Home / mailings

PDF

[USN-8736-1] Perl vulnerabilities

Posted on 08 September 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8736-1
September 08, 2026

perl vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in Perl.

Software Description:
- perl: Practical Extraction and Report Language

Details:

It was discovered that Perl incorrectly handled certain large inputs during
regular expression matching. An attacker could possibly use this issue to
trigger out-of-bounds heap reads or writes, resulting in a denial of
service or arbitrary code execution. (CVE-2026-15534)

It was discovered that Perl incorrectly handled certain regular expression
containing alternative matching branches. An attacker could possibly use
this issue to cause incorrect regular expression matches, resulting in
security restrictions being bypassed. (CVE-2026-19487)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
libperl-dev 5.40.1-7ubuntu0.2
libperl5.40 5.40.1-7ubuntu0.2
perl-base 5.40.1-7ubuntu0.2
perl-debug 5.40.1-7ubuntu0.2

Ubuntu 22.04 LTS
libperl-dev 5.34.0-3ubuntu1.9
libperl5.34 5.34.0-3ubuntu1.9
perl-base 5.34.0-3ubuntu1.9
perl-debug 5.34.0-3ubuntu1.9

Ubuntu 20.04 LTS
libperl-dev 5.30.0-9ubuntu0.5+esm4
Available with Ubuntu Pro
libperl5.30 5.30.0-9ubuntu0.5+esm4
Available with Ubuntu Pro
perl-base 5.30.0-9ubuntu0.5+esm4
Available with Ubuntu Pro
perl-debug 5.30.0-9ubuntu0.5+esm4
Available with Ubuntu Pro

Ubuntu 18.04 LTS
libperl-dev 5.26.1-6ubuntu0.7+esm4
Available with Ubuntu Pro
libperl5.26 5.26.1-6ubuntu0.7+esm4
Available with Ubuntu Pro
perl-base 5.26.1-6ubuntu0.7+esm4
Available with Ubuntu Pro
perl-debug 5.26.1-6ubuntu0.7+esm4
Available with Ubuntu Pro

Ubuntu 16.04 LTS
libperl-dev 5.22.1-9ubuntu0.9+esm4
Available with Ubuntu Pro
libperl5.22 5.22.1-9ubuntu0.9+esm4
Available with Ubuntu Pro
perl-base 5.22.1-9ubuntu0.9+esm4
Available with Ubuntu Pro
perl-debug 5.22.1-9ubuntu0.9+esm4
Available with Ubuntu Pro

Ubuntu 14.04 LTS
libperl-dev 5.18.2-2ubuntu1.7+esm9
Available with Ubuntu Pro
perl 5.18.2-2ubuntu1.7+esm9
Available with Ubuntu Pro
perl-base 5.18.2-2ubuntu1.7+esm9
Available with Ubuntu Pro
perl-debug 5.18.2-2ubuntu1.7+esm9
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8736-1
CVE-2026-15534, CVE-2026-19487

Package Information:
https://launchpad.net/ubuntu/+source/perl/5.40.1-7ubuntu0.2
https://launchpad.net/ubuntu/+source/perl/5.34.0-3ubuntu1.9

--===============2935078600284579988==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP