Debian/perl: critical 9.8
Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and call
Action: Upgrade perl to 5.36.0-7+deb12u4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.36.0-7+deb12u4 | - |
Fixed versions
| 5.36.0-7+deb12u4 |
Sources
published · modified · JSON