Skip to content
OpenAdvisories
Medium ELSA-2025-17163 1 CVE

Moderate: perl-JSON-XS security update (Oracle Linux 8)

Published Oct 1, 2025 · Updated Oct 1, 2025

Ecosystem: Oracle Linux

Summary

[1:3.04-4]
- Resolves: RHEL-113630 - Fix CVE-2025-40928
- Package tests

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 perl-JSON-XS 1:3.04-4.el8_10

Vulnerabilities 1

  • High 7.5
    CVE-2025-40928

    JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

    JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

    MLEHMANN JSON::XS libjson-xs-perl perl-JSON-XS Debian Ubuntu Azure Linux