Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-8376: Buffer overflow in Perl_study_chunk
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | perl | 4:5.16.3-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-core | 0:5.16.3-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-CPAN | 0:1.9800-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-debuginfo | 4:5.16.3-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-devel | 4:5.16.3-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-ExtUtils-CBuilder | 1:0.28.2.6-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-ExtUtils-Embed | 0:1.30-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-ExtUtils-Install | 0:1.58-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-IO-Zlib | 1:1.10-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-libs | 4:5.16.3-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-Locale-Maketext-Simple | 1:0.21-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-macros | 4:5.16.3-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-Module-CoreList | 1:2.76.02-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-Module-Loaded | 1:0.08-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-Object-Accessor | 1:0.42-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-Package-Constants | 1:0.02-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-Pod-Escapes | 1:1.04-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-tests | 4:5.16.3-299.amzn2.0.4 |
| Amazon Linux · 2 | perl-Time-Piece | 0:1.20.1-299.amzn2.0.4 |
Vulnerabilities 1
-
High 7.3
Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds
Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of th…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-8376.html