[CLSA-2026:1788194548] Fix CVE(s): CVE-2026-57433
Type:
security
Severity:
Important
Release date:
2026-08-31 16:42:40 UTC
Description:
* SECURITY UPDATE: denial of service via signed integer overflow when deserializing a crafted Storable blob - debian/patches/CVE-2026-57433.patch: reject a hook data item count of I32_MAX in retrieve_hook_common() in dist/Storable/Storable.xs before it is incremented and passed to av_extend(); backported from upstream commit e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7. - CVE-2026-57433
CVEs fixed:
Updated packages:
  • libperl-dev_5.30.0-9ubuntu0.5+tuxcare.els4_amd64.deb
    sha:89d6c73dffbf8704b6ad54058de2e3b391f8e583
  • libperl5.30_5.30.0-9ubuntu0.5+tuxcare.els4_amd64.deb
    sha:001335f74185e3e72fb5bc7b12530136d54bee1e
  • perl_5.30.0-9ubuntu0.5+tuxcare.els4_amd64.deb
    sha:b0e1185f911294d3cbbf14dce57531a06c385f96
  • perl-base_5.30.0-9ubuntu0.5+tuxcare.els4_amd64.deb
    sha:8820451865fae454f3f424c3b77a23ab24519b73
  • perl-debug_5.30.0-9ubuntu0.5+tuxcare.els4_amd64.deb
    sha:06b3bfe975f04cb33b0c86304643995216104e73
  • perl-doc_5.30.0-9ubuntu0.5+tuxcare.els4_all.deb
    sha:e80ba6834f58237b2e1b309efa28f210d8b28f9d
  • perl-modules-5.30_5.30.0-9ubuntu0.5+tuxcare.els4_all.deb
    sha:6dd839798b14079d7ee5b6333fc60aedfceb467a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.