Skip to content
OpenAdvisories
Critical RHSA-2026:67155 1 CVE

Red Hat Security Advisory: perl security update

Published Sep 14, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 120

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream perl 4:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Attribute-Handlers 0:1.01-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-AutoLoader 0:5.74-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-AutoSplit 0:5.74-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-autouse 0:1.11-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-B 0:1.80-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-B-debuginfo 0:1.80-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-base 0:2.27-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Benchmark 0:1.23-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-blib 0:1.07-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Class-Struct 0:0.66-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Config-Extensions 0:0.03-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-DBM_Filter 0:0.06-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-debugger 0:1.56-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-debuginfo 4:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-debugsource 4:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-deprecate 0:0.04-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-devel 4:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Devel-Peek 0:1.28-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Devel-Peek-debuginfo 0:1.28-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Devel-SelfStubber 0:1.06-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-diagnostics 0:1.37-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-DirHandle 0:1.05-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-doc 0:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Dumpvalue 0:2.27-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-DynaLoader 0:1.47-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-encoding-warnings 0:0.13-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-English 0:1.11-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Errno 0:1.30-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ExtUtils-Constant 0:0.25-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ExtUtils-Embed 0:1.35-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ExtUtils-Miniperl 0:1.09-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Fcntl 0:1.13-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Fcntl-debuginfo 0:1.13-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-fields 0:2.27-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-Basename 0:2.85-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-Compare 0:1.100.600-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-Copy 0:2.34-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-DosGlob 0:1.12-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-DosGlob-debuginfo 0:1.12-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-Find 0:1.37-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-stat 0:1.09-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-FileCache 0:1.10-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-FileHandle 0:2.03-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-filetest 0:1.03-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-FindBin 0:1.51-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-GDBM_File 0:1.18-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-GDBM_File-debuginfo 0:1.18-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Getopt-Std 0:1.12-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Hash-Util 0:0.23-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Hash-Util-debuginfo 0:0.23-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Hash-Util-FieldHash 0:1.20-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Hash-Util-FieldHash-debuginfo 0:1.20-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-I18N-Collate 0:1.02-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-I18N-Langinfo 0:0.19-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-I18N-Langinfo-debuginfo 0:0.19-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-I18N-LangTags 0:0.44-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-if 0:0.60.800-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-interpreter 4:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-interpreter-debuginfo 4:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-IO 0:1.43-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-IO-debuginfo 0:1.43-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-IPC-Open3 0:1.21-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-less 0:0.03-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-lib 0:0.65-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-libnetcfg 4:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-libs 4:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-libs-debuginfo 4:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-locale 0:1.09-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Locale-Maketext-Simple 1:0.21-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-macros 4:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Math-Complex 0:1.59-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Memoize 0:1.03-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-meta-notation 0:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Module-Loaded 1:0.08-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-mro 0:1.23-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-mro-debuginfo 0:1.23-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-NDBM_File 0:1.15-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-NDBM_File-debuginfo 0:1.15-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Net 0:1.02-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-NEXT 0:0.67-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ODBM_File 0:1.16-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ODBM_File-debuginfo 0:1.16-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Opcode 0:1.48-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Opcode-debuginfo 0:1.48-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-open 0:1.12-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-overload 0:1.31-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-overloading 0:0.02-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ph 0:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Pod-Functions 0:1.13-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Pod-Html 0:1.25-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-POSIX 0:1.94-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-POSIX-debuginfo 0:1.94-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Safe 0:2.41-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Search-Dict 0:1.07-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-SelectSaver 0:1.02-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-SelfLoader 0:1.26-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-sigtrap 0:1.09-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-sort 0:2.04-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-subs 0:1.03-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Symbol 0:1.08-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Sys-Hostname 0:1.23-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Sys-Hostname-debuginfo 0:1.23-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Term-Complete 0:1.403-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Term-ReadLine 0:1.17-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Test 0:1.31-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Text-Abbrev 0:1.02-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Thread 0:3.05-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Thread-Semaphore 0:2.13-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Tie 0:4.6-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Tie-File 0:1.06-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Tie-Memoize 0:1.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Time 0:1.03-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Time-Piece 0:1.3401-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Time-Piece-debuginfo 0:1.3401-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Unicode-UCD 0:0.75-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-User-pwent 0:1.03-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-utils 0:5.32.1-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-vars 0:1.05-484.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-vmsish 0:1.04-484.el9_8

Vulnerabilities 1

  • Critical 9.1
    CVE-2026-13221

    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. When suc…

    perl perl perl perl Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2499727
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67155.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-13221
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-13221
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-13221
  • article
    https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch
  • article
    https://github.com/Perl/perl5/issues/23388