CVE-2026-4176
Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
概要
Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib.
Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-2026-3381 due to a vendored version of zlib which has several vulnerabilities, including CVE-2026-27171. The bundled Compress::Raw::Zlib was updated to version 2.221 in Perl blead commit c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2026-4176 perl
- Debian DEBIAN-CVE-2026-4176 perl 修正版: 5.10.0-21
- Ubuntu UBUNTU-CVE-2026-4176 perl
参照URL
- advisory github.com
- advisory lists.security.metacpan.org
- advisory metacpan.org
- advisory metacpan.org
- advisory metacpan.org
- advisory nvd.nist.gov
- advisory cve.org
- package github.com
- patch github.com
- web openwall.com
- web cpan.org