Home / mailings

PDF

[USN-8736-2] Perl vulnerabilities

Posted on 16 September 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8736-2
September 16, 2026

perl vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS

Summary:

Several security issues were fixed in Perl.

Software Description:
- perl: Practical Extraction and Report Language

Details:

USN-8736-1 fixed vulnerabilities in Perl. This update provides the
corresponding fix for Perl on Ubuntu 24.04 LTS.

Original advisory details:

It was discovered that Perl incorrectly handled certain large inputs during
regular expression matching. An attacker could possibly use this issue to
trigger out-of-bounds heap reads or writes, resulting in a denial of
service or arbitrary code execution. (CVE-2026-15534)

It was discovered that Perl incorrectly handled certain regular expression
containing alternative matching branches. An attacker could possibly use
this issue to cause incorrect regular expression matches, resulting in
security restrictions being bypassed. (CVE-2026-19487)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
libperl-dev 5.38.2-3.2ubuntu0.6
libperl5.38t64 5.38.2-3.2ubuntu0.6
perl-base 5.38.2-3.2ubuntu0.6
perl-debug 5.38.2-3.2ubuntu0.6

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8736-2
https://ubuntu.com/security/notices/USN-8736-1
CVE-2026-15534, CVE-2026-19487

Package Information:
https://launchpad.net/ubuntu/+source/perl/5.38.2-3.2ubuntu0.6

--===============5417422139388397068==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP