[ubuntu/noble-security] perl 5.38.2-3.2ubuntu0.4 (Accepted)

[Leonidas S. Barbosa]

perl (5.38.2-3.2ubuntu0.4) noble-security; urgency=high

  * SECURITY UPDATE: Out-of-bounds heap read in Socket pack_ip_mreq_source
    - debian/patches/CVE-2026-12087.patch: Scope STRLEN len per argument in
      pack_ip_mreq_source in cpan/Socket/Socket.xs
    - CVE-2026-12087
  * SECURITY UPDATE: Trie 16-bit overflow causing incorrect regex matches
    - debian/patches/CVE-2026-13221.patch: Skip trie creation when branch delta
      would overflow 16 bits in regcomp_study.c, t/re/pat_advanced.t
    - CVE-2026-13221
  * SECURITY UPDATE: Integer overflow leading to heap OOB read in pack/unpack
    - debian/patches/CVE-2026-57432_1.patch: Reject pack/unpack template sizes
      that would overflow SSize_t in pp_pack.c
    - debian/patches/CVE-2026-57432_2.patch: Avoid bit-count overflows in B/H
      template size math in pp_pack.c
    - CVE-2026-57432
  * SECURITY UPDATE: Signed int overflow in Storable SX_HOOK deserialization
    - debian/patches/CVE-2026-57433.patch: Reject I32_MAX hook data item counts
      before av_extend in dist/Storable/Storable.xs
    - CVE-2026-57433
  [ LeoSilva ]
  * SECURITY UPDATE: uncaught exception in IO::Uncompress::Unzip DOS date
    parsing
    - debian/patches/CVE-2025-15649.patch: wrap _dosToUnixTime() in eval
      and return zero for empty/out-of-range date fields in
      cpan/IO-Compress/lib/IO/Uncompress/Unzip.pm
    - CVE-2025-15649
  [ LeoSilva ]
  * SECURITY UPDATE: CPU exhaustion in IO::Uncompress::Unzip fastForward
    - debian/patches/CVE-2026-48959.patch: fix per-byte read loop caused
      by comparing length $offset instead of $offset in
      cpan/IO-Compress/lib/IO/Uncompress/Unzip.pm
    - CVE-2026-48959
  [ LeoSilva ]
  * SECURITY UPDATE: arbitrary code execution in File::GlobMapper
    - debian/patches/CVE-2026-48962.patch: remove use of eval STRING in
      _parseOutputGlob/_getFiles, replacing with safe delimiter-based
      substitution in cpan/IO-Compress/lib/File/GlobMapper.pm
    - CVE-2026-48962
  [ LeoSilva ]
  * SECURITY UPDATE: credential header leakage on cross-origin redirects
    in HTTP::Tiny
    - debian/patches/CVE-2026-7017.patch: strip Authorization, Cookie and
      Proxy-Authorization headers on cross-origin redirects, refuse
      https-to-http downgrade by default in
      cpan/HTTP-Tiny/lib/HTTP/Tiny.pm
    - CVE-2026-7017
  [ LeoSilva ]
  * SECURITY UPDATE: memory exhaustion in Archive::Tar entry size handling
    - debian/patches/CVE-2026-9538.patch: add $MAX_FILE_SIZE cap to
      refuse oversized entry declarations before allocation in
      cpan/Archive-Tar/lib/Archive/Tar.pm
    - CVE-2026-9538

Date: 2026-08-24 15:34:42.786327+00:00
Changed-By: Shafayat Hossain Majumder <shafayat.majumder at canonical.com>
Signed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/perl/5.38.2-3.2ubuntu0.4
-------------- next part --------------
Sorry, changesfile not available.