Skip to content
OpenAdvisories
Medium ALSA-2026:67162 1 CVE

Moderate: perl security update

Published Sep 14, 2026 · Updated Oct 29, 2026

Summary

Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

* perl: Perl: Incorrect regular expression processing via large regular expressions (CVE-2026-13221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 26

ReleasePackageFixed in
AlmaLinux · 8 perl 4:5.26.3-423.el8_10.1
AlmaLinux · 8 perl-Attribute-Handlers 0.99-423.el8_10.1
AlmaLinux · 8 perl-devel 4:5.26.3-423.el8_10.1
AlmaLinux · 8 perl-Devel-Peek 1.26-423.el8_10.1
AlmaLinux · 8 perl-Devel-SelfStubber 1.06-423.el8_10.1
AlmaLinux · 8 perl-Errno 1.28-423.el8_10.1
AlmaLinux · 8 perl-ExtUtils-Embed 1.34-423.el8_10.1
AlmaLinux · 8 perl-ExtUtils-Miniperl 1.06-423.el8_10.1
AlmaLinux · 8 perl-interpreter 4:5.26.3-423.el8_10.1
AlmaLinux · 8 perl-IO 1.38-423.el8_10.1
AlmaLinux · 8 perl-IO-Zlib 1:1.10-423.el8_10.1
AlmaLinux · 8 perl-libnetcfg 4:5.26.3-423.el8_10.1
AlmaLinux · 8 perl-libs 4:5.26.3-423.el8_10.1
AlmaLinux · 8 perl-Locale-Maketext-Simple 1:0.21-423.el8_10.1
AlmaLinux · 8 perl-macros 4:5.26.3-423.el8_10.1
AlmaLinux · 8 perl-Math-Complex 1.59-423.el8_10.1
AlmaLinux · 8 perl-Memoize 1.03-423.el8_10.1
AlmaLinux · 8 perl-Module-Loaded 1:0.08-423.el8_10.1
AlmaLinux · 8 perl-Net-Ping 2.55-423.el8_10.1
AlmaLinux · 8 perl-open 1.11-423.el8_10.1
AlmaLinux · 8 perl-Pod-Html 1.22.02-423.el8_10.1
AlmaLinux · 8 perl-SelfLoader 1.23-423.el8_10.1
AlmaLinux · 8 perl-Test 1.30-423.el8_10.1
AlmaLinux · 8 perl-tests 4:5.26.3-423.el8_10.1
AlmaLinux · 8 perl-Time-Piece 1.31-423.el8_10.1
AlmaLinux · 8 perl-utils 5.26.3-423.el8_10.1

Vulnerabilities 1

  • Critical 9.1

    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. When suc…

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-13221
  • report
    https://bugzilla.redhat.com/2499727
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-67162.html