Skip to content
OpenAdvisories
Critical RHSA-2026:67156 1 CVE

Red Hat Security Advisory: perl security update

Published Sep 15, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 120

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.2 perl 4:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Attribute-Handlers 0:1.03-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-AutoLoader 0:5.74-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-AutoSplit 0:5.74-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-autouse 0:1.11-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-B 0:1.89-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-B-debuginfo 0:1.89-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-base 0:2.27-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Benchmark 0:1.25-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-blib 0:1.07-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Class-Struct 0:0.68-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Config-Extensions 0:0.03-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-DBM_Filter 0:0.06-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-debugger 0:1.60-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-debuginfo 4:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-debugsource 4:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-deprecate 0:0.04-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-devel 4:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Devel-Peek 0:1.34-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Devel-Peek-debuginfo 0:1.34-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Devel-SelfStubber 0:1.06-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-diagnostics 0:1.40-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-DirHandle 0:1.05-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-doc 0:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Dumpvalue 0:2.27-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-DynaLoader 0:1.56-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-encoding-warnings 0:0.14-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-English 0:1.11-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Errno 0:1.38-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-ExtUtils-Constant 0:0.25-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-ExtUtils-Embed 0:1.35-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-ExtUtils-Miniperl 0:1.14-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Fcntl 0:1.18-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Fcntl-debuginfo 0:1.18-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-fields 0:2.27-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-File-Basename 0:2.86-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-File-Compare 0:1.100.800-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-File-Copy 0:2.41-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-File-DosGlob 0:1.12-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-File-DosGlob-debuginfo 0:1.12-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-File-Find 0:1.44-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-File-stat 0:1.14-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-FileCache 0:1.10-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-FileHandle 0:2.05-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-filetest 0:1.03-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-FindBin 0:1.54-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-GDBM_File 1:1.24-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-GDBM_File-debuginfo 1:1.24-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Getopt-Std 0:1.14-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Hash-Util 0:0.32-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Hash-Util-debuginfo 0:0.32-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Hash-Util-FieldHash 0:1.27-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Hash-Util-FieldHash-debuginfo 0:1.27-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-I18N-Collate 0:1.02-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-I18N-Langinfo 0:0.24-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-I18N-Langinfo-debuginfo 0:0.24-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-I18N-LangTags 0:0.45-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-if 0:0.61.000-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-interpreter 4:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-interpreter-debuginfo 4:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-IO 0:1.55-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-IO-debuginfo 0:1.55-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-IPC-Open3 0:1.22-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-less 0:0.03-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-lib 0:0.65-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-libnetcfg 4:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-libs 4:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-libs-debuginfo 4:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-locale 0:1.12-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Locale-Maketext-Simple 1:0.21-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-macros 4:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Math-Complex 0:1.62-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Memoize 0:1.16-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-meta-notation 0:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Module-Loaded 1:0.08-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-mro 0:1.29-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-mro-debuginfo 0:1.29-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-NDBM_File 0:1.17-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-NDBM_File-debuginfo 0:1.17-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Net 0:1.04-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-NEXT 0:0.69-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-ODBM_File 0:1.18-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-ODBM_File-debuginfo 0:1.18-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Opcode 0:1.65-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Opcode-debuginfo 0:1.65-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-open 0:1.13-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-overload 0:1.37-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-overloading 0:0.02-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-ph 0:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Pod-Functions 0:1.14-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Pod-Html 0:1.35-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-POSIX 0:2.20-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-POSIX-debuginfo 0:2.20-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Safe 0:2.46-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Search-Dict 0:1.07-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-SelectSaver 0:1.02-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-SelfLoader 0:1.27-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-sigtrap 0:1.10-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-sort 0:2.05-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-subs 0:1.04-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Symbol 0:1.09-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Sys-Hostname 0:1.25-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Sys-Hostname-debuginfo 0:1.25-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Term-Complete 0:1.403-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Term-ReadLine 0:1.17-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Test 0:1.31-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Text-Abbrev 0:1.02-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Thread 0:3.05-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Thread-Semaphore 0:2.13-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Tie 0:4.6-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Tie-File 0:1.09-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Tie-Memoize 0:1.1-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Time 0:1.04-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Time-Piece 0:1.3401-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Time-Piece-debuginfo 0:1.3401-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-Unicode-UCD 0:0.78-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-User-pwent 0:1.05-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-utils 0:5.40.2-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-vars 0:1.05-515.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 perl-vmsish 0:1.04-515.el10_2

Vulnerabilities 1

  • Critical 9.1
    CVE-2026-13221

    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. When suc…

    perl perl perl perl Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2499727
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67156.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-13221
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-13221
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-13221
  • article
    https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch
  • article
    https://github.com/Perl/perl5/issues/23388