NS-SA-2021-0099
2021-09-24 00:10:31
简介
important: linux-firmware/perl security update
严重级别
important
主题
An update for linux-firmware/perl is now available for NewStart CGSL MAIN 5.04/CGSL CORE 5.04.
NewStart Security has rated this update as having a security impact of important. A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.
详细描述
linux-firmware: This package contains the firmware required by the iwlagn driver for Linux to support the iwl1000 hardware. Usage of the firmware is subject to the terms and conditions contained inside the provided LICENSE file. Please read it carefully.
perl: This package contains header files and development modules. Most perl packages will need to install perl-devel to build.
Security Fix(es):
linux-firmware: A flaw was found in the firmware of some Intel Bluetooth devices. This may allow an unauthenticated attacker within Bluetooth range to overflow a buffer and corrupt memory leading to a crash or privilege escalation.(CVE-2020-12321)
linux-firmware: bugfix
perl: Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.(CVE-2020-10543)
perl: Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.(CVE-2020-10878)
perl: gcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.(CVE-2020-12723)
perl: bugfix
Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
http://security.gd-linux.com/how_to_apply_patch.html
Remember the build tag is 5.04.F31B4.
影响组件
影响产品
- CGSL MAIN 5.04
- CGSL CORE 5.04
更新包
{"fix":[{"product":"CGSL MAIN 5.04","pkgs":[{"binary":["iwl1000-firmware-39.31.5.1-80.el7_9.cgslv5.noarch.rpm","iwl2030-firmware-18.168.6.1-80.el7_9.cgslv5.noarch.rpm","iwl135-firmware-18.168.6.1-80.el7_9.cgslv5.noarch.rpm","linux-firmware-20200421-80.git78c0348.el7_9.cgslv5.noarch.rpm","iwl6000-firmware-9.221.4.1-80.el7_9.cgslv5.noarch.rpm","iwl100-firmware-39.31.5.1-80.el7_9.cgslv5.noarch.rpm","iwl105-firmware-18.168.6.1-80.el7_9.cgslv5.noarch.rpm","iwl6050-firmware-41.28.5.1-80.el7_9.cgslv5.noarch.rpm","iwl2000-firmware-18.168.6.1-80.el7_9.cgslv5.noarch.rpm","iwl5150-firmware-8.24.2.2-80.el7_9.cgslv5.noarch.rpm","iwl7260-firmware-25.30.13.0-80.el7_9.cgslv5.noarch.rpm","iwl6000g2a-firmware-18.168.6.1-80.el7_9.cgslv5.noarch.rpm","iwl4965-firmware-228.61.2.24-80.el7_9.cgslv5.noarch.rpm","iwl5000-firmware-8.83.5.1_1-80.el7_9.cgslv5.noarch.rpm","iwl3160-firmware-25.30.13.0-80.el7_9.cgslv5.noarch.rpm","iwl6000g2b-firmware-18.168.6.1-80.el7_9.cgslv5.noarch.rpm","iwl3945-firmware-15.32.2.9-80.el7_9.cgslv5.noarch.rpm"],"source":"linux-firmware-20200421-80.git78c0348.el7_9.cgslv5.src.rpm"},{"binary":["perl-devel-5.16.3-299.el7_9.x86_64.rpm","perl-Module-Loaded-0.08-299.el7_9.noarch.rpm","perl-CPAN-1.9800-299.el7_9.noarch.rpm","perl-macros-5.16.3-299.el7_9.x86_64.rpm","perl-ExtUtils-CBuilder-0.28.2.6-299.el7_9.noarch.rpm","perl-tests-5.16.3-299.el7_9.x86_64.rpm","perl-Package-Constants-0.02-299.el7_9.noarch.rpm","perl-Time-Piece-1.20.1-299.el7_9.x86_64.rpm","perl-core-5.16.3-299.el7_9.x86_64.rpm","perl-Module-CoreList-2.76.02-299.el7_9.noarch.rpm","perl-5.16.3-299.el7_9.x86_64.rpm","perl-ExtUtils-Install-1.58-299.el7_9.noarch.rpm","perl-IO-Zlib-1.10-299.el7_9.noarch.rpm","perl-Locale-Maketext-Simple-0.21-299.el7_9.noarch.rpm","perl-debuginfo-5.16.3-299.el7_9.x86_64.rpm","perl-ExtUtils-Embed-1.30-299.el7_9.noarch.rpm","perl-Pod-Escapes-1.04-299.el7_9.noarch.rpm","perl-libs-5.16.3-299.el7_9.x86_64.rpm","perl-Object-Accessor-0.42-299.el7_9.noarch.rpm"],"source":"perl-5.16.3-299.el7_9.src.rpm"}]},{"product":"CGSL CORE 5.04","pkgs":[{"binary":["iwl100-firmware-39.31.5.1-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl135-firmware-18.168.6.1-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl3160-firmware-25.30.13.0-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl7260-firmware-25.30.13.0-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl5000-firmware-8.83.5.1_1-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl2030-firmware-18.168.6.1-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl6050-firmware-41.28.5.1-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","linux-firmware-20200421-80.git78c0348.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl2000-firmware-18.168.6.1-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl3945-firmware-15.32.2.9-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","linux-firmware-core-20200421-80.git78c0348.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl1000-firmware-39.31.5.1-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl105-firmware-18.168.6.1-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","linux-firmware-other-20200421-80.git78c0348.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl6000g2a-firmware-18.168.6.1-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl4965-firmware-228.61.2.24-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl5150-firmware-8.24.2.2-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl6000-firmware-9.221.4.1-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm","iwl6000g2b-firmware-18.168.6.1-80.el7_9.cgslv5.0.4.g9da9570.lite.noarch.rpm"],"source":"linux-firmware-20200421-80.git78c0348.el7_9.cgslv5.0.4.g9da9570.lite.src.rpm"},{"binary":["perl-devel-5.16.3-299.el7_9.x86_64.rpm","perl-Module-Loaded-0.08-299.el7_9.noarch.rpm","perl-CPAN-1.9800-299.el7_9.noarch.rpm","perl-macros-5.16.3-299.el7_9.x86_64.rpm","perl-ExtUtils-CBuilder-0.28.2.6-299.el7_9.noarch.rpm","perl-tests-5.16.3-299.el7_9.x86_64.rpm","perl-Package-Constants-0.02-299.el7_9.noarch.rpm","perl-Time-Piece-1.20.1-299.el7_9.x86_64.rpm","perl-core-5.16.3-299.el7_9.x86_64.rpm","perl-Module-CoreList-2.76.02-299.el7_9.noarch.rpm","perl-5.16.3-299.el7_9.x86_64.rpm","perl-ExtUtils-Install-1.58-299.el7_9.noarch.rpm","perl-IO-Zlib-1.10-299.el7_9.noarch.rpm","perl-Locale-Maketext-Simple-0.21-299.el7_9.noarch.rpm","perl-debuginfo-5.16.3-299.el7_9.x86_64.rpm","perl-ExtUtils-Embed-1.30-299.el7_9.noarch.rpm","perl-Pod-Escapes-1.04-299.el7_9.noarch.rpm","perl-libs-5.16.3-299.el7_9.x86_64.rpm","perl-Object-Accessor-0.42-299.el7_9.noarch.rpm"],"source":"perl-5.16.3-299.el7_9.src.rpm"}]}]}
CVE
参考