{"id":"RHSA-2026:50262","summary":"Red Hat Security Advisory: perl:5.32 security update","modified":"2026-08-22T10:26:05Z","published":"2026-08-05T10:37:34Z","upstream":["CVE-2025-40909","CVE-2026-48962"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:50262"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369407"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2481767"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50262.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2025-40909"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2025-40909"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40909"},{"type":"ARTICLE","url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098226"},{"type":"ARTICLE","url":"https://github.com/Perl/perl5/commit/11a11ecf4bea72b17d250cfb43c897be1341861e"},{"type":"ARTICLE","url":"https://github.com/Perl/perl5/commit/918bfff86ca8d6d4e4ec5b30994451e0bd74aba9.patch"},{"type":"ARTICLE","url":"https://github.com/Perl/perl5/issues/10387"},{"type":"ARTICLE","url":"https://github.com/Perl/perl5/issues/23010"},{"type":"ARTICLE","url":"https://perldoc.perl.org/5.14.0/perl5136delta#Directory-handles-not-copied-to-threads"},{"type":"ARTICLE","url":"https://www.openwall.com/lists/oss-security/2025/05/22/2"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-48962"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-48962"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48962"},{"type":"ARTICLE","url":"https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610.patch"},{"type":"ARTICLE","url":"https://metacpan.org/release/PMQS/IO-Compress-2.220/changes"}],"affected":[{"package":{"name":"perl","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","purl":"pkg:rpm/redhat/perl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-472.module+el8.8.0+24404+b3ad2701.1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:50262.json"}},{"package":{"name":"perl-interpreter","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","purl":"pkg:rpm/redhat/perl-interpreter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-472.module+el8.8.0+24404+b3ad2701.1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:50262.json"}},{"package":{"name":"perl-libs","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","purl":"pkg:rpm/redhat/perl-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-472.module+el8.8.0+24404+b3ad2701.1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:50262.json"}},{"package":{"name":"perl","ecosystem":"Red Hat:rhel_tus:8.8::appstream","purl":"pkg:rpm/redhat/perl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-472.module+el8.8.0+24404+b3ad2701.1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:50262.json"}},{"package":{"name":"perl-interpreter","ecosystem":"Red Hat:rhel_tus:8.8::appstream","purl":"pkg:rpm/redhat/perl-interpreter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-472.module+el8.8.0+24404+b3ad2701.1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:50262.json"}},{"package":{"name":"perl-libs","ecosystem":"Red Hat:rhel_tus:8.8::appstream","purl":"pkg:rpm/redhat/perl-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-472.module+el8.8.0+24404+b3ad2701.1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:50262.json"}},{"package":{"name":"perl-IO-Compress","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","purl":"pkg:rpm/redhat/perl-IO-Compress"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.096-1.module+el8.8.0+24435+247ee4c9.1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:50262.json"}},{"package":{"name":"perl-IO-Compress","ecosystem":"Red Hat:rhel_tus:8.8::appstream","purl":"pkg:rpm/redhat/perl-IO-Compress"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.096-1.module+el8.8.0+24435+247ee4c9.1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:50262.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}