The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving subroutine references and delayed execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-suidperlUpgrade perl | Dec 1, 2016 | May 19, 2010 |
| Debian | — | Upgrade perl | Jul 30, 2024 | May 19, 2010 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server.Upgrade dev-db/postgresql.Upgrade dev-db/postgresql-base. | Oct 30, 2017 | May 19, 2010 |
| Oracle_linux | — | Upgrade perl-suidperlUpgrade perl | Oct 16, 2024 | May 19, 2010 |
| Suse | — | Upgrade perl-base-32bitUpgrade perl-x86Upgrade perl-docUpgrade perlUpgrade perl-32bitUpgrade perl-Test-SimpleUpgrade perl-Module-BuildUpgrade perl-base | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | May 19, 2010 |
| Vmsa 2010 0013 | — | Upgrade VMware ESX 4.0 to build number 294855Upgrade VMware ESX 3.5 to build number 283373 | Nov 19, 2010 | May 19, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub