UnratedFix available
perl: Fix of CVE-2026-8376
Type: advisorySources: OSV
- CVE-2026-8376: heap buffer overflow in regex compilation with repeated fixed string on 32-bit builds
- Products
- perl, perl-CPAN, perl-ExtUtils-CBuilder, perl-ExtUtils-Embed, perl-ExtUtils-Install, perl-IO-Zlib, perl-Locale-Maketext-Simple, perl-Module-CoreList, perl-Module-Loaded, perl-Object-Accessor, perl-Package-Constants, perl-Pod-Escapes, perl-Time-Piece, perl-core, perl-devel, perl-libs, perl-macros, perl-tests
- Affected versions
- Not specified
- Fixed versions
- 1.20.1-299.el7_9.tuxcare.els3, 1.30-299.el7_9.tuxcare.els3, 1.58-299.el7_9.tuxcare.els3, 1.9800-299.el7_9.tuxcare.els3, 1:0.02-299.el7_9.tuxcare.els3, 1:0.08-299.el7_9.tuxcare.els3, 1:0.21-299.el7_9.tuxcare.els3, 1:0.28.2.6-299.el7_9.tuxcare.els3, 1:0.42-299.el7_9.tuxcare.els3, 1:1.04-299.el7_9.tuxcare.els3, 1:1.10-299.el7_9.tuxcare.els3, 1:2.76.02-299.el7_9.tuxcare.els3, 4:5.16.3-299.el7_9.tuxcare.els3, 5.16.3-299.el7_9.tuxcare.els3
- CVEs
- CVE-2026-8376
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:25 UTC · Revision 1
Source evidence
- CVE-2026-8376: heap buffer overflow in regex compilation with repeated fixed string on 32-bit builds
osv:CLSA-2026-1780135768
perl
Fixed versions: 4:5.16.3-299.el7_9.tuxcare.els3
perl-CPAN
Fixed versions: 1.9800-299.el7_9.tuxcare.els3
perl-ExtUtils-CBuilder
Fixed versions: 1:0.28.2.6-299.el7_9.tuxcare.els3
perl-ExtUtils-Embed
Fixed versions: 1.30-299.el7_9.tuxcare.els3
perl-ExtUtils-Install
Fixed versions: 1.58-299.el7_9.tuxcare.els3
perl-IO-Zlib
Fixed versions: 1:1.10-299.el7_9.tuxcare.els3
perl-Locale-Maketext-Simple
Fixed versions: 1:0.21-299.el7_9.tuxcare.els3
perl-Module-CoreList
Fixed versions: 1:2.76.02-299.el7_9.tuxcare.els3
perl-Module-Loaded
Fixed versions: 1:0.08-299.el7_9.tuxcare.els3
perl-Object-Accessor
Fixed versions: 1:0.42-299.el7_9.tuxcare.els3
perl-Package-Constants
Fixed versions: 1:0.02-299.el7_9.tuxcare.els3
perl-Pod-Escapes
Fixed versions: 1:1.04-299.el7_9.tuxcare.els3
perl-Time-Piece
Fixed versions: 1.20.1-299.el7_9.tuxcare.els3
perl-core
Fixed versions: 5.16.3-299.el7_9.tuxcare.els3
perl-devel
Fixed versions: 4:5.16.3-299.el7_9.tuxcare.els3
perl-libs
Fixed versions: 4:5.16.3-299.el7_9.tuxcare.els3
perl-macros
Fixed versions: 4:5.16.3-299.el7_9.tuxcare.els3
perl-tests
Fixed versions: 4:5.16.3-299.el7_9.tuxcare.els3
Complete source record
{
"id": "1f92575bd85b60f30787b29329ca93d6988def5df22236a6357c9d06d5c1de0e",
"url": "https://osv.dev/vulnerability/CLSA-2026-1780135768",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "perl: Fix of CVE-2026-8376",
"summary": "- CVE-2026-8376: heap buffer overflow in regex compilation with repeated fixed string on 32-bit builds",
"evidence": "osv:CLSA-2026-1780135768",
"products": [
{
"name": {
"value": "perl",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4:5.16.3-299.el7_9.tuxcare.els3",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-CPAN",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.9800-299.el7_9.tuxcare.els3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-ExtUtils-CBuilder",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:0.28.2.6-299.el7_9.tuxcare.els3",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-ExtUtils-Embed",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.30-299.el7_9.tuxcare.els3",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-ExtUtils-Install",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.58-299.el7_9.tuxcare.els3",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-IO-Zlib",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:1.10-299.el7_9.tuxcare.els3",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Locale-Maketext-Simple",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:0.21-299.el7_9.tuxcare.els3",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Module-CoreList",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:2.76.02-299.el7_9.tuxcare.els3",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Module-Loaded",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:0.08-299.el7_9.tuxcare.els3",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Object-Accessor",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:0.42-299.el7_9.tuxcare.els3",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Package-Constants",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:0.02-299.el7_9.tuxcare.els3",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Pod-Escapes",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:1.04-299.el7_9.tuxcare.els3",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Time-Piece",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.20.1-299.el7_9.tuxcare.els3",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-core",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.16.3-299.el7_9.tuxcare.els3",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-devel",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4:5.16.3-299.el7_9.tuxcare.els3",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-libs",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4:5.16.3-299.el7_9.tuxcare.els3",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-macros",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4:5.16.3-299.el7_9.tuxcare.els3",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-tests",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4:5.16.3-299.el7_9.tuxcare.els3",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1780135768",
"aliases": [
"CLSA-2026-1780135768"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4:5.16.3-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl",
"purl": "pkg:rpm/tuxcare/perl?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.9800-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-CPAN",
"purl": "pkg:rpm/tuxcare/perl-CPAN?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.28.2.6-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-ExtUtils-CBuilder",
"purl": "pkg:rpm/tuxcare/perl-ExtUtils-CBuilder?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.30-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-ExtUtils-Embed",
"purl": "pkg:rpm/tuxcare/perl-ExtUtils-Embed?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.58-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-ExtUtils-Install",
"purl": "pkg:rpm/tuxcare/perl-ExtUtils-Install?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.10-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-IO-Zlib",
"purl": "pkg:rpm/tuxcare/perl-IO-Zlib?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.21-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-Locale-Maketext-Simple",
"purl": "pkg:rpm/tuxcare/perl-Locale-Maketext-Simple?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.76.02-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-Module-CoreList",
"purl": "pkg:rpm/tuxcare/perl-Module-CoreList?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.08-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-Module-Loaded",
"purl": "pkg:rpm/tuxcare/perl-Module-Loaded?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.42-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-Object-Accessor",
"purl": "pkg:rpm/tuxcare/perl-Object-Accessor?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.02-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-Package-Constants",
"purl": "pkg:rpm/tuxcare/perl-Package-Constants?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.04-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-Pod-Escapes",
"purl": "pkg:rpm/tuxcare/perl-Pod-Escapes?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.20.1-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-Time-Piece",
"purl": "pkg:rpm/tuxcare/perl-Time-Piece?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.16.3-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-core",
"purl": "pkg:rpm/tuxcare/perl-core?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4:5.16.3-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-devel",
"purl": "pkg:rpm/tuxcare/perl-devel?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4:5.16.3-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-libs",
"purl": "pkg:rpm/tuxcare/perl-libs?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4:5.16.3-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-macros",
"purl": "pkg:rpm/tuxcare/perl-macros?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4:5.16.3-299.el7_9.tuxcare.els3"
}
]
}
],
"package": {
"name": "perl-tests",
"purl": "pkg:rpm/tuxcare/perl-tests?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780135768.json"
}
}
],
"modified": "2026-10-26T09:31:54.456566190Z",
"provider": "osv",
"upstream": [
"CVE-2026-8376"
],
"references": [
"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1780135768.html"
]
},
"related_cves": [
{
"value": "CVE-2026-8376",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 448898,
"published_at": "2026-05-30T10:09:31+00:00"
}