Skip to content
OpenAdvisories
Medium ELSA-2025-17162 1 CVE

Moderate: perl-JSON-XS security update (Oracle Linux 9)

Published Oct 1, 2025 · Updated Oct 1, 2025

Ecosystem: Oracle Linux

Summary

[1:4.04-1]
- Update to 4.04
- Fix CVE-2025-40928

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 perl-JSON-XS 1:4.04-1.el9_6

Vulnerabilities 1

  • High 7.5
    CVE-2025-40928

    JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

    JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

    MLEHMANN JSON::XS libjson-xs-perl perl-JSON-XS Debian Ubuntu Azure Linux