synced 6 MIN AGO
01 Record

CVE-2026-13221

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

CriticalPUBLISHEDCNA: CPANSec
CNA base score9.1 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

02 Description

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

03 Exploitation and scoring

Exploitation
Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
SSVC decision
  • ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
  • AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
  • Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.
CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.
EPSS probability
0.49% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 42.1% of scored records. A rank, not a probability.
NVD base score
9.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
NVD analysis status
Modified. NVD last modified this record on 2026-10-24.
Red Hat severity
Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2026-07-13 15:40Z3 MO AGO
Last updated
2026-09-08 21:30Z1 MO AGO
Reserved
2026-06-24
Assigning CNA
CPANSec
Record state
PUBLISHED
Severity
Critical (CVSS 9.1)
CNA CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weaknesses
  • CWE-190Integer Overflow or WraparoundBase
  • CWE-625Permissive Regular ExpressionBase
Data version
5.2
Document digest
51892f742aac96c4696c6b52e0cd75062d5ce4540f8943e49c353c4e81f27ad3

05 Affected products

VendorProductVersionsPlatforms
perlperlNot specified—
redhatcost_management_on_premiseNot specified—
redhatenterprise_linuxNot specified—
redhathummingbirdNot specified—
redhatopenshiftNot specified—
redhatopenshift_aiNot specified—
redhatopenshift_devspacesNot specified—
redhatrhuiNot specified—

06 References

07 Remediation

Upgrade to Perl 5.40.5, 5.42.3 or 5.44.0 or later, or apply the upstream patch.

08 Fixed in

AlmaLinux 8

  • perl
    Fixed

    A version is affected if any line below covers it.

    • Affected before 4:5.26.3-423.el8_10.1
    • Affected before 4:5.32.1-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Algorithm-Diff
    Fixed in 1.1903-10.module_el8.6.0+2766+8bf0b7ce
  • perl-Archive-Tar
    Fixed in 2.38-5.module_el8.10.0+4240+a58b978c
  • perl-Archive-Zip
    Fixed in 1.68-3.module_el8.6.0+2766+8bf0b7ce
  • perl-Attribute-Handlers
    Fixed

    A version is affected if any line below covers it.

    • Affected before 0.99-423.el8_10.1
    • Affected before 1.01-475.module_el8.10.0+4278+b5f6cf5f
  • perl-AutoLoader
    Fixed in 5.74-475.module_el8.10.0+4278+b5f6cf5f
  • perl-AutoSplit
    Fixed in 5.74-475.module_el8.10.0+4278+b5f6cf5f
  • perl-B
    Fixed in 1.80-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Benchmark
    Fixed in 1.23-475.module_el8.10.0+4278+b5f6cf5f
  • perl-CPAN
    Fixed in 2.28-5.module_el8.6.0+2766+8bf0b7ce
  • perl-CPAN-DistnameInfo
    Fixed in 0.12-13.module_el8.6.0+2766+8bf0b7ce
  • perl-CPAN-Meta
    Fixed in 2.150010-397.module_el8.6.0+2766+8bf0b7ce
  • perl-CPAN-Meta-Requirements
    Fixed in 2.140-397.module_el8.6.0+2766+8bf0b7ce
  • perl-CPAN-Meta-YAML
    Fixed in 0.018-1001.module_el8.6.0+2766+8bf0b7ce
  • perl-Carp
    Fixed in 1.50-439.module_el8.6.0+2766+8bf0b7ce
  • perl-Class-Struct
    Fixed in 0.66-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Compress-Bzip2
    Fixed

    A version is affected if any line below covers it.

    • Affected before 2.28-2.module_el8.6.0+2766+8bf0b7ce
    • Affected before 2.28-2.module_el8.6.0+3181+91434291
  • perl-Compress-Raw-Bzip2
    Fixed

    A version is affected if any line below covers it.

    • Affected before 2.096-1.module_el8.6.0+2766+8bf0b7ce
    • Affected before 2.096-1.module_el8.6.0+3181+91434291
  • perl-Compress-Raw-Lzma
    Fixed

    A version is affected if any line below covers it.

    • Affected before 2.096-1.module_el8.6.0+2766+8bf0b7ce
    • Affected before 2.096-1.module_el8.6.0+3181+91434291
  • perl-Compress-Raw-Zlib
    Fixed in 2.096-2.module_el8.10.0+3779+d5938d28
  • perl-Config-Extensions
    Fixed in 0.03-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Config-Perl-V
    Fixed in 0.32-441.module_el8.6.0+2766+8bf0b7ce
  • perl-DBM_Filter
    Fixed in 0.06-475.module_el8.10.0+4278+b5f6cf5f
  • perl-DB_File
    Fixed

    A version is affected if any line below covers it.

    • Affected before 1.855-1.module_el8.6.0+2766+8bf0b7ce
    • Affected before 1.855-1.module_el8.6.0+3181+91434291
  • perl-Data-Dumper
    Fixed

    A version is affected if any line below covers it.

    • Affected before 2.174-440.module_el8.6.0+2766+8bf0b7ce
    • Affected before 2.174-440.module_el8.6.0+3181+91434291
  • perl-Data-OptList
    Fixed in 0.110-7.module_el8.6.0+2766+8bf0b7ce
  • perl-Data-Section
    Fixed in 0.200007-8.module_el8.6.0+2766+8bf0b7ce
  • perl-Devel-PPPort
    Fixed

    A version is affected if any line below covers it.

    • Affected before 3.62-1.module_el8.6.0+2766+8bf0b7ce
    • Affected before 3.62-1.module_el8.6.0+3181+91434291
  • perl-Devel-Peek
    Fixed

    A version is affected if any line below covers it.

    • Affected before 1.26-423.el8_10.1
    • Affected before 1.28-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Devel-SelfStubber
    Fixed

    A version is affected if any line below covers it.

    • Affected before 1.06-423.el8_10.1
    • Affected before 1.06-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Devel-Size
    Fixed

    A version is affected if any line below covers it.

    • Affected before 0.83-3.module_el8.6.0+2766+8bf0b7ce
    • Affected before 0.83-3.module_el8.6.0+3181+91434291
  • perl-Digest
    Fixed in 1.20-1.module_el8.6.0+2766+8bf0b7ce
  • perl-Digest-MD5
    Fixed

    A version is affected if any line below covers it.

    • Affected before 2.58-1.module_el8.6.0+2766+8bf0b7ce
    • Affected before 2.58-1.module_el8.6.0+3181+91434291
  • perl-Digest-SHA
    Fixed

    A version is affected if any line below covers it.

    • Affected before 1:6.02-2.module_el8.6.0+2766+8bf0b7ce
    • Affected before 1:6.02-2.module_el8.6.0+3181+91434291
  • perl-DirHandle
    Fixed in 1.05-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Dumpvalue
    Fixed in 2.27-475.module_el8.10.0+4278+b5f6cf5f
  • perl-DynaLoader
    Fixed in 1.47-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Encode
    Fixed

    A version is affected if any line below covers it.

    • Affected before 4:3.08-461.module_el8.6.0+2766+8bf0b7ce
    • Affected before 4:3.08-461.module_el8.6.0+3181+91434291
  • perl-Encode-Locale
    Fixed in 1.05-10.module_el8.6.0+2766+8bf0b7ce
  • perl-Encode-devel
    Fixed

    A version is affected if any line below covers it.

    • Affected before 4:3.08-461.module_el8.6.0+2766+8bf0b7ce
    • Affected before 4:3.08-461.module_el8.6.0+3181+91434291

183 further packages in AlmaLinux 8 not shown (first 40 listed).

Source: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.

AlmaLinux 9

  • perl
    Fixed in 4:5.32.1-484.el9_8
  • perl-Attribute-Handlers
    Fixed in 1.01-484.el9_8
  • perl-AutoLoader
    Fixed in 5.74-484.el9_8
  • perl-AutoSplit
    Fixed in 5.74-484.el9_8
  • perl-B
    Fixed in 1.80-484.el9_8
  • perl-Benchmark
    Fixed in 1.23-484.el9_8
  • perl-Class-Struct
    Fixed in 0.66-484.el9_8
  • perl-Config-Extensions
    Fixed in 0.03-484.el9_8
  • perl-DBM_Filter
    Fixed in 0.06-484.el9_8
  • perl-Devel-Peek
    Fixed in 1.28-484.el9_8
  • perl-Devel-SelfStubber
    Fixed in 1.06-484.el9_8
  • perl-DirHandle
    Fixed in 1.05-484.el9_8
  • perl-Dumpvalue
    Fixed in 2.27-484.el9_8
  • perl-DynaLoader
    Fixed in 1.47-484.el9_8
  • perl-English
    Fixed in 1.11-484.el9_8
  • perl-Errno
    Fixed in 1.30-484.el9_8
  • perl-ExtUtils-Constant
    Fixed in 0.25-484.el9_8
  • perl-ExtUtils-Embed
    Fixed in 1.35-484.el9_8
  • perl-ExtUtils-Miniperl
    Fixed in 1.09-484.el9_8
  • perl-Fcntl
    Fixed in 1.13-484.el9_8
  • perl-File-Basename
    Fixed in 2.85-484.el9_8
  • perl-File-Compare
    Fixed in 1.100.600-484.el9_8
  • perl-File-Copy
    Fixed in 2.34-484.el9_8
  • perl-File-DosGlob
    Fixed in 1.12-484.el9_8
  • perl-File-Find
    Fixed in 1.37-484.el9_8
  • perl-File-stat
    Fixed in 1.09-484.el9_8
  • perl-FileCache
    Fixed in 1.10-484.el9_8
  • perl-FileHandle
    Fixed in 2.03-484.el9_8
  • perl-FindBin
    Fixed in 1.51-484.el9_8
  • perl-GDBM_File
    Fixed in 1.18-484.el9_8
  • perl-Getopt-Std
    Fixed in 1.12-484.el9_8
  • perl-Hash-Util
    Fixed in 0.23-484.el9_8
  • perl-Hash-Util-FieldHash
    Fixed in 1.20-484.el9_8
  • perl-I18N-Collate
    Fixed in 1.02-484.el9_8
  • perl-I18N-LangTags
    Fixed in 0.44-484.el9_8
  • perl-I18N-Langinfo
    Fixed in 0.19-484.el9_8
  • perl-IO
    Fixed in 1.43-484.el9_8
  • perl-IPC-Open3
    Fixed in 1.21-484.el9_8
  • perl-Locale-Maketext-Simple
    Fixed in 1:0.21-484.el9_8
  • perl-Math-Complex
    Fixed in 1.59-484.el9_8

60 further packages in AlmaLinux 9 not shown (first 40 listed).

Source: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.

AlmaLinux 10

  • perl
    Fixed in 4:5.40.2-515.el10_2
  • perl-Attribute-Handlers
    Fixed in 1.03-515.el10_2
  • perl-AutoLoader
    Fixed in 5.74-515.el10_2
  • perl-AutoSplit
    Fixed in 5.74-515.el10_2
  • perl-B
    Fixed in 1.89-515.el10_2
  • perl-Benchmark
    Fixed in 1.25-515.el10_2
  • perl-Class-Struct
    Fixed in 0.68-515.el10_2
  • perl-Config-Extensions
    Fixed in 0.03-515.el10_2
  • perl-DBM_Filter
    Fixed in 0.06-515.el10_2
  • perl-Devel-Peek
    Fixed in 1.34-515.el10_2
  • perl-Devel-SelfStubber
    Fixed in 1.06-515.el10_2
  • perl-DirHandle
    Fixed in 1.05-515.el10_2
  • perl-Dumpvalue
    Fixed in 2.27-515.el10_2
  • perl-DynaLoader
    Fixed in 1.56-515.el10_2
  • perl-English
    Fixed in 1.11-515.el10_2
  • perl-Errno
    Fixed in 1.38-515.el10_2
  • perl-ExtUtils-Constant
    Fixed in 0.25-515.el10_2
  • perl-ExtUtils-Embed
    Fixed in 1.35-515.el10_2
  • perl-ExtUtils-Miniperl
    Fixed in 1.14-515.el10_2
  • perl-Fcntl
    Fixed in 1.18-515.el10_2
  • perl-File-Basename
    Fixed in 2.86-515.el10_2
  • perl-File-Compare
    Fixed in 1.100.800-515.el10_2
  • perl-File-Copy
    Fixed in 2.41-515.el10_2
  • perl-File-DosGlob
    Fixed in 1.12-515.el10_2
  • perl-File-Find
    Fixed in 1.44-515.el10_2
  • perl-File-stat
    Fixed in 1.14-515.el10_2
  • perl-FileCache
    Fixed in 1.10-515.el10_2
  • perl-FileHandle
    Fixed in 2.05-515.el10_2
  • perl-FindBin
    Fixed in 1.54-515.el10_2
  • perl-GDBM_File
    Fixed in 1:1.24-515.el10_2
  • perl-Getopt-Std
    Fixed in 1.14-515.el10_2
  • perl-Hash-Util
    Fixed in 0.32-515.el10_2
  • perl-Hash-Util-FieldHash
    Fixed in 1.27-515.el10_2
  • perl-I18N-Collate
    Fixed in 1.02-515.el10_2
  • perl-I18N-LangTags
    Fixed in 0.45-515.el10_2
  • perl-I18N-Langinfo
    Fixed in 0.24-515.el10_2
  • perl-IO
    Fixed in 1.55-515.el10_2
  • perl-IPC-Open3
    Fixed in 1.22-515.el10_2
  • perl-Locale-Maketext-Simple
    Fixed in 1:0.21-515.el10_2
  • perl-Math-Complex
    Fixed in 1.62-515.el10_2

60 further packages in AlmaLinux 10 not shown (first 40 listed).

Source: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.

CloudLinux 8

  • perl
    Fixed

    A version is affected if any line below covers it.

    • Affected before 4:5.26.3-423.el8_10.1
    • Affected before 4:5.32.1-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Algorithm-Diff
    Fixed in 1.1903-10.module_el8.6.0+2766+8bf0b7ce
  • perl-Archive-Tar
    Fixed in 2.38-5.module_el8.10.0+4240+a58b978c
  • perl-Archive-Zip
    Fixed in 1.68-3.module_el8.6.0+2766+8bf0b7ce
  • perl-Attribute-Handlers
    Fixed

    A version is affected if any line below covers it.

    • Affected before 0.99-423.el8_10.1
    • Affected before 1.01-475.module_el8.10.0+4278+b5f6cf5f
  • perl-AutoLoader
    Fixed in 5.74-475.module_el8.10.0+4278+b5f6cf5f
  • perl-AutoSplit
    Fixed in 5.74-475.module_el8.10.0+4278+b5f6cf5f
  • perl-B
    Fixed in 1.80-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Benchmark
    Fixed in 1.23-475.module_el8.10.0+4278+b5f6cf5f
  • perl-CPAN
    Fixed in 2.28-5.module_el8.6.0+2766+8bf0b7ce
  • perl-CPAN-DistnameInfo
    Fixed in 0.12-13.module_el8.6.0+2766+8bf0b7ce
  • perl-CPAN-Meta
    Fixed in 2.150010-397.module_el8.6.0+2766+8bf0b7ce
  • perl-CPAN-Meta-Requirements
    Fixed in 2.140-397.module_el8.6.0+2766+8bf0b7ce
  • perl-CPAN-Meta-YAML
    Fixed in 0.018-1001.module_el8.6.0+2766+8bf0b7ce
  • perl-Carp
    Fixed in 1.50-439.module_el8.6.0+2766+8bf0b7ce
  • perl-Class-Struct
    Fixed in 0.66-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Compress-Bzip2
    Fixed

    A version is affected if any line below covers it.

