[CLSA-2026:1789718965] Fix CVE(s): CVE-2026-8376
Type:
security
Severity:
Critical
Release date:
2026-09-18 08:11:38 UTC
Description:
* SECURITY UPDATE: Buffer overflow in Perl_study_chunk via regex with large repeat counts on multi-character strings - debian/patches/CVE-2026-8376.patch: guard the repeated fixed string buffer size against SSize_t overflow in regcomp.c - upstream's companion test cases are not carried: they assert "Regexp out of space", but 5.32.1 still has REG_INFTY == U16_MAX so the patterns are rejected earlier by the quantifier parser, and the cases are only skipped when ptrsize != 4 so they would run and fail on armel - CVE-2026-8376
CVEs fixed:
Updated packages:
  • libperl-dev_5.32.1-4+deb11u5+tuxcare.els5_amd64.deb
    sha:5fb77164fcc26bf4975f40280c7ed004013214b8
  • libperl5.32_5.32.1-4+deb11u5+tuxcare.els5_amd64.deb
    sha:0dac2560d8f2ebf2e878e12403f77a5e25d8b9dd
  • perl_5.32.1-4+deb11u5+tuxcare.els5_amd64.deb
    sha:1cb7f47c6e23019a97568d2b122e918e02d4d1df
  • perl-base_5.32.1-4+deb11u5+tuxcare.els5_amd64.deb
    sha:f709eb789b3de780ddabfd84b64183c3d0454a71
  • perl-debug_5.32.1-4+deb11u5+tuxcare.els5_amd64.deb
    sha:ee5f00c859dfa571285ed0b7b55aa723bc4f96a4
  • perl-doc_5.32.1-4+deb11u5+tuxcare.els5_all.deb
    sha:eafa49e54b8b948c2c1003050e3e2e42795f3c35
  • perl-modules-5.32_5.32.1-4+deb11u5+tuxcare.els5_all.deb
    sha:22aa9fe97564ab95dce3cad67dbb9c7e3f17fc7e
  • libperl-dev_5.32.1-4+deb11u5+tuxcare.els5_arm64.deb
    sha:41102d071db4d46dbc58b840b96632bdb3138036
  • libperl5.32_5.32.1-4+deb11u5+tuxcare.els5_arm64.deb
    sha:568b7764ad1c6ce7fc0b8fed66f4b0c431a91abc
  • perl_5.32.1-4+deb11u5+tuxcare.els5_arm64.deb
    sha:3ccdd61a9459b9c61d972848b80c098ab8eec514
  • perl-base_5.32.1-4+deb11u5+tuxcare.els5_arm64.deb
    sha:5d78449aa2544af865b8e0d6e9dad5dd2afba40c
  • perl-debug_5.32.1-4+deb11u5+tuxcare.els5_arm64.deb
    sha:9b86fe2a9f44bc96130fff7ff89298a66e4824d5
  • libperl-dev_5.32.1-4+deb11u5+tuxcare.els5_armel.deb
    sha:65df758d7a5e5e6ec33bfc82025cd0f9cf060522
  • libperl5.32_5.32.1-4+deb11u5+tuxcare.els5_armel.deb
    sha:3b1a565cfe2470d8e4f6bdbcf51c1069d9d116bb
  • perl_5.32.1-4+deb11u5+tuxcare.els5_armel.deb
    sha:0612fde463cc4503d3881aa6564e57ecd5f56776
  • perl-base_5.32.1-4+deb11u5+tuxcare.els5_armel.deb
    sha:7487a4e5181e6c623c54d518a49a86712e5867c8
  • perl-debug_5.32.1-4+deb11u5+tuxcare.els5_armel.deb
    sha:e930c2811a4184c2bd8f902838dbc47993b0983d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.