From: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
To: openembedded-core@lists.openembedded.org
Cc: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Subject: [wrynose][PATCH 0/2] perl: fix multiple CVEs
Date: Tue, 21 Jul 2026 15:45:41 +0200 [thread overview]
Message-ID: <20260721134543.16442-1-jaipaul.cheernam@est.tech> (raw)
Fix two security vulnerabilities in perl 5.42.0:
- CVE-2026-13221: regex trie overflow causing incorrect matches when
alternation has more than 65535 fixed string branches (CVSS 9.1)
- CVE-2026-57432: integer overflow in pack/unpack leading to
out-of-bounds heap read (CVSS 8.4)
Both are fixed upstream in perl 5.44.0.
Jaipaul Cheernam (2):
perl: fix CVE-2026-13221
perl: fix CVE-2026-57432
.../perl/files/CVE-2026-13221.patch | 75 +++++++++++++++++++
.../perl/files/CVE-2026-57432-01.patch | 52 +++++++++++++
.../perl/files/CVE-2026-57432-02.patch | 34 +++++++++
meta/recipes-devtools/perl/perl_5.42.0.bb | 3 +
4 files changed, 164 insertions(+)
create mode 100644 meta/recipes-devtools/perl/files/CVE-2026-13221.patch
create mode 100644 meta/recipes-devtools/perl/files/CVE-2026-57432-01.patch
create mode 100644 meta/recipes-devtools/perl/files/CVE-2026-57432-02.patch
next reply other threads:[~2026-07-21 13:46 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-07-21 13:45 Jaipaul Cheernam [this message]
2026-07-21 13:45 ` [wrynose][PATCH 1/2] perl: fix CVE-2026-13221 Jaipaul Cheernam
2026-07-24 13:37 ` [OE-core] " Yoann Congal
2026-08-25 4:33 ` Jaipaul Cheernam
2026-07-21 13:45 ` [wrynose][PATCH 2/2] perl: fix CVE-2026-57432 Jaipaul Cheernam
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260721134543.16442-1-jaipaul.cheernam@est.tech \
--to=jaipaul.cheernam@est.tech \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.