The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-CGIUpgrade perl-Time-PieceUpgrade perl-parentUpgrade perl-Archive-ExtractUpgrade perl-ExtUtils-CBuilderUpgrade perl-Archive-TarUpgrade perl-IO-Compress-ZlibUpgrade perl-ExtUtils-EmbedUpgrade perl-Log-Message-SimpleUpgrade perl-Log-MessageUpgrade perl-Locale-Maketext-SimpleUpgrade perl-CPANPLUSUpgrade perl-coreUpgrade perl-Params-CheckUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Module-CoreListUpgrade perl-IO-Compress-Bzip2Upgrade perl-Compress-Raw-ZlibUpgrade perl-Object-AccessorUpgrade perl-Term-UIUpgrade perl-Module-PluggableUpgrade perl-Digest-SHAUpgrade perl-Time-HiResUpgrade perl-Pod-EscapesUpgrade perl-Package-ConstantsUpgrade perl-File-FetchUpgrade perl-develUpgrade perl-Module-LoadedUpgrade perl-IO-ZlibUpgrade perl-libsUpgrade perl-Test-SimpleUpgrade perl-IPC-CmdUpgrade perl-Module-Load-ConditionalUpgrade perl-Module-LoadUpgrade perl-ExtUtils-ParseXSUpgrade perl-suidperlUpgrade perl-Compress-ZlibUpgrade perl-Pod-SimpleUpgrade perl-IO-Compress-BaseUpgrade perl-CPANUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Parse-CPAN-MetaUpgrade perl-versionUpgrade perlUpgrade perl-Test-HarnessUpgrade perl-Module-Build | Dec 1, 2016 | Jan 4, 2013 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Jan 4, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 15, 2015 |
| Gentoo Linux | — | Upgrade dev-lang/perl.Upgrade perl-core/Locale-Maketext. | Oct 30, 2017 | Jan 4, 2013 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory4 | Nov 30, 2017 | Jan 4, 2013 |
| Oracle Solaris | — | Upgrade runtime/perl-584 to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2Upgrade runtime/perl-584/extra to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade runtime/perl-512 to version 5.12.5-0.175.1.7.0.2.0 on Solaris 11.1 | May 29, 2017 | Jan 4, 2013 |
| Oracle_linux | — | Upgrade perl-Archive-TarUpgrade perl-CPANUpgrade perl-Parse-CPAN-MetaUpgrade perl-Pod-EscapesUpgrade perl-Module-Load-ConditionalUpgrade perl-IO-Compress-ZlibUpgrade perl-versionUpgrade perl-CPANPLUSUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Term-UIUpgrade perl-File-FetchUpgrade perl-ExtUtils-CBuilderUpgrade perl-IO-Compress-BaseUpgrade perl-Log-Message-SimpleUpgrade perl-Module-LoadedUpgrade perl-IPC-CmdUpgrade perl-Pod-SimpleUpgrade perl-Archive-ExtractUpgrade perl-Module-CoreListUpgrade perl-Compress-ZlibUpgrade perl-Params-CheckUpgrade perl-parentUpgrade perl-IO-Compress-Bzip2Upgrade perl-Time-HiResUpgrade perl-develUpgrade perl-Test-HarnessUpgrade perl-ExtUtils-EmbedUpgrade perl-Digest-SHAUpgrade perl-Time-PieceUpgrade perl-coreUpgrade perl-Test-SimpleUpgrade perl-Log-MessageUpgrade perl-Module-PluggableUpgrade perl-CGIUpgrade perl-suidperlUpgrade perl-Module-LoadUpgrade perl-Object-AccessorUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Compress-Raw-ZlibUpgrade perl-ExtUtils-MakeMakerUpgrade perl-IO-ZlibUpgrade perl-Package-ConstantsUpgrade perlUpgrade perl-ExtUtils-ParseXSUpgrade perl-Module-BuildUpgrade perl-libs | Oct 16, 2024 | Jan 4, 2013 |
| Suse | — | Upgrade perl-x86Upgrade perl-docUpgrade perl-base-32bitUpgrade perlUpgrade perl-Test-SimpleUpgrade perl-Module-BuildUpgrade perl-32bitUpgrade perl-base | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade perl-modules | Nov 8, 2024 | Jan 4, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub