MGASA-2026-0272

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0272.html
Import Source
https://advisories.mageia.org/MGASA-2026-0272.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2026-0272
Upstream
Published
2026-07-19T06:29:10Z
Modified
2026-07-19T06:30:04.664441243Z
Summary
Updated perl-String-Util package fixes a security vulnerability
Details

The updated package fixes a security vulnerability: String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. (CVE-2026-14895)

References
Credits

Affected packages

Mageia:10 / perl-String-Util

Package

Name
perl-String-Util
Purl
pkg:rpm/mageia/perl-String-Util?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.350.0-2.1.mga10

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0272.json"

Mageia:9 / perl-String-Util

Package

Name
perl-String-Util
Purl
pkg:rpm/mageia/perl-String-Util?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.340.0-1.1.mga9

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0272.json"