========================================================================== Ubuntu Security Notice USN-3834-1 December 03, 2018 perl vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Perl. Software Description: - perl: Practical Extraction and Report Language Details: Jayakrishna Menon discovered that Perl incorrectly handled Perl_my_setenv. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-18311) Eiichi Tsukata discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 18.10. (CVE-2018-18312) Eiichi Tsukata discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service. (CVE-2018-18313) Jakub Wilk discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 18.10. (CVE-2018-18314) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: perl 5.26.2-7ubuntu0.1 Ubuntu 18.04 LTS: perl 5.26.1-6ubuntu0.3 Ubuntu 16.04 LTS: perl 5.22.1-9ubuntu0.6 Ubuntu 14.04 LTS: perl 5.18.2-2ubuntu1.7 In general, a standard system update will make all the necessary changes. References: https://usn.ubuntu.com/usn/usn-3834-1 CVE-2018-18311, CVE-2018-18312, CVE-2018-18313, CVE-2018-18314 Package Information: https://launchpad.net/ubuntu/+source/perl/5.26.2-7ubuntu0.1 https://launchpad.net/ubuntu/+source/perl/5.26.1-6ubuntu0.3 https://launchpad.net/ubuntu/+source/perl/5.22.1-9ubuntu0.6 https://launchpad.net/ubuntu/+source/perl/5.18.2-2ubuntu1.7