ALSA-2025:17119

See a problem?
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2025:17119.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2025:17119
Related
Published
2025-09-30T00:00:00Z
Modified
2026-02-04T02:52:03.307543Z
Summary
Moderate: perl-JSON-XS security update
Details

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C.

Security Fix(es):

  • JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON (CVE-2025-40928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:10 / perl-JSON-XS

Package

Name
perl-JSON-XS
Purl
pkg:rpm/almalinux/perl-JSON-XS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:4.04-1.el10_0

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2025:17119.json"