USN-8736-1
Dashboard / Vulnerabilities / USN-8736-1
USN-8736-1
Summary: perl vulnerabilities
Details: It was discovered that Perl incorrectly handled certain large inputs during regular expression matching. An attacker could possibly use this issue to trigger out-of-bounds heap reads or writes, resulting in a denial of service or arbitrary code execution. (CVE-2026-15534) It was discovered that Perl incorrectly handled certain regular expression containing alternative matching branches. An attacker could possibly use this issue to cause incorrect regular expression matches, resulting in security restrictions being bypassed. (CVE-2026-19487)
References: https://ubuntu.com/security/notices/USN-8736-1, https://ubuntu.com/security/CVE-2026-15534, https://ubuntu.com/security/CVE-2026-19487
Affected packages
Package
Name: perl
Purl: pkg:deb/ubuntu/perl?arch=source&distro=esm-infra-legacy%2Ftrusty
Affected ranges
Type: ECOSYSTEM
Events:
