18584 matches found
CVE-2026-18089
Net::SAML2 for Perl versions before 0.86 is vulnerable to a SAML authentication bypass when no trust anchor is configured. The root cause is that verify_xml uses the response-embedded certificate (dsig:KeyInfo/dsig:X509Certificate) and returns early if there are no anchors and no cacert, enabling...
SUSE-SU-2026:3454-1 Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion due to polynomial regex backtracking in parsedate when processing specially crafted date strings bsc1271705...
RHSA-2026:49525 Red Hat Security Advisory: perl-Archive-Tar security update
Bulletin has no description...
RHSA-2026:49524 Red Hat Security Advisory: perl-Archive-Tar security update
Bulletin has no description...
RHSA-2026:49523 Red Hat Security Advisory: perl-Archive-Tar security update
Bulletin has no description...
RHSA-2026:49514 Red Hat Security Advisory: perl-DBI security update
Bulletin has no description...
Important: Red Hat Security Advisory: perl-DBI security update
An update for perl-DBI is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders
A flaw was found in DBI for Perl. This vulnerability, a heap overflow, occurs when the software attempts to preparse SQL statements containing an extremely large number of placeholders. This could allow a remote attacker to cause a denial of service or potentially execute arbitrary code...
DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute
A flaw was found in the DBI component for Perl. This vulnerability allows an attacker to inject and execute arbitrary code by manipulating the Profile attribute of a DBI handle. When a string is assigned to this attribute, the component processes it without proper validation, enabling the executi...
perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size
A flaw was found in the perl-Archive-Tar component. An attacker can exploit this vulnerability by providing a crafted tar header with an excessively large entry size field. This can lead to memory exhaustion, resulting in a Denial of Service DoS for the affected system...
Important: Red Hat Security Advisory: perl-Archive-Tar security update
An update for perl-Archive-Tar is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size
A flaw was found in the perl-Archive-Tar component. An attacker can exploit this vulnerability by providing a crafted tar header with an excessively large entry size field. This can lead to memory exhaustion, resulting in a Denial of Service DoS for the affected system...
DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders
A flaw was found in DBI for Perl. This vulnerability, a heap overflow, occurs when the software attempts to preparse SQL statements containing an extremely large number of placeholders. This could allow a remote attacker to cause a denial of service or potentially execute arbitrary code...
DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute
A flaw was found in the DBI component for Perl. This vulnerability allows an attacker to inject and execute arbitrary code by manipulating the Profile attribute of a DBI handle. When a string is assigned to this attribute, the component processes it without proper validation, enabling the executi...
Important: Red Hat Security Advisory: perl-DBI security update
An update for perl-DBI is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size
A flaw was found in the perl-Archive-Tar component. An attacker can exploit this vulnerability by providing a crafted tar header with an excessively large entry size field. This can lead to memory exhaustion, resulting in a Denial of Service DoS for the affected system...
Important: Red Hat Security Advisory: perl-Archive-Tar security update
An update for perl-Archive-Tar is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...
Important: perl-Archive-Tar security update
Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support...
ALSA-2026:49525 Important: perl-Archive-Tar security update
Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support...
RHEL 10 : perl-DBI (RHSA-2026:49514)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:49514 advisory. DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions...