tocsin

Debian/perl: high 8.4

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_meas

Action: Upgrade perl to 5.36.0-7+deb12u4 or later.

Affected

introducedfixedlast affected
05.36.0-7+deb12u4-

Fixed versions

5.36.0-7+deb12u4

Sources

published · modified · JSON