Most recent entries from all

ALSA-2026:67155 — Moderate: perl security update

Affected: AlmaLinux:9: perl, AlmaLinux:9: perl-Attribute-Handlers, AlmaLinux:9: perl-AutoLoader, AlmaLinux:9: perl-AutoSplit, AlmaLinux:9: perl-B, AlmaLinux:9: perl-Benchmark, AlmaLinux:9: perl-Class-Struct, AlmaLinux:9: perl-Config-Extensions, AlmaLinux:9: perl-DBM_Filter, AlmaLinux:9: perl-Devel-Peek and 90 more

Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

* perl: Perl: Incorrect regular expression processing via large regular expressions (CVE-2026-13221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

certfr-2026-avi-1249 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2026-avi-1249

EUVD-2026-365373

fkie_cve-2026-13221

When such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error.

A pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong.

GHSA-whhx-pv66-xhgq

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.

msrc_CVE-2026-13221 — Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 655…

msrc_CVE-2026-13221

OESA-2026-3144 — perl security update

Affected: openEuler:24.03-LTS-SP1: perl

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fix(es):

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.

openSUSE-SU-2026:21411-1 — Security update for perl

Security update for perl

RHSA-2026:39997 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

perl: Perl: Incorrect regular expression processing via large regular expressions perl: Perl: Information disclosure via integer overflow in pack/unpack operations

RLSA-2026:67155 — Moderate: perl security update

Affected: Rocky Linux:9: perl

Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

* perl: Perl: Incorrect regular expression processing via large regular expressions (CVE-2026-13221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:22847-1 — Security update for perl

Security update for perl

UBUNTU-CVE-2026-13221

Affected: Ubuntu:Pro:14.04:LTS: perl, Ubuntu:Pro:16.04:LTS: perl, Ubuntu:Pro:18.04:LTS: perl, Ubuntu:Pro:20.04:LTS: perl, Ubuntu:22.04:LTS: perl, Ubuntu:24.04:LTS: perl, Ubuntu:26.04:LTS: perl

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. When such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error. A pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong.

WID-SEC-W-2026-2309 — Perl: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Perl ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.