Skip to content
OpenAdvisories
High RLSA-2025:7500 1 CVE

Important: perl security update

Published Oct 3, 2025 · Updated Oct 8, 2025

Ecosystem: Rocky Linux

Summary

Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

* perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-ASCII bytes (CVE-2024-56406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 10 perl 4:5.40.2-512.1.el10_0

Vulnerabilities 1

  • High 8.4
    CVE-2024-56406

    Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

    A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_…

    perl perl perl perl Debian Ubuntu Azure Linux Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2359290