Summary
It was discovered that Perl's Archive::Tar module incorrectly handled
symlink and hardlink targets during extraction. An attacker could use this
issue to read or overwrite arbitrary files outside the extraction
directory. (CVE-2026-42496)
It was discovered that Perl had a heap buffer overflow when compiling
regular expressions with a repeated fixed string on 32-bit builds. An
attacker could use this issue to cause a denial of service or possibly
execute arbitrary code. (CVE-2026-8376)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | perl | 5.18.2-2ubuntu1.7+esm7 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | perl | 5.22.1-9ubuntu0.9+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | perl | 5.26.1-6ubuntu0.7+esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | perl | 5.30.0-9ubuntu0.5+esm2 |
Vulnerabilities 2
-
Critical 9.1
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The …
-
High 7.3
Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds
Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of th…