Home / mailings

PDF

[USN-9006-1] Perl vulnerability

Posted on 10 November 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-9006-1
November 09, 2026

perl vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.10
- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

Perl could be made to crash if it processed specially crafted
input.

Software Description:
- perl: Practical Extraction and Report Language

Details:

It was discovered that Pod::Text in Perl did not properly handle POD
documents with deeply nested =over directives. If a user or automated
system were tricked into processing a specially crafted file, an
attacker could possibly use this issue to cause CPU and memory
exhaustion, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.10
perl-modules-5.42 5.42.3-1ubuntu0.1

Ubuntu 26.04 LTS
perl-modules-5.40 5.40.1-7ubuntu0.4

Ubuntu 24.04 LTS
perl-modules-5.38 5.38.2-3.2ubuntu0.7

Ubuntu 22.04 LTS
perl-modules-5.34 5.34.0-3ubuntu1.10

Ubuntu 20.04 LTS
perl-modules-5.30 5.30.0-9ubuntu0.5+esm5
Available with Ubuntu Pro

Ubuntu 18.04 LTS
perl-modules-5.26 5.26.1-6ubuntu0.7+esm5
Available with Ubuntu Pro

Ubuntu 16.04 LTS
perl-modules-5.22 5.22.1-9ubuntu0.9+esm5
Available with Ubuntu Pro

Ubuntu 14.04 LTS
perl-modules 5.18.2-2ubuntu1.7+esm10
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-9006-1
CVE-2026-82560

Package Information:
https://launchpad.net/ubuntu/+source/perl/5.42.3-1ubuntu0.1
https://launchpad.net/ubuntu/+source/perl/5.40.1-7ubuntu0.4
https://launchpad.net/ubuntu/+source/perl/5.38.2-3.2ubuntu0.7
https://launchpad.net/ubuntu/+source/perl/5.34.0-3ubuntu1.10

--===============6196573125419841865==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP