CLSA-2026-1788262245
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1788262245.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1788262245
- Upstream
- Published
- 2026-09-01T11:40:05Z
- Modified
- 2026-10-26T09:30:37Z
- Summary
- perl-Date-Manip: Fix of CVE-2026-60075
- Details
-
- CVE-2026-60075: reject a date or time string longer than 256 characters before any parsing regex runs. The unanchored time substitution in _parse_time backtracks quadratically across an interior whitespace run, so a long string of spaces caused CPU exhaustion without containing any time at all.
- Drop the test suite invocation and its perl(Test::Inter) and perl(Test::More) build requirements. perl-Test-Inter is not shipped in any AlmaLinux 9.2 repository, so the dependency could not be resolved in the 9.2 buildroot and the binary build failed before the build stage. The test suite is not part of the shipped package.
- References