[CLSA-2026:1789043015] Fix CVE(s): CVE-2026-19487
Type:
security
Severity:
Moderate
Release date:
2026-09-10 12:23:45 UTC
Description:
* SECURITY UPDATE: incorrect regular expression match when the Aho-Corasick prescan resumes after following a fail link - debian/patches/CVE-2026-19487.patch: reset the "failed" flag on a successful trie transition in S_find_byclass() in regexec.c, and add the upstream regression tests to t/re/re_tests - CVE-2026-19487
CVEs fixed:
Updated packages:
  • libperl-dev_5.26.1-6ubuntu0.7+tuxcare.els5_amd64.deb
    sha:d75d85de954f9282f936ac9bb51676213f3397c9
  • libperl5.26_5.26.1-6ubuntu0.7+tuxcare.els5_amd64.deb
    sha:5dd4c6a16d4228c9c648c73058066e3ae61cd825
  • perl_5.26.1-6ubuntu0.7+tuxcare.els5_amd64.deb
    sha:38d62535fa59aada5d25c3fa1f5ae732bbf0d515
  • perl-base_5.26.1-6ubuntu0.7+tuxcare.els5_amd64.deb
    sha:ea34ea57293507bcd0f68c24c7098947c3488040
  • perl-debug_5.26.1-6ubuntu0.7+tuxcare.els5_amd64.deb
    sha:4bd42c4d7489587c510c9dc0af3b3092dc25c4ef
  • perl-doc_5.26.1-6ubuntu0.7+tuxcare.els5_all.deb
    sha:895aee26c8c011df2203b6233843a0b7fa7fea0a
  • perl-modules-5.26_5.26.1-6ubuntu0.7+tuxcare.els5_all.deb
    sha:13d55bda40cfa81978588cd492a9bf7d26e24fa8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.