ALAS2023-2025-1199 — Moderate: perl-Cpanel-JSON-XS security update (Amazon Linux 2023)

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40929: Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Fixed packages 3

Release	Package	Fixed in
Amazon Linux · 2023	perl-Cpanel-JSON-XS	0:4.25-2.amzn2023.0.7
Amazon Linux · 2023	perl-Cpanel-JSON-XS-debuginfo	0:4.25-2.amzn2023.0.7
Amazon Linux · 2023	perl-Cpanel-JSON-XS-debugsource	0:4.25-2.amzn2023.0.7

Vulnerabilities 1

Medium 5.6

CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

RURBAN Cpanel::JSON::XS libcpanel-json-xs-perl libcpanel-json-xs-perl Debian Ubuntu Azure Linux Alpine

Sep 8, 2025

References

web
https://alas.aws.amazon.com/cve/html/CVE-2025-40929.html