm perl-Module-Load-0.16-119.el6.i686.rpm perl-Module-Load-Conditional-0.30-119.el6.i686.rpm perl-Module-Loaded-0.02-119.el6.i686.rpm perl-Module-Pluggable-3.90-119.el6.i686.rpm perl-Object-Accessor-0.34-119.el6.i686.rpm perl-Package-Constants-0.02-119.el6.i686.rpm perl-Params-Check-0.26-119.el6.i686.rpm perl-Parse-CPAN-Meta-1.40-119.el6.i686.rpm perl-Pod-Escapes-1.04-119.el6.i686.rpm perl-Pod-Simple-3.13-119.el6.i686.rpm perl-Term-UI-0.20-119.el6.i686.rpm perl-Test-Harness-3.17-119.el6.i686.rpm perl-Test-Simple-0.92-119.el6.i686.rpm perl-Time-HiRes-1.9721-119.el6.i686.rpm perl-Time-Piece-1.15-119.el6.i686.rpm perl-core-5.10.1-119.el6.i686.rpm perl-debuginfo-5.10.1-119.el6.i686.rpm perl-devel-5.10.1-119.el6.i686.rpm perl-libs-5.10.1-119.el6.i686.rpm perl-parent-0.221-119.el6.i686.rpm perl-suidperl-5.10.1-119.el6.i686.rpm perl-version-0.77-119.el6.i686.rpm
x86_64: perl-5.10.1-119.el6.x86_64.rpm perl-Archive-Extract-0.38-119.el6.x86_64.rpm perl-Archive-Tar-1.58-119.el6.x86_64.rpm perl-CGI-3.51-119.el6.x86_64.rpm perl-CPAN-1.9402-119.el6.x86_64.rpm perl-CPANPLUS-0.88-119.el6.x86_64.rpm perl-Compress-Raw-Zlib-2.023-119.el6.x86_64.rpm perl-Compress-Zlib-2.020-119.el6.x86_64.rpm perl-Digest-SHA-5.47-119.el6.x86_64.rpm perl-ExtUtils-CBuilder-0.27-119.el6.x86_64.rpm perl-ExtUtils-Embed-1.28-119.el6.x86_64.rpm perl-ExtUtils-MakeMaker-6.55-119.el6.x86_64.rpm perl-ExtUtils-ParseXS-2.2003.0-119.el6.x86_64.rpm perl-File-Fetch-0.26-119.el6.x86_64.rpm perl-IO-Compress-Base-2.020-119.el6.x86_64.rpm perl-IO-Compress-Zlib-2.020-119.el6.x86_64.rpm perl-IO-Zlib-1.09-119.el6.x86_64.rpm perl-IPC-Cmd-0.56-119.el6.x86_64.rpm perl-Locale-Maketext-Simple-0.18-119.el6.x86_64.rpm perl-Log-Message-0.02-119.el6.x86_64.rpm perl-Log-Message-Simple-0.04-119.el6.x86_64.rpm perl-Module-Build-0.3500-119.el6.x86_64.rpm perl-Module-CoreList-2.18-119.el6.x86_64.rpm perl-Module-Load-0.16-119.el6.x86_64.rpm perl-Module-Load-Conditional-0.30-119.el6.x86_64.rpm perl-Module-Loaded-0.02-119.el6.x86_64.rpm perl-Module-Pluggable-3.90-119.el6.x86_64.rpm perl-Object-Accessor-0.34-119.el6.x86_64.rpm perl-Package-Constants-0.02-119.el6.x86_64.rpm perl-Params-Check-0.26-119.el6.x86_64.rpm perl-Parse-CPAN-Meta-1.40-119.el6.x86_64.rpm perl-Pod-Escapes-1.04-119.el6.x86_64.rpm perl-Pod-Simple-3.13-119.el6.x86_64.rpm perl-Term-UI-0.20-119.el6.x86_64.rpm perl-Test-Harness-3.17-119.el6.x86_64.rpm perl-Test-Simple-0.92-119.el6.x86_64.rpm perl-Time-HiRes-1.9721-119.el6.x86_64.rpm perl-Time-Piece-1.15-119.el6.x86_64.rpm perl-core-5.10.1-119.el6.x86_64.rpm perl-debuginfo-5.10.1-119.el6.i686.rpm perl-debuginfo-5.10.1-119.el6.x86_64.rpm perl-devel-5.10.1-119.el6.i686.rpm perl-devel-5.10.1-119.el6.x86_64.rpm perl-libs-5.10.1-119.el6.i686.rpm perl-libs-5.10.1-119.el6.x86_64.rpm perl-parent-0.221-119.el6.x86_64.rpm perl-suidperl-5.10.1-119.el6.x86_64.rpm perl-version-0.77-119.el6.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package


Severity
Advisory ID: RHSA-2011:0558-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2011:0558.html
Issued Date: : 2011-05-19
CVE Names: CVE-2010-2761 CVE-2010-4410 CVE-2011-1487

Topic

Updated perl packages that fix three security issues and several bugs arenow available for Red Hat Enterprise Linux 6.The Red Hat Security Response Team has rated this update as having moderatesecurity impact. Common Vulnerability Scoring System (CVSS) base scores,which give detailed severity ratings, are available for each vulnerabilityfrom the CVE links in the References section.


Topic


 

Relevant Releases Architectures

Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64

Red Hat Enterprise Linux HPC Node (v. 6) - x86_64

Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64

Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64


Bugs Fixed

609492 - unknown option fork with prove

626330 - Sending signal to thread without signal handler in thread causes perl to segfault

640716 - Let perl-CPAN Require: perl(Digest::SHA)

640720 - Thread desctructor leaks

640729 - NDBM_File module is missing in perl core

658976 - perl-CGI, perl-CGI-Simple: CVE-2010-2761 - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting

692898 - CVE-2011-1487 perl: lc(), uc() routines are laundering tainted data


Related News