SUSE-SU-2026:5120-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20265120-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5120-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:5120-1
Upstream
CVE (7)
Related
CVE (7)
Published
2026-11-05T12:19:29Z
Modified
2026-11-06T12:30:03Z
Summary
Security update for perl-Text-CSV_XS
Details

This update for perl-Text-CSV_XS fixes the following issues:

  • CVE-2026-110752: unclamped RFC 7111 selector range pre-allocation in fragment() can cause memory exhaustion via large index ranges (bsc#1286138).
  • CVE-2026-110754: unfreed field array memory leak on getline() syntax errors can lead to process memory exhaustion via malformed CSV input (bsc#1286188).
  • CVE-2026-110755: quadratic buffer copying overhead during CR-only line parsing in getline() can cause CPU exhaustion and denial of service (bsc#1286198).
  • CVE-2026-110756: invalid UTF-8 bytes during buffer flushes in print() can cause silent field truncation (bsc#1286130).
  • CVE-2026-110757: unquoted writing of numeric-flagged strings containing newlines in combine() and print() can cause record splitting and row injection (bsc#1286191).
  • CVE-2026-110758: missing buffer start boundary check in strip_trail_whitespace under allow_whitespace can cause heap out-of-bounds read and memory corruption (bsc#1286137).
  • CVE-2026-110759: improper end-of-file marker handling after a lone CR can cause Text::CSV_XS to inject an unexpected 0xFF byte (bsc#1286128).
References

Affected packages

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
perl-Text-CSV_XS

Package

Name
perl-Text-CSV_XS
Purl
pkg:rpm/suse/perl-Text-CSV_XS&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34-150000.3.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "perl-Text-CSV_XS": "1.34-150000.3.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5120-1.json"
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
perl-Text-CSV_XS

Package

Name
perl-Text-CSV_XS
Purl
pkg:rpm/suse/perl-Text-CSV_XS&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34-150000.3.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "perl-Text-CSV_XS": "1.34-150000.3.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5120-1.json"
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
perl-Text-CSV_XS

Package

Name
perl-Text-CSV_XS
Purl
pkg:rpm/suse/perl-Text-CSV_XS&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34-150000.3.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "perl-Text-CSV_XS": "1.34-150000.3.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5120-1.json"
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
perl-Text-CSV_XS

Package

Name
perl-Text-CSV_XS
Purl
pkg:rpm/suse/perl-Text-CSV_XS&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34-150000.3.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "perl-Text-CSV_XS": "1.34-150000.3.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5120-1.json"
SUSE:Linux Enterprise Module for Development Tools 15 SP7
perl-Text-CSV_XS

Package

Name
perl-Text-CSV_XS
Purl
pkg:rpm/suse/perl-Text-CSV_XS&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34-150000.3.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "perl-Text-CSV_XS": "1.34-150000.3.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5120-1.json"
SUSE:Linux Enterprise Server 15 SP4-LTSS
perl-Text-CSV_XS

Package

Name
perl-Text-CSV_XS
Purl
pkg:rpm/suse/perl-Text-CSV_XS&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34-150000.3.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "perl-Text-CSV_XS": "1.34-150000.3.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5120-1.json"
SUSE:Linux Enterprise Server 15 SP5-LTSS
perl-Text-CSV_XS

Package

Name
perl-Text-CSV_XS
Purl
pkg:rpm/suse/perl-Text-CSV_XS&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34-150000.3.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "perl-Text-CSV_XS": "1.34-150000.3.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5120-1.json"
SUSE:Linux Enterprise Server 15 SP6-LTSS
perl-Text-CSV_XS

Package

Name
perl-Text-CSV_XS
Purl
pkg:rpm/suse/perl-Text-CSV_XS&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34-150000.3.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "perl-Text-CSV_XS": "1.34-150000.3.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5120-1.json"
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
perl-Text-CSV_XS

Package

Name
perl-Text-CSV_XS
Purl
pkg:rpm/suse/perl-Text-CSV_XS&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34-150000.3.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "perl-Text-CSV_XS": "1.34-150000.3.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5120-1.json"
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
perl-Text-CSV_XS

Package

Name
perl-Text-CSV_XS
Purl
pkg:rpm/suse/perl-Text-CSV_XS&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34-150000.3.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "perl-Text-CSV_XS": "1.34-150000.3.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5120-1.json"
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
perl-Text-CSV_XS

Package

Name
perl-Text-CSV_XS
Purl
pkg:rpm/suse/perl-Text-CSV_XS&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34-150000.3.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "perl-Text-CSV_XS": "1.34-150000.3.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5120-1.json"