Release date:
2026-09-12 09:10:35 UTC
Description:
* SECURITY UPDATE: incorrect regex match in Aho-Corasick prescan (GH#22892)
- debian/patches/fixes/CVE-2026-19487.patch: reset the stale failed flag
after a successful trie transition in the AHOCORASICK arm of
S_find_byclass() in regexec.c, so the prescan is no longer aborted on a
worse or non-matching alternative; adds the upstream regression vectors
to t/re/re_tests
- CVE-2026-19487
Updated packages:
-
libperl-dev_5.22.1-9ubuntu0.9+tuxcare.els7_amd64.deb
sha:07c10263cd9fcdce9e707e299b8ccd05efe3ca67
-
libperl5.22_5.22.1-9ubuntu0.9+tuxcare.els7_amd64.deb
sha:dc0119296bce01e20e2a1d086e4c5a5d365751d1
-
perl_5.22.1-9ubuntu0.9+tuxcare.els7_amd64.deb
sha:dbd0c714b18513f9add90cb89485c670d8610086
-
perl-base_5.22.1-9ubuntu0.9+tuxcare.els7_amd64.deb
sha:f816969c44a02f1046ffc2e96add40901fb5d2a5
-
perl-debug_5.22.1-9ubuntu0.9+tuxcare.els7_amd64.deb
sha:0a0d3e851e2d9cfdd8a3d3899abb00c1056db962
-
perl-doc_5.22.1-9ubuntu0.9+tuxcare.els7_all.deb
sha:63ff8f2698918df59975cea55d38cda02a92da81
-
perl-modules-5.22_5.22.1-9ubuntu0.9+tuxcare.els7_all.deb
sha:87e0f42b6d4c90737fa35555dd0e9bdee2bc55bc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
