Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
Résumé
Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib.
Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-2026-3381 due to a vendored version of zlib which has several vulnerabilities, including CVE-2026-27171. The bundled Compress::Raw::Zlib was updated to version 2.221 in Perl blead commit c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2026-4176 perl
- Debian DEBIAN-CVE-2026-4176 perl Corrigé dans: 5.10.0-21
- Ubuntu UBUNTU-CVE-2026-4176 perl
Références
- advisory github.com
- advisory lists.security.metacpan.org
- advisory metacpan.org
- advisory metacpan.org
- advisory metacpan.org
- advisory nvd.nist.gov
- advisory cve.org
- package github.com
- patch github.com
- web openwall.com
- web cpan.org