Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.

perl: possible arbitrary code execution via Locale::Maketext perl: regexp matching hangs indefinitely on illegal UTF-8 input perl: ambiguous environment variables handling perl: Heap buffer overflow in regular expression compiler perl: Buffer over-read in regular expression parser perl: heap buffer overflow in pp_pack.c perl: heap-based buffer overflow in regular expression compiler leads to DoS perl: stack-based crash in S_find_uninit_var()

Security update for perl

Affected: Ubuntu:14.04:LTS: perl

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.