{"id":"CLSA-2026-1784303431","summary":"perl: Fix of 2 CVEs","details":"- CVE-2026-13221: do not build a regex trie when the branch-to-tail delta would overflow the 16-bit next-offset field, which could otherwise truncate the trie decision table (GH#23388)\n- CVE-2026-57432: fix integer overflow in S_measure_struct when computing the size of a pack/unpack structure with a large repeat count, which could wrap the signed size negative and lead to an out-of-bounds heap read","modified":"2026-10-26T09:31:38.402568762Z","published":"2026-07-17T15:50:55Z","upstream":["CVE-2026-13221","CVE-2026-57432"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1784303431.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13221"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57432"}],"affected":[{"package":{"name":"perl","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.26.3-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-Attribute-Handlers","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-Attribute-Handlers?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-Devel-Peek","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-Devel-Peek?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-Devel-SelfStubber","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-Devel-SelfStubber?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.06-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-Errno","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-Errno?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-ExtUtils-Embed","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-ExtUtils-Embed?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-ExtUtils-Miniperl","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-ExtUtils-Miniperl?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.06-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-IO","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-IO?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-IO-Zlib","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-IO-Zlib?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-Locale-Maketext-Simple","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-Locale-Maketext-Simple?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.21-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-Math-Complex","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-Math-Complex?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.59-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-Memoize","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-Memoize?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.03-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-Module-Loaded","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-Module-Loaded?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.08-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-Net-Ping","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-Net-Ping?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.55-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-Pod-Html","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-Pod-Html?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.02-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-SelfLoader","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-SelfLoader?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-Test","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-Test?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-Time-Piece","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-Time-Piece?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.26.3-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-interpreter","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-interpreter?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.26.3-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-libnetcfg","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-libnetcfg?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.26.3-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-libs","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-libs?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.26.3-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-macros","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-macros?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.26.3-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-open","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-open?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-tests","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-tests?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.26.3-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}},{"package":{"name":"perl-utils","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perl-utils?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.3-422.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1784303431.json"}}],"schema_version":"1.9.0"}