Debian/perl: critical 9.8
Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and call
Action: Upgrade perl to 5.40.1-8 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.40.1-8 | - |
Fixed versions
| 5.40.1-8 |
Sources
- osv: DEBIAN-CVE-2026-57433#Debian:14/perl
- https://security-tracker.debian.org/tracker/CVE-2026-57433
published · modified · JSON