{"id":"CLSA-2026-1784295790","summary":"Fix CVE(s): CVE-2026-13221, CVE-2026-57432","details":"   * SECURITY UPDATE: silently incorrect regular expression matches from\n     oversized tries\n     - debian/patches/CVE-2026-13221.patch: skip building a trie when the\n       delta between the first branch and the shared tail would overflow\n       the 16-bit next_off field in S_study_chunk() in regcomp.c; add a\n       regression test in t/re/pat_advanced.t; backported from upstream\n       commit 03f74bbbd3a68350d926ee93d56ee4808c28c4c7.\n     - CVE-2026-13221\n   * SECURITY UPDATE: out-of-bounds heap read in pack/unpack\n     - debian/patches/CVE-2026-57432.patch: croak when the computed\n       structure size would overflow SSize_t and harden the B/b and H/h\n       length calculations in S_measure_struct() in pp_pack.c; document\n       the new diagnostic in pod/perldiag.pod; backported from upstream\n       commits 5f7eb6bbbe0510964e3fb1d6bb691e5445913e55 and\n       40754edc72dd3e513d758153c0e2f0215897740e.\n     - CVE-2026-57432","modified":"2026-10-26T09:32:05.535348709Z","published":"2026-07-17T13:43:39Z","upstream":["CVE-2026-13221","CVE-2026-57432"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1784295790.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13221"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57432"}],"affected":[{"package":{"name":"libperl-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libperl-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.30.0-9ubuntu0.5+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784295790.json"}},{"package":{"name":"libperl5.30","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libperl5.30?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.30.0-9ubuntu0.5+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784295790.json"}},{"package":{"name":"perl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/perl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.30.0-9ubuntu0.5+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784295790.json"}},{"package":{"name":"perl-base","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/perl-base?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.30.0-9ubuntu0.5+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784295790.json"}},{"package":{"name":"perl-debug","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/perl-debug?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.30.0-9ubuntu0.5+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784295790.json"}},{"package":{"name":"perl-doc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/perl-doc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.30.0-9ubuntu0.5+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784295790.json"}},{"package":{"name":"perl-modules-5.30","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/perl-modules-5.30?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.30.0-9ubuntu0.5+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784295790.json"}}],"schema_version":"1.9.0"}