ELBA-2026-66262

ELBA-2026-66262 - perl-Cpanel-JSON-XS Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2026-06-08

Description

[4.41-1]
- Update to 4.41
- Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516)
- Fix dupkeys_as_arrayref type confusion (CVE-2026-9334)
- Fix incr_parse single-quote string delimiter (GH#245)
- Fix a one-byte out-of-bounds heap read reachable via allow_barekey on
truncated input (GH#244)

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	perl-Cpanel-JSON-XS-4.41-1.el8.src.rpm	