Security update for perl SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:1992-1 Final 1 1 2018-07-19T07:39:44Z current 2018-07-19T07:39:44Z 2018-07-19T07:39:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for perl This update for perl fixes the following issues: - CVE-2018-12015: The Archive::Tar module allowed remote attackers to bypass a directory-traversal protection mechanism and overwrite arbitrary files (bsc#1096718). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-perl-13695,sleposp3-perl-13695,slessp3-perl-13695,slessp4-perl-13695 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20181992-1/ Link for SUSE-SU-2018:1992-1 https://lists.suse.com/pipermail/sle-security-updates/2018-July/004286.html E-Mail link for SUSE-SU-2018:1992-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1096718 SUSE Bug 1096718 https://www.suse.com/security/cve/CVE-2018-12015/ SUSE CVE CVE-2018-12015 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 perl-base-32bit-5.10.0-64.81.13.1 perl-5.10.0-64.81.13.1 perl-Module-Build-0.2808.01-0.81.13.1 perl-Test-Simple-0.72-0.81.13.1 perl-base-5.10.0-64.81.13.1 perl-doc-5.10.0-64.81.13.1 perl-32bit-5.10.0-64.81.13.1 perl-x86-5.10.0-64.81.13.1 perl-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 perl-Module-Build-0.2808.01-0.81.13.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 perl-Test-Simple-0.72-0.81.13.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 perl-base-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 perl-doc-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 perl-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS perl-32bit-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS perl-Module-Build-0.2808.01-0.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS perl-Test-Simple-0.72-0.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS perl-base-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS perl-doc-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS perl-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA perl-32bit-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA perl-Module-Build-0.2808.01-0.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA perl-Test-Simple-0.72-0.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA perl-base-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA perl-doc-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA perl-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 perl-32bit-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 perl-Module-Build-0.2808.01-0.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 perl-Test-Simple-0.72-0.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 perl-base-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 perl-doc-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 perl-x86-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 perl-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 perl-32bit-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 perl-Module-Build-0.2808.01-0.81.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 perl-Test-Simple-0.72-0.81.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 perl-base-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 perl-doc-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 perl-x86-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 perl-base-32bit-5.10.0-64.81.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name. CVE-2018-12015 SUSE Linux Enterprise Point of Sale 11 SP3:perl-5.10.0-64.81.13.1 SUSE Linux Enterprise Point of Sale 11 SP3:perl-Module-Build-0.2808.01-0.81.13.1 SUSE Linux Enterprise Point of Sale 11 SP3:perl-Test-Simple-0.72-0.81.13.1 SUSE Linux Enterprise Point of Sale 11 SP3:perl-base-5.10.0-64.81.13.1 SUSE Linux Enterprise Point of Sale 11 SP3:perl-doc-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP3-LTSS:perl-32bit-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP3-LTSS:perl-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP3-LTSS:perl-Module-Build-0.2808.01-0.81.13.1 SUSE Linux Enterprise Server 11 SP3-LTSS:perl-Test-Simple-0.72-0.81.13.1 SUSE Linux Enterprise Server 11 SP3-LTSS:perl-base-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP3-LTSS:perl-doc-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:perl-32bit-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:perl-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:perl-Module-Build-0.2808.01-0.81.13.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:perl-Test-Simple-0.72-0.81.13.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:perl-base-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:perl-doc-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP4:perl-32bit-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP4:perl-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP4:perl-Module-Build-0.2808.01-0.81.13.1 SUSE Linux Enterprise Server 11 SP4:perl-Test-Simple-0.72-0.81.13.1 SUSE Linux Enterprise Server 11 SP4:perl-base-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP4:perl-doc-5.10.0-64.81.13.1 SUSE Linux Enterprise Server 11 SP4:perl-x86-5.10.0-64.81.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-32bit-5.10.0-64.81.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-5.10.0-64.81.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-Module-Build-0.2808.01-0.81.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-Test-Simple-0.72-0.81.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-base-5.10.0-64.81.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-doc-5.10.0-64.81.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-x86-5.10.0-64.81.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-base-32bit-5.10.0-64.81.13.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181992-1/ https://www.suse.com/security/cve/CVE-2018-12015.html CVE-2018-12015 https://bugzilla.suse.com/1096718 SUSE Bug 1096718 https://bugzilla.suse.com/1099497 SUSE Bug 1099497 https://bugzilla.suse.com/1099507 SUSE Bug 1099507 https://bugzilla.suse.com/1106717 SUSE Bug 1106717