rh-perl524-perl-5.24.0-380.AXS4

Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

* perl: heap write overflow in regcomp.c (CVE-2018-6797)

* perl: heap read overflow in regexec.c (CVE-2018-6798)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Asianux would like to thank Perl 5 Porters for reporting these issues. Upstream acknowledges Brian Carpenter as the original reporter of CVE-2018-6797; and Nguyen Duc Manh as the original reporter of CVE-2018-6798.

CVE-2018-6797
An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written.
CVE-2018-6798
An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.