OESA-2026-3777 perl-Authen-SASL security update

Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms. Security Fixes: Authen::SASL::Perl::DIGESTMD5 versions 2.04 through 2.1800 for Perl...

OESA-2026-3776 perl-Authen-SASL security update

Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms. Security Fixes: Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept...

OESA-2026-3775 perl-Authen-SASL security update

Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms. Security Fixes: Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept...

OESA-2026-3765 perl-DBI security update

The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...

OESA-2026-3714 perl-URI security update

This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 and updated by RFC 2732. Security Fixes: URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in...

Updated perl-Authen-SASL packages fix a security vulnerability

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. CVE-2026-86219...

MGASA-2026-0400 Updated perl-Authen-SASL packages fix a security vulnerability

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. CVE-2026-86219...

Updated perl-HTML-FormFu packages fix a security vulnerability

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. CVE-2026-19873...

Astra Linux – Vulnerability in libxml-parser-perl

XML::Parser versions up to 2.47 for Perl have a heap buffer overflow issue in stserialstack. In the case where stackptr == stacksize - 1, the stack will NOT be expanded. As a result, the new value will be written at location ++stackptr, which equals stacksize. This means that the new value falls...

RLSA-2026:67278 Moderate: perl:5.32 security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...

perl:5.32 security update

An update is available for perl-Module-Build, perl-threads, perl-perlfaq, module.perl-File-Temp, perl-Module-Metadata, module.perl, perl-File-HomeDir, perl-Getopt-Long, perl-Sys-Syslog, perl-Math-BigRat, module.perl-Object-HashBase, perl-URI, module.perl-version, module.perl-Exporter,...

Astra Linux – Vulnerability in Perl

HTTP::Tiny, a Perl core module since version 5.13.9 and available as a standalone package on CPAN, has an insecure default TLS configuration. In this configuration, users are required to explicitly choose to verify certificates...

Astra Linux – Vulnerability in libmojolicious-perl

The Mojolicious module prior to version 8.65 for Perl is vulnerable to securecompare timing attacks, which allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected...

Astra Linux - Vulnerability in libdata-validate-ip-perl

The Data::Validate::IP module for Perl, up to version 0.29, does not properly handle extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control based on IP addresses...

Astra Linux – Vulnerability in pcre2

A out-of-bounds read vulnerability was discovered in the PCRE2 library, specifically in the pcre2jitcompile.c file’s compilexclassmatchingpath function. This issue relates to a Unicode property matching problem in JIT-compiled regular expressions. The vulnerability arises because the character is...

Astra Linux – Vulnerability in libimage-exiftool-perl

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and above allows arbitrary code execution when parsing the malicious image...

Astra Linux – Vulnerability in libxml-parser-perl

Versions of XML::Parser from 2.45 onwards for Perl may overflow the pre-allocated buffer size, leading to heap corruption double-free or corruption and crashes. The A:utf8 PerlIO layer, using the parsestream function in Expat.xs, may cause the XML input buffer to overflow. This is because Perl’s...

Astra Linux – Vulnerability in libimage-exiftool-perl

In ExifTool’s lib/Image/ExifTool.pm, version 12.38 incorrectly handles the $file = /|$/ check, resulting in command injection...

Astra Linux – Vulnerability in Perl

CPAN 2.28 allows for Signature Verification Bypass...

Astra Linux – Vulnerability in libmodule-scandeps-perl

Qualys discovered that if unsanitized input was used with the Modules::ScanDeps library, before version 1.36, a local attacker could potentially execute arbitrary shell commands by opening a “pesky pipe” e.g., passing “commands|” as a filename or by passing arbitrary strings to the eval function...