Skip to content
OpenAdvisories
Critical RHSA-2026:39997 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Aug 5, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 101

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 perl 4:5.42.2-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Attribute-Handlers 0:1.03-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-AutoLoader 0:5.74-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-AutoSplit 0:5.74-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-autouse 0:1.11-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-B 0:1.89-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-base 0:2.27-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Benchmark 0:1.27-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-blib 0:1.07-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Class-Struct 0:0.68-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Config-Extensions 0:0.03-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-DBM_Filter 0:0.07-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-debugger 0:1.60-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-deprecate 0:0.04-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-devel 4:5.42.2-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Devel-Peek 0:1.36-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Devel-SelfStubber 0:1.06-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-diagnostics 0:1.40-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-DirHandle 0:1.05-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-doc 0:5.42.2-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Dumpvalue 0:2.27-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-DynaLoader 0:1.57-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-encoding-warnings 0:0.14-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-English 0:1.11-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Errno 0:1.38-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-ExtUtils-Constant 0:0.25-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-ExtUtils-Embed 0:1.35-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-ExtUtils-Miniperl 0:1.14-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Fcntl 0:1.20-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-fields 0:2.27-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-File-Basename 0:2.86-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-File-Compare 0:1.100.800-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-File-Copy 0:2.41-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-File-DosGlob 0:1.12-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-File-Find 0:1.44-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-File-stat 0:1.14-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-FileCache 0:1.10-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-FileHandle 0:2.05-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-filetest 0:1.03-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-FindBin 0:1.54-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-GDBM_File 1:1.24-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Getopt-Std 0:1.14-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Hash-Util 0:0.32-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Hash-Util-FieldHash 0:1.27-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-I18N-Collate 0:1.02-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-I18N-Langinfo 0:0.24-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-I18N-LangTags 0:0.45-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-if 0:0.61.000-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-interpreter 4:5.42.2-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-IO 0:1.55-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-IPC-Open3 0:1.24-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-less 0:0.03-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-lib 0:0.65-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-libnetcfg 4:5.42.2-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-libs 4:5.42.2-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-locale 0:1.13-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Locale-Maketext-Simple 1:0.21-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-macros 4:5.42.2-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Math-Complex 0:1.63-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Memoize 0:1.17-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-meta-notation 0:5.42.2-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Module-Loaded 1:0.08-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-mro 0:1.29-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-NDBM_File 0:1.18-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Net 0:1.04-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-NEXT 0:0.69-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-ODBM_File 0:1.20-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Opcode 0:1.69-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-open 0:1.13-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-overload 0:1.40-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-overloading 0:0.02-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-ph 0:5.42.2-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Pod-Functions 0:1.14-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Pod-Html 0:1.35-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-POSIX 0:2.23-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Safe 0:2.47-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Search-Dict 0:1.08-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-SelectSaver 0:1.02-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-SelfLoader 0:1.28-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-sigtrap 0:1.10-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-sort 0:2.06-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-subs 0:1.04-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Symbol 0:1.09-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Sys-Hostname 0:1.25-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Term-Complete 0:1.403-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Term-ReadLine 0:1.17-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Test 0:1.31-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-tests 4:5.42.2-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Text-Abbrev 0:1.02-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Thread 0:3.06-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Thread-Semaphore 0:2.13-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Tie 0:4.6-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Tie-File 0:1.10-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Tie-Memoize 0:1.1-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Time 0:1.04-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Time-Piece 0:1.3600-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-Unicode-UCD 0:0.81-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-User-pwent 0:1.05-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-utils 0:5.42.2-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-vars 0:1.05-524.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 perl-vmsish 0:1.04-524.3.hum1

Vulnerabilities 2

  • Critical 9.1
    CVE-2026-13221

    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. When suc…

    perl perl perl perl Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.4
    CVE-2026-57432

    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack

    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds each item's size times its repeat count to …

    perl perl perl perl Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-13221
  • report
    https://access.redhat.com/security/cve/CVE-2026-57432
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39997.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2499727
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-13221
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-13221
  • article
    https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch
  • article
    https://github.com/Perl/perl5/issues/23388
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2499729
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-57432
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-57432
  • article
    https://github.com/Perl/perl5/commit/40754edc72dd3e513d758153c0e2f0215897740e.patch
  • article
    https://github.com/Perl/perl5/commit/5f7eb6bbbe0510964e3fb1d6bb691e5445913e55.patch