[CLSA-2026:1788263623] perl-Date-Manip: Fix of CVE-2026-60075
Type:
security
Severity:
Important
Release date:
2026-09-01 11:53:52 UTC
Description:
- CVE-2026-60075: reject a date or time string longer than 256 characters before any parsing regex runs. The unanchored time substitution in _parse_time backtracks quadratically across an interior whitespace run, so a long string of spaces caused CPU exhaustion without containing any time at all. - Drop the test suite invocation and its perl(Test::Inter) and perl(Test::More) build requirements. perl-Test-Inter is not shipped in any AlmaLinux 9.2 repository, so the dependency could not be resolved in the 9.2 buildroot and the binary build failed before the build stage. The test suite is not part of the shipped package.
CVEs fixed:
Updated packages:
  • perl-Date-Manip-6.85-3.el9_6.tuxcare.els1.noarch.rpm
    sha:464f41e82c63fa12f5303f341377995331998ffb683e8692e51f122adc91d98c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.