Debian/perl: high 8.4
Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_meas
Action: Upgrade perl to 5.40.1-6+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.40.1-6+deb13u1 | - |
Fixed versions
| 5.40.1-6+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-57432#Debian:13/perl
- https://security-tracker.debian.org/tracker/CVE-2026-57432
published · modified · JSON