MGASA-2020-0255

Source
https://advisories.mageia.org/MGASA-2020-0255.html
Import Source
https://advisories.mageia.org/MGASA-2020-0255.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2020-0255
Upstream
Published
2020-06-10T23:59:36Z
Modified
2026-04-16T04:41:30Z
Summary
Updated perl packages fix security vulnerability
Details

This update from 5.28.2 to 5.28.3 fixes bugs several bugs the RPM package manager.

  • Update to 5.23.3 (See https://metacpan.org/pod/release/XSAWYERX/perl-5.28.3/pod/perldelta.pod for release notes)
  • Security release fixes CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723
  • Work around a glibc bug in caching LC_MESSAGES (GH#17081)
  • Fix POSIX:setlocale() documentation
  • Prevent from an integer overflow in POSIX::SigSet()
  • Fix thread-safety of IO::Handle (GH#14816)
  • Close :unix PerlIO layers properly (bug #987118)
  • Fix counting a recursion limit when matching in a postponed eval (GH#17490)
  • Fix sorting tied arrays (GH#17496)
  • Fix a spurious warning about a multidimensional syntax (GH#16535)
  • Normalize "#!/perl" shebangs in the tests
  • Fix a warning about an uninitialized value in B::Deparse (GH#17537)
  • Fix Time-Local tests to pass after year 2019 (CPAN RT#124787)
References
Credits

Affected packages

Mageia:7 / perl

Package

Name
perl
Purl
pkg:rpm/mageia/perl?arch=source&distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.28.3-2.mga7

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2020-0255.json"