USN-3684-1 & USN-3684-2: Perl vulnerabilities


#1

The USN-3684-1: Perl and USN-3684-2: Perl vulnerabilities are fixed automatically and installed on SecureDrop production instances. I received the following OSSEC alerts (same set of mail for both app and mon, except for the list of installed packages which is only received for app).

OSSEC HIDS Notification.
2018 Jun 14 04:10:00

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/a2p'
Old md5sum was: 'ae14b9838c64fdcbb5cc864977f5a65e'
New md5sum is : '41df706745dbdfbf222a9c47b7205b94'
Old sha1sum was: '246c1cb37955e4baf1b851d574a98b65b8a91b40'
New sha1sum is : 'd30ee7cb1ed8b86d0a0653c7a6a262c958d6621f'

 --END OF NOTIFICATION
OSSEC HIDS Notification.
2018 Jun 14 04:10:00

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/perlbug'
What changed:
5c5
< my $config_tag1 = '5.18.2 - Wed Apr 11 21:09:44 UTC 2018';
---
> my $config_tag1 = '5.18.2 - Wed Jun 13 13:21:12 UTC 2018';
7c7
< my $patchlevel_date = 1523479470;
---
> my $patchlevel_date = 1528893351;
Old md5sum was: '24b8056b9051bd0aa9e17ee5df9b352c'
New md5sum is : '274ad5b429a2c4c650d1270aa47cdaea'
Old sha1sum was: 'e8757128b2e11df8010cac3ae9b229e7e0882c19'
New sha1sum is : 'c55fe13c01d774d0251422dce11575953ab52b0d'

 --END OF NOTIFICATION
OSSEC HIDS Notification.
2018 Jun 14 04:10:00

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/perlthanks'
What changed:
5c5
< my $config_tag1 = '5.18.2 - Wed Apr 11 21:09:44 UTC 2018';
---
> my $config_tag1 = '5.18.2 - Wed Jun 13 13:21:12 UTC 2018';
7c7
< my $patchlevel_date = 1523479470;
---
> my $patchlevel_date = 1528893351;
Old md5sum was: '24b8056b9051bd0aa9e17ee5df9b352c'
New md5sum is : '274ad5b429a2c4c650d1270aa47cdaea'
Old sha1sum was: 'e8757128b2e11df8010cac3ae9b229e7e0882c19'
New sha1sum is : 'c55fe13c01d774d0251422dce11575953ab52b0d'

 --END OF NOTIFICATION

OSSEC HIDS Notification.
2018 Jun 14 04:10:01

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/perl'
Old md5sum was: '1c6a38f6ebe3d86e9e9af479fbf784a4'
New md5sum is : '6e720c3a46679c6f131e539e7122eaca'
Old sha1sum was: '3d9c251673ca7c074c333b26bc75bd3f0e8dd241'
New sha1sum is : 'f5a4ce29d9c7ea500b0a8f42fd8a1e45ee7c3ec3'

 --END OF NOTIFICATION
OSSEC HIDS Notification.
2018 Jun 14 04:10:01

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/perl5.18.2'
Old md5sum was: '1c6a38f6ebe3d86e9e9af479fbf784a4'
New md5sum is : '6e720c3a46679c6f131e539e7122eaca'
Old sha1sum was: '3d9c251673ca7c074c333b26bc75bd3f0e8dd241'
New sha1sum is : 'f5a4ce29d9c7ea500b0a8f42fd8a1e45ee7c3ec3'

 --END OF NOTIFICATION
OSSEC HIDS Notification.
2018 Jun 14 04:10:03

Received From: (app) A.B.C.D->/var/log/dpkg.log
Rule: 2902 fired (level 7) -> "New dpkg (Debian Package) installed."
Portion of the log(s):

2018-06-14 04:10:02 status installed man-db:amd64 2.6.7.1-1ubuntu1

 --END OF NOTIFICATION

OSSEC HIDS Notification.
2018 Jun 14 04:10:03

Received From: (app) A.B.C.D->/var/log/dpkg.log
Rule: 2902 fired (level 7) -> "New dpkg (Debian Package) installed."
Portion of the log(s):

2018-06-14 04:10:02 status installed perl-base:amd64 5.18.2-2ubuntu1.6

 --END OF NOTIFICATION

OSSEC HIDS Notification.
2018 Jun 14 04:10:05

Received From: (app) A.B.C.D->/var/log/dpkg.log
Rule: 2902 fired (level 7) -> "New dpkg (Debian Package) installed."
Portion of the log(s):

2018-06-14 04:10:04 status installed perl-modules:all 5.18.2-2ubuntu1.6

 --END OF NOTIFICATION

OSSEC HIDS Notification.
2018 Jun 14 04:10:05

Received From: (app) A.B.C.D->/var/log/dpkg.log
Rule: 2902 fired (level 7) -> "New dpkg (Debian Package) installed."
Portion of the log(s):

2018-06-14 04:10:04 status installed perl:amd64 5.18.2-2ubuntu1.6

 --END OF NOTIFICATION