perl-JSON-XS-3.04-4.el8_10
エラータID: AXSA:2025-10954:01
Release date:
Tuesday, October 14, 2025 - 18:50
Subject:
perl-JSON-XS-3.04-4.el8_10
Affected Channels:
Asianux Server 8 for x86_64
Severity:
Moderate
Description:
This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C.
Security Fix(es):
* JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON (CVE-2025-40928)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2025-40928
JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
Solution:
Update packages.
CVEs:
CVE-2025-40928
JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
Additional Info:
N/A
Download:
SRPMS
- perl-JSON-XS-3.04-4.el8_10.src.rpm
MD5: 05d2af3b6566e4f715a97841e1d9de92
SHA-256: fc1be9e557ad568c2311ed264c5dfbe9bf4bd7a4f42ecb32ae075a6bc1081f0d
Size: 97.42 kB
Asianux Server 8 for x86_64
- perl-JSON-XS-3.04-4.el8_10.x86_64.rpm
MD5: b1dd5057e1bbcafa2b761ee36171706d
SHA-256: b8ca4129b3534c08c81d6dca96448135fe6f503f5a385b2219b6cb35f2028832
Size: 110.76 kB