Withdrawn by the publisher.

Affected: CleanStart: perl

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details.

Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.

Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.

perl-32bit-5.34.0-1.1 on GA media

perl: possible arbitrary code execution via Locale::Maketext perl: regexp matching hangs indefinitely on illegal UTF-8 input perl: ambiguous environment variables handling perl: Heap buffer overflow in regular expression compiler perl: Buffer over-read in regular expression parser perl: heap buffer overflow in pp_pack.c perl: heap-based buffer overflow in regular expression compiler leads to DoS perl: stack-based crash in S_find_uninit_var()

Security update for perl

Affected: Ubuntu:14.04:LTS: perl, Ubuntu:16.04:LTS: perl

Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.