{"cves":["CVE-2026-42496","CVE-2026-48962"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"perl\n[4:5.32.1-474]\n- Resolves: RHEL-153834\n- Fix CVE-2025-40909 - Clone dirhandles without fchdir\n\nperl-Algorithm-Diff\n[1.1903-10]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Archive-Tar\n[2.38-4]\n- Fix CVE-2026-42496: validate symlink and hardlink targets in secure\n  extract mode\n  Resolves: RHEL-181655\n\nperl-Archive-Zip\n[1.68-3]\n- Remove an unused build-time dependency on Test::MockModule\n\nperl-autodie\n[2.34-1]\n- 2.34 bump\n\nperl-bignum\n[0.51-439]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-Carp\n[1.50-439]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-Compress-Bzip2\n[2.28-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-Compress-Raw-Bzip2\n[2.096-1]\n- 2.096 bump\n\nperl-Compress-Raw-Lzma\n[2.096-1]\n- Update to 2.096 (no changes)\n\nperl-Compress-Raw-Zlib\n[2.096-2]\n- Fix test broken by update in zlib on s390x\n- Related: RHEL-16371\n\nperl-Config-Perl-V\n[0.32-441]\n- Indeed upgrade to 0.32\n\nperl-constant\n[1.33-1001]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-CPAN\n[2.28-5]\n- Run-require complete perl\n\nperl-CPAN-DistnameInfo\n[0.12-13]\n- Remove perl-CPAN-DistnameInfo RPM package from perl-App-cpanminus module with\n  perl:5.30 (bug #1713592)\n\nperl-CPAN-Meta\n[2.150010-397]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-CPAN-Meta-Requirements\n[2.140-397]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-CPAN-Meta-YAML\n[0.018-1001]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Data-Dumper\n[2.174-440]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-Data-OptList\n[0.110-7]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Data-Section\n[0.200007-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-DB_File\n[1.855-1]\n- 1.855 bump\n\nperl-Devel-PPPort\n[3.62-1]\n- 3.62 bump\n\nperl-Devel-Size\n[0.83-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-Digest\n[1.20-1]\n- 1.20 bump\n\nperl-Digest-MD5\n[2.58-1]\n- 2.58 bump\n\nperl-Digest-SHA\n[1:6.02-2]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Encode\n[4:3.08-461]\n- Fix memory leak in function encode_method()\n- 'Fix a memory leak on FB_CROAK' was reverted in Encode 3.15\n\nperl-Encode-Locale\n[1.05-10]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Env\n[1.04-396]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-experimental\n[0.025-1]\n- 0.025 bump\n\nperl-Exporter\n[5.74-458]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-ExtUtils-CBuilder\n[1:0.280236-1]\n- 0.280236 bump\n\nperl-ExtUtils-Install\n[2.20-1]\n- 2.20 bump\n\nperl-ExtUtils-MakeMaker\n[2:7.46-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-ExtUtils-Manifest\n[1:1.73-1]\n- 1.73 bump\n\nperl-ExtUtils-ParseXS\n[1:3.40-439]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-Fedora-VSP\n[0.001-10]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-File-Fetch\n[1.00-1]\n- 1.00 bump\n\nperl-File-HomeDir\n[1.004-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-File-Path\n[2.16-439]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-File-Temp\n[1:0.231.100-1]\n- 0.2311 bump\n\nperl-File-Which\n[1.23-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-Filter\n[2:1.60-1]\n- 1.60 bump\n\nperl-Filter-Simple\n[0.96-457]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-generators\n[1.13-1]\n- 1.13 bump\n\nperl-Getopt-Long\n[1:2.52-1]\n- 2.52 bump\n\nperl-HTTP-Tiny\n[0.078-1]\n- 0.078 bump\n\nperl-Importer\n[0.025-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-inc-latest\n[2:0.500-10]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-IO-Compress\n[2.096-2]\n- Resolves arbitrary code execution via attacker-controlled output glob (CVE-2026-48962)\n  Resolves: RHEL-180421\n\nperl-IO-Compress-Lzma\n[2.096-1]\n- Update to 2.096\n  - Add test for Zip with XZ compression\n\nperl-IO-Socket-IP\n[0.41-2]\n- Create Makefile.PL, use ExtUtils::MakeMaker instead of Module::Build\n\nperl-IPC-Cmd\n[2:1.04-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-IPC-System-Simple\n[1.30-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-IPC-SysV\n[2.09-1]\n- 2.09 bump\n\nperl-JSON-PP\n[1:4.04-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-libnet\n[3.13-1]\n- 