    • Affected before 2.28-2.module_el8.6.0+2766+8bf0b7ce
    • Affected before 2.28-2.module_el8.6.0+3181+91434291
  • perl-Compress-Raw-Bzip2
    Fixed

    A version is affected if any line below covers it.

    • Affected before 2.096-1.module_el8.6.0+2766+8bf0b7ce
    • Affected before 2.096-1.module_el8.6.0+3181+91434291
  • perl-Compress-Raw-Lzma
    Fixed

    A version is affected if any line below covers it.

    • Affected before 2.096-1.module_el8.6.0+2766+8bf0b7ce
    • Affected before 2.096-1.module_el8.6.0+3181+91434291
  • perl-Compress-Raw-Zlib
    Fixed in 2.096-2.module_el8.10.0+3779+d5938d28
  • perl-Config-Extensions
    Fixed in 0.03-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Config-Perl-V
    Fixed in 0.32-441.module_el8.6.0+2766+8bf0b7ce
  • perl-DBM_Filter
    Fixed in 0.06-475.module_el8.10.0+4278+b5f6cf5f
  • perl-DB_File
    Fixed

    A version is affected if any line below covers it.

    • Affected before 1.855-1.module_el8.6.0+2766+8bf0b7ce
    • Affected before 1.855-1.module_el8.6.0+3181+91434291
  • perl-Data-Dumper
    Fixed

    A version is affected if any line below covers it.

    • Affected before 2.174-440.module_el8.6.0+2766+8bf0b7ce
    • Affected before 2.174-440.module_el8.6.0+3181+91434291
  • perl-Data-OptList
    Fixed in 0.110-7.module_el8.6.0+2766+8bf0b7ce
  • perl-Data-Section
    Fixed in 0.200007-8.module_el8.6.0+2766+8bf0b7ce
  • perl-Devel-PPPort
    Fixed

    A version is affected if any line below covers it.

    • Affected before 3.62-1.module_el8.6.0+2766+8bf0b7ce
    • Affected before 3.62-1.module_el8.6.0+3181+91434291
  • perl-Devel-Peek
    Fixed

    A version is affected if any line below covers it.

    • Affected before 1.26-423.el8_10.1
    • Affected before 1.28-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Devel-SelfStubber
    Fixed

    A version is affected if any line below covers it.

    • Affected before 1.06-423.el8_10.1
    • Affected before 1.06-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Devel-Size
    Fixed

    A version is affected if any line below covers it.

    • Affected before 0.83-3.module_el8.6.0+2766+8bf0b7ce
    • Affected before 0.83-3.module_el8.6.0+3181+91434291
  • perl-Digest
    Fixed in 1.20-1.module_el8.6.0+2766+8bf0b7ce
  • perl-Digest-MD5
    Fixed

    A version is affected if any line below covers it.

    • Affected before 2.58-1.module_el8.6.0+2766+8bf0b7ce
    • Affected before 2.58-1.module_el8.6.0+3181+91434291
  • perl-Digest-SHA
    Fixed

    A version is affected if any line below covers it.

    • Affected before 1:6.02-2.module_el8.6.0+2766+8bf0b7ce
    • Affected before 1:6.02-2.module_el8.6.0+3181+91434291
  • perl-DirHandle
    Fixed in 1.05-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Dumpvalue
    Fixed in 2.27-475.module_el8.10.0+4278+b5f6cf5f
  • perl-DynaLoader
    Fixed in 1.47-475.module_el8.10.0+4278+b5f6cf5f
  • perl-Encode
    Fixed

    A version is affected if any line below covers it.

    • Affected before 4:3.08-461.module_el8.6.0+2766+8bf0b7ce
    • Affected before 4:3.08-461.module_el8.6.0+3181+91434291
  • perl-Encode-Locale
    Fixed in 1.05-10.module_el8.6.0+2766+8bf0b7ce
  • perl-Encode-devel
    Fixed

    A version is affected if any line below covers it.

    • Affected before 4:3.08-461.module_el8.6.0+2766+8bf0b7ce
    • Affected before 4:3.08-461.module_el8.6.0+3181+91434291

183 further packages in CloudLinux 8 not shown (first 40 listed).

Derived from AlmaLinux 8. Partial coverage: only packages taken from AlmaLinux 8 are listed.

Source: CloudLinux errata, CloudLinux Inc. Derived from: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.

CloudLinux 9

  • perl
    Fixed in 4:5.32.1-484.el9_8
  • perl-Attribute-Handlers
    Fixed in 1.01-484.el9_8
  • perl-AutoLoader
    Fixed in 5.74-484.el9_8
  • perl-AutoSplit
    Fixed in 5.74-484.el9_8
  • perl-B
    Fixed in 1.80-484.el9_8
  • perl-Benchmark
    Fixed in 1.23-484.el9_8
  • perl-Class-Struct
    Fixed in 0.66-484.el9_8
  • perl-Config-Extensions
    Fixed in 0.03-484.el9_8
  • perl-DBM_Filter
    Fixed in 0.06-484.el9_8
  • perl-Devel-Peek
    Fixed in 1.28-484.el9_8
  • perl-Devel-SelfStubber
    Fixed in 1.06-484.el9_8
  • perl-DirHandle
    Fixed in 1.05-484.el9_8
  • perl-Dumpvalue
    Fixed in 2.27-484.el9_8
  • perl-DynaLoader
    Fixed in 1.47-484.el9_8
  • perl-English
    Fixed in 1.11-484.el9_8
  • perl-Errno
    Fixed in 1.30-484.el9_8
  • perl-ExtUtils-Constant
    Fixed in 0.25-484.el9_8
  • perl-ExtUtils-Embed
    Fixed in 1.35-484.el9_8
  • perl-ExtUtils-Miniperl
    Fixed in 1.09-484.el9_8
  • perl-Fcntl
    Fixed in 1.13-484.el9_8
  • perl-File-Basename
    Fixed in 2.85-484.el9_8
  • perl-File-Compare
    Fixed in 1.100.600-484.el9_8
  • perl-File-Copy
    Fixed in 2.34-484.el9_8
  • perl-File-DosGlob
    Fixed in 1.12-484.el9_8
  • perl-File-Find
    Fixed in 1.37-484.el9_8
  • perl-File-stat
    Fixed in 1.09-484.el9_8
  • perl-FileCache
    Fixed in 1.10-484.el9_8
  • perl-FileHandle
    Fixed in 2.03-484.el9_8
  • perl-FindBin
    Fixed in 1.51-484.el9_8
  • perl-GDBM_File
    Fixed in 1.18-484.el9_8
  • perl-Getopt-Std
    Fixed in 1.12-484.el9_8
  • perl-Hash-Util
    Fixed in 0.23-484.el9_8
  • perl-Hash-Util-FieldHash
    Fixed in 1.20-484.el9_8
  • perl-I18N-Collate
    Fixed in 1.02-484.el9_8
  • perl-I18N-LangTags
    Fixed in 0.44-484.el9_8
  • perl-I18N-Langinfo
    Fixed in 0.19-484.el9_8
  • perl-IO
    Fixed in 1.43-484.el9_8
  • perl-IPC-Open3
    Fixed in 1.21-484.el9_8
  • perl-Locale-Maketext-Simple
    Fixed in 1:0.21-484.el9_8
  • perl-Math-Complex
    Fixed in 1.59-484.el9_8

60 further packages in CloudLinux 9 not shown (first 40 listed).

Derived from AlmaLinux 9. Partial coverage: only packages taken from AlmaLinux 9 are listed.

Source: CloudLinux errata, CloudLinux Inc. Derived from: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.

CloudLinux 10

  • perl
    Fixed in 4:5.40.2-515.el10_2
  • perl-Attribute-Handlers
    Fixed in 1.03-515.el10_2
  • perl-AutoLoader
    Fixed in 5.74-515.el10_2
  • perl-AutoSplit
    Fixed in 5.74-515.el10_2
  • perl-B
    Fixed in 1.89-515.el10_2
  • perl-Benchmark
    Fixed in 1.25-515.el10_2
  • perl-Class-Struct
    Fixed in 0.68-515.el10_2
  • perl-Config-Extensions
    Fixed in 0.03-515.el10_2
  • perl-DBM_Filter
    Fixed in 0.06-515.el10_2
  • perl-Devel-Peek
    Fixed in 1.34-515.el10_2
  • perl-Devel-SelfStubber
    Fixed in 1.06-515.el10_2
  • perl-DirHandle
    Fixed in 1.05-515.el10_2
  • perl-Dumpvalue
    Fixed in 2.27-515.el10_2
  • perl-DynaLoader
    Fixed in 1.56-515.el10_2
  • perl-English
    Fixed in 1.11-515.el10_2
  • perl-Errno
    Fixed in 1.38-515.el10_2
  • perl-ExtUtils-Constant
    Fixed in 0.25-515.el10_2
  • perl-ExtUtils-Embed
    Fixed in 1.35-515.el10_2
  • perl-ExtUtils-Miniperl
    Fixed in 1.14-515.el10_2
  • perl-Fcntl
    Fixed in 1.18-515.el10_2
  • perl-File-Basename
    Fixed in 2.86-515.el10_2
  • perl-File-Compare
    Fixed in 1.100.800-515.el10_2
  • perl-File-Copy
    Fixed in 2.41-515.el10_2
  • perl-File-DosGlob
    Fixed in 1.12-515.el10_2
  • perl-File-Find
    Fixed in 1.44-515.el10_2
  • perl-File-stat
    Fixed in 1.14-515.el10_2
  • perl-FileCache
    Fixed in 1.10-515.el10_2
  • perl-FileHandle
    Fixed in 2.05-515.el10_2
  • perl-FindBin
    Fixed in 1.54-515.el10_2
  • perl-GDBM_File
    Fixed in 1:1.24-515.el10_2
  • perl-Getopt-Std
    Fixed in 1.14-515.el10_2
  • perl-Hash-Util
    Fixed in 0.32-515.el10_2
  • perl-Hash-Util-FieldHash
    Fixed in 1.27-515.el10_2
  • perl-I18N-Collate
    Fixed in 1.02-515.el10_2
  • perl-I18N-LangTags
    Fixed in 0.45-515.el10_2
  • perl-I18N-Langinfo
    Fixed in 0.24-515.el10_2
  • perl-IO
    Fixed in 1.55-515.el10_2
  • perl-IPC-Open3
    Fixed in 1.22-515.el10_2
  • perl-Locale-Maketext-Simple
    Fixed in 1:0.21-515.el10_2
  • perl-Math-Complex
    Fixed in 1.62-515.el10_2

60 further packages in CloudLinux 10 not shown (first 40 listed).

Derived from AlmaLinux 10. Partial coverage: only packages taken from AlmaLinux 10 are listed.

Source: CloudLinux errata, CloudLinux Inc. Derived from: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.

Debian 12

  • perl
    Fixed in 5.36.0-7+deb12u4

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

  • perl
    Fixed in 5.40.1-6+deb13u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

  • perl
    Fixed in 5.42.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu 22.04 LTS

  • perl
    Fixed in 5.34.0-3ubuntu1.8

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu 24.04 LTS

  • perl
    Fixed in 5.38.2-3.2ubuntu0.4

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu 26.04 LTS

  • perl
    Fixed in 5.40.1-7ubuntu0.3

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu Pro 14.04 LTS

  • perl
    Fixed in 5.18.2-2ubuntu1.7+esm8
    Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu Pro 16.04 LTS

  • perl
    Fixed in 5.22.1-9ubuntu0.9+esm3
    Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu Pro 18.04 LTS

  • perl
    Fixed in 5.26.1-6ubuntu0.7+esm3
    Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu Pro 20.04 LTS

  • perl
    Fixed in 5.30.0-9ubuntu0.5+esm3
    Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.