ALSA-2025:17119

Source
https://errata.almalinux.org/10/ALSA-2025-17119.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2025:17119.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2025:17119
Related
Published
2025-09-30T00:00:00Z
Modified
2025-10-01T12:21:59Z
Summary
Moderate: perl-JSON-XS security update
Details

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C.

Security Fix(es):

  • JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON (CVE-2025-40928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:10 / perl-JSON-XS

Package

Name
perl-JSON-XS
Purl
pkg:rpm/almalinux/perl-JSON-XS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:4.04-1.el10_0