Skip to content
OpenAdvisories
Medium ALAS2-2026-4080 1 CVE

Moderate: perl-podlators security update (Amazon Linux 2)

Published Nov 9, 2026 · Updated Nov 9, 2026

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-82560: Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass. Formatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted.

Fixed packages 1

ReleasePackageFixed in
Amazon Linux · 2 perl-podlators 0:2.5.1-3.amzn2.0.2

Vulnerabilities 1

  • High 7.5

    Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width

    Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap() subtracts from the output width to get the spa…

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-82560.html