3.13 bump\n\nperl-Locale-Maketext\n[1.29-440]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-local-lib\n[2.000024-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-Math-BigInt\n[1:1.9998.18-1]\n- 1.999818 bump\n\nperl-Math-BigInt-FastCalc\n[0.500.900-1]\n- 0.5009 bump\n\nperl-Math-BigRat\n[0.2614-2]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-MIME-Base64\n[3.15-1001]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Module-Build\n[2:0.42.31-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-Module-CoreList\n[1:5.20211020-1]\n- 5.20211020 bump\n\nperl-Module-Load\n[1:0.36-1]\n- 0.36 bump\n\nperl-Module-Load-Conditional\n[0.74-1]\n- 0.74 bump\n\nperl-Module-Metadata\n[1.000037-1]\n- Update to 1.000037\n  - Add decode_pod option for automatic =encoding handling\n\nperl-MRO-Compat\n[0.13-5]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Object-HashBase\n[0.009-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-Package-Generator\n[1.106-12]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Params-Check\n[1:0.38-396]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Params-Util\n[1.102-2]\n- Filter out redundant unversioned R:perl(XSLoader).\n\nperl-parent\n[1:0.238-457]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-PathTools\n[3.78-439]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-perlfaq\n[5.20210520-1]\n- 5.20210520 bump\n\nperl-PerlIO-via-QuotedPrint\n[0.09-1]\n- 0.09 bump\n\nperl-Perl-OSType\n[1.010-397]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Pod-Checker\n[4:1.74-1]\n- 1.74 bump\n\nperl-Pod-Escapes\n[1:1.07-396]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-podlators\n[1:4.14-457]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-Pod-Parser\n[1.63-1001]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Pod-Perldoc\n[3.28.01-443]\n- Specify all dependencies\n\nperl-Pod-Simple\n[1:3.42-1]\n- 3.42 bump\n\nperl-Pod-Usage\n[4:2.01-1]\n- 2.01 bump\n\nperl-Scalar-List-Utils\n[4:1.55-457]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-Socket\n[4:2.031-1]\n- 2.031 bump\n\nperl-Software-License\n[0.103014-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-Storable\n[1:3.21-457]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-Sub-Exporter\n[0.987-17]\n- BR: perl(blib) for t/00-compile.t\n\nperl-Sub-Install\n[0.928-15]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Sys-Syslog\n[0.36-1]\n- 0.36 bump\n\nperl-Term-ANSIColor\n[5.01-458]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-Term-Cap\n[1.17-396]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Term-Table\n[0.015-2]\n- Unbundle Object::HashBase\n\nperl-Test-Harness\n[1:3.42-2]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Test-Simple\n[3:1.302181-2]\n- Demote Module::Pluggable hard dependency to Suggests level\n\nperl-Text-Balanced\n[2.04-1]\n- 2.04 bump\n\nperl-Text-Diff\n[1.45-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-Text-Glob\n[0.11-5]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Text-ParseWords\n[3.30-396]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Text-Tabs+Wrap\n[2013.0523-396]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Text-Tabs+Wrap\n[2013.0523-396]\n- Rebuild with enable hardening (bug #1636329)\n\nperl-Text-Template\n[1.58-1]\n- update to 1.58\n\nperl-Thread-Queue\n[3.14-457]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-threads\n[1:2.25-457]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-threads-shared\n[1.61-457]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-Time-HiRes\n[4:1.9764-459]\n- Introduce an epoch not to regress comparing to RHEL (bug #1895852)\n\nperl-Time-Local\n[2:1.300-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-Unicode-Collate\n[1.29-1]\n- 1.29 bump\n\nperl-Unicode-Normalize\n[1.27-458]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild\n\nperl-URI\n[1.76-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\nperl-version\n[7:0.99.29-1]\n- 0.9929 bump","id":"ELSA-2026-30851","ovalId":"oval:com.oracle.elsa:def:202630851","source":"oracle_linux","title":"ELSA-2026-30851:  perl:5.32 security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-30851.html"}