The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl-pathtools. | Aug 30, 2017 | Jan 13, 2016 |
| Debian | — | Upgrade perl | Feb 2, 2016 | Jan 11, 2016 |
| Freebsd | — | Upgrade perl5.22Upgrade perl5-develUpgrade p5-PathToolsUpgrade perl5.20Upgrade perl5 | Dec 10, 2025 | Jan 12, 2016 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Oct 30, 2017 | Jan 13, 2016 |
| Oracle Solaris | — | Upgrade library/perl-5/perl-x11-protocol-512 to version 0.56-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-namespacesupport-522 to version 1.11-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-libxml-threaded-512 to version 2.121-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/net-ssleay-522 to version 1.78-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-simple-threaded-512 to version 2.18-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/database to version 1.636-0.175.3.19.0.1.0 on Solaris 11.3Upgrade runtime/perl-threaded-512 to version 5.12.5-0.175.3.19.0.2.0 on Solaris 11.3Upgrade runtime/perl-512 to version 5.12.5-0.175.3.19.0.2.0 on Solaris 11.3Upgrade library/perl-5/xml-parser-522 to version 2.44-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/pmtools-512 to version 1.10-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-522 to version 0.99-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/authen-pam-threaded-512 to version 0.16-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/CGI to version 4.28-0.175.3.19.0.1.0 on Solaris 11.3Upgrade terminal/cssh-522 to version 4.2.1-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/database-522 to version 1.636-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/perl-x11-protocol to version 0.56-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-base to version 1.8-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/pmtools to version 1.10-0.175.3.19.0.1.0 on Solaris 11.3Upgrade runtime/perl-522 to version 5.22.1-0.175.3.19.0.1.0 on Solaris 11.3Upgrade terminal/cssh-512 to version 4.2.1-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl5/perl-tk-522 to version 804.33-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-libxml-512 to version 2.121-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-namespacesupport-512 to version 1.11-0.175.3.19.0.1.0 on Solaris 11.3Upgrade terminal/cssh to version 4.2.1-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax to version 0.99-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/authen-pam-512 to version 0.16-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/database-512 to version 1.636-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/authen-pam to version 5.8.4-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/net-ssleay-584 to version 1.78-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/CGI-522 to version 4.28-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-libxml to version 2.121-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-namespacesupport to version 1.11-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl5/perl-tk to version 804.33-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/pmtools-522 to version 1.10-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/authen-pam-584 to version 0.16-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-base-threaded-512 to version 1.8-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-512 to version 0.99-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-parser-584 to version 2.44-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-libxml-522 to version 2.121-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl5/perl-tk-512 to version 804.33-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/pmtools-584 to version 1.10-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-base-512 to version 1.8-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-namespacesupport-threaded-512 to version 1.11-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/net-ssleay to version 1.78-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/database-584 to version 1.636-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/net-ssleay-512 to version 1.78-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-threaded-512 to version 0.99-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/authen-pam-522 to version 0.16-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-simple-512 to version 2.18-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-simple-584 to version 2.18-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/perl-x11-protocol-522 to version 0.56-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-base-522 to version 1.8-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-simple to version 2.18-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-parser to version 5.12.1-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-parser-threaded-512 to version 2.44-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-parser-512 to version 2.44-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-simple-522 to version 2.18-0.175.3.19.0.1.0 on Solaris 11.3 | May 29, 2017 | Jan 13, 2016 |
| Suse | — | Upgrade perl-base-debuginfoUpgrade perl-32bitUpgrade perl-debuginfoUpgrade perl-debuginfo-32bitUpgrade perl-base-32bitUpgrade perl-baseUpgrade perl-debugsourceUpgrade perl-base-debuginfo-32bitUpgrade perlUpgrade perl-doc | Mar 28, 2016 | Jan 13, 2016 |
| Ubuntu | — | Upgrade perl | Feb 2, 2016 | Jan 13, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub