UnratedFix available
perl: Fix of 2 CVEs
Type: advisorySources: OSV
- CVE-2026-13221: regex trie 16-bit field overflow in Perl_study_chunk produces silently incorrect matches - CVE-2026-57432: integer overflow in S_measure_struct leads to out-of-bounds heap read in pack/unpack
- Products
- perl, perl-CPAN, perl-ExtUtils-CBuilder, perl-ExtUtils-Embed, perl-ExtUtils-Install, perl-IO-Zlib, perl-Locale-Maketext-Simple, perl-Module-CoreList, perl-Module-Loaded, perl-Object-Accessor, perl-Package-Constants, perl-Pod-Escapes, perl-Time-Piece, perl-core, perl-devel, perl-libs, perl-macros, perl-tests
- Affected versions
- Not specified
- Fixed versions
- 1.20.1-299.el7_9.tuxcare.els4, 1.30-299.el7_9.tuxcare.els4, 1.58-299.el7_9.tuxcare.els4, 1.9800-299.el7_9.tuxcare.els4, 1:0.02-299.el7_9.tuxcare.els4, 1:0.08-299.el7_9.tuxcare.els4, 1:0.21-299.el7_9.tuxcare.els4, 1:0.28.2.6-299.el7_9.tuxcare.els4, 1:0.42-299.el7_9.tuxcare.els4, 1:1.04-299.el7_9.tuxcare.els4, 1:1.10-299.el7_9.tuxcare.els4, 1:2.76.02-299.el7_9.tuxcare.els4, 4:5.16.3-299.el7_9.tuxcare.els4, 5.16.3-299.el7_9.tuxcare.els4
- CVEs
- CVE-2026-13221, CVE-2026-57432
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:35 UTC · Revision 1
Source evidence
- CVE-2026-13221: regex trie 16-bit field overflow in Perl_study_chunk produces silently incorrect matches - CVE-2026-57432: integer overflow in S_measure_struct leads to out-of-bounds heap read in pack/unpack
osv:CLSA-2026-1784296519
perl
Fixed versions: 4:5.16.3-299.el7_9.tuxcare.els4
perl-CPAN
Fixed versions: 1.9800-299.el7_9.tuxcare.els4
perl-ExtUtils-CBuilder
Fixed versions: 1:0.28.2.6-299.el7_9.tuxcare.els4
perl-ExtUtils-Embed
Fixed versions: 1.30-299.el7_9.tuxcare.els4
perl-ExtUtils-Install
Fixed versions: 1.58-299.el7_9.tuxcare.els4
perl-IO-Zlib
Fixed versions: 1:1.10-299.el7_9.tuxcare.els4
perl-Locale-Maketext-Simple
Fixed versions: 1:0.21-299.el7_9.tuxcare.els4
perl-Module-CoreList
Fixed versions: 1:2.76.02-299.el7_9.tuxcare.els4
perl-Module-Loaded
Fixed versions: 1:0.08-299.el7_9.tuxcare.els4
perl-Object-Accessor
Fixed versions: 1:0.42-299.el7_9.tuxcare.els4
perl-Package-Constants
Fixed versions: 1:0.02-299.el7_9.tuxcare.els4
perl-Pod-Escapes
Fixed versions: 1:1.04-299.el7_9.tuxcare.els4
perl-Time-Piece
Fixed versions: 1.20.1-299.el7_9.tuxcare.els4
perl-core
Fixed versions: 5.16.3-299.el7_9.tuxcare.els4
perl-devel
Fixed versions: 4:5.16.3-299.el7_9.tuxcare.els4
perl-libs
Fixed versions: 4:5.16.3-299.el7_9.tuxcare.els4
perl-macros
Fixed versions: 4:5.16.3-299.el7_9.tuxcare.els4
perl-tests
Fixed versions: 4:5.16.3-299.el7_9.tuxcare.els4
Complete source record
{
"id": "89a96ba8399a738e4eecd5c7241e5ea8d1c165471d381c7d01111419d212ef76",
"url": "https://osv.dev/vulnerability/CLSA-2026-1784296519",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "perl: Fix of 2 CVEs",
"summary": "- CVE-2026-13221: regex trie 16-bit field overflow in Perl_study_chunk produces silently incorrect matches - CVE-2026-57432: integer overflow in S_measure_struct leads to out-of-bounds heap read in pack/unpack",
"evidence": "osv:CLSA-2026-1784296519",
"products": [
{
"name": {
"value": "perl",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4:5.16.3-299.el7_9.tuxcare.els4",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-CPAN",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.9800-299.el7_9.tuxcare.els4",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-ExtUtils-CBuilder",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:0.28.2.6-299.el7_9.tuxcare.els4",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-ExtUtils-Embed",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.30-299.el7_9.tuxcare.els4",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-ExtUtils-Install",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.58-299.el7_9.tuxcare.els4",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-IO-Zlib",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:1.10-299.el7_9.tuxcare.els4",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Locale-Maketext-Simple",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:0.21-299.el7_9.tuxcare.els4",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Module-CoreList",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:2.76.02-299.el7_9.tuxcare.els4",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Module-Loaded",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:0.08-299.el7_9.tuxcare.els4",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Object-Accessor",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:0.42-299.el7_9.tuxcare.els4",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Package-Constants",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:0.02-299.el7_9.tuxcare.els4",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Pod-Escapes",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:1.04-299.el7_9.tuxcare.els4",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-Time-Piece",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.20.1-299.el7_9.tuxcare.els4",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-core",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.16.3-299.el7_9.tuxcare.els4",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-devel",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4:5.16.3-299.el7_9.tuxcare.els4",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-libs",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4:5.16.3-299.el7_9.tuxcare.els4",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-macros",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4:5.16.3-299.el7_9.tuxcare.els4",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perl-tests",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4:5.16.3-299.el7_9.tuxcare.els4",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1784296519",
"aliases": [
"CLSA-2026-1784296519"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4:5.16.3-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl",
"purl": "pkg:rpm/tuxcare/perl?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.9800-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-CPAN",
"purl": "pkg:rpm/tuxcare/perl-CPAN?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.28.2.6-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-ExtUtils-CBuilder",
"purl": "pkg:rpm/tuxcare/perl-ExtUtils-CBuilder?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.30-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-ExtUtils-Embed",
"purl": "pkg:rpm/tuxcare/perl-ExtUtils-Embed?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.58-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-ExtUtils-Install",
"purl": "pkg:rpm/tuxcare/perl-ExtUtils-Install?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.10-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-IO-Zlib",
"purl": "pkg:rpm/tuxcare/perl-IO-Zlib?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.21-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-Locale-Maketext-Simple",
"purl": "pkg:rpm/tuxcare/perl-Locale-Maketext-Simple?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.76.02-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-Module-CoreList",
"purl": "pkg:rpm/tuxcare/perl-Module-CoreList?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.08-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-Module-Loaded",
"purl": "pkg:rpm/tuxcare/perl-Module-Loaded?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.42-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-Object-Accessor",
"purl": "pkg:rpm/tuxcare/perl-Object-Accessor?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.02-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-Package-Constants",
"purl": "pkg:rpm/tuxcare/perl-Package-Constants?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.04-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-Pod-Escapes",
"purl": "pkg:rpm/tuxcare/perl-Pod-Escapes?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.20.1-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-Time-Piece",
"purl": "pkg:rpm/tuxcare/perl-Time-Piece?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.16.3-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-core",
"purl": "pkg:rpm/tuxcare/perl-core?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4:5.16.3-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-devel",
"purl": "pkg:rpm/tuxcare/perl-devel?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4:5.16.3-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-libs",
"purl": "pkg:rpm/tuxcare/perl-libs?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4:5.16.3-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-macros",
"purl": "pkg:rpm/tuxcare/perl-macros?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4:5.16.3-299.el7_9.tuxcare.els4"
}
]
}
],
"package": {
"name": "perl-tests",
"purl": "pkg:rpm/tuxcare/perl-tests?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784296519.json"
}
}
],
"modified": "2026-10-26T09:31:58.272583787Z",
"provider": "osv",
"upstream": [
"CVE-2026-13221",
"CVE-2026-57432"
],
"references": [
"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1784296519.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-13221",
"https://nvd.nist.gov/vuln/detail/CVE-2026-57432"
]
},
"related_cves": [
{
"value": "CVE-2026-13221",
"evidence": "/upstream"
},
{
"value": "CVE-2026-57432",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 449191,
"published_at": "2026-07-17T13:55:46+00:00"
}