Skip to content
OpenAdvisories
Critical RHSA-2026:67162 1 CVE

Red Hat Security Advisory: perl security update

Published Sep 15, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 41

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream perl 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Attribute-Handlers 0:0.99-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-debuginfo 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-debugsource 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-devel 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Devel-Peek 0:1.26-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Devel-Peek-debuginfo 0:1.26-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Devel-SelfStubber 0:1.06-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-ExtUtils-Embed 0:1.34-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-ExtUtils-Miniperl 0:1.06-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-interpreter-debuginfo 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-IO-debuginfo 0:1.38-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-libnetcfg 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-libs-debuginfo 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Locale-Maketext-Simple 1:0.21-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Memoize 0:1.03-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Module-Loaded 1:0.08-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Net-Ping 0:2.55-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-open 0:1.11-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Pod-Html 0:1.22.02-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-SelfLoader 0:1.23-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Test 0:1.30-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-tests 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Time-Piece 0:1.31-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-Time-Piece-debuginfo 0:1.31-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::appstream perl-utils 0:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-debuginfo 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-debugsource 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-Devel-Peek-debuginfo 0:1.26-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-Errno 0:1.28-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-interpreter 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-interpreter-debuginfo 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-IO 0:1.38-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-IO-debuginfo 0:1.38-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-IO-Zlib 1:1.10-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-libs 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-libs-debuginfo 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-macros 4:5.26.3-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-Math-Complex 0:1.59-423.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::baseos perl-Time-Piece-debuginfo 0:1.31-423.el8_10.1

Vulnerabilities 1

  • Critical 9.1
    CVE-2026-13221

    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. When suc…

    perl perl perl perl Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2499727
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67162.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-13221
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-13221
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-13221
  • article
    https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch
  • article
    https://github.com/Perl/perl5/issues/23388