Skip to content
OpenAdvisories
High DSA-5902-1 1 CVE

perl - security update

Published Apr 13, 2025 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 12 perl 5.36.0-7+deb12u2

Vulnerabilities 1

  • High 8.4

    Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

    A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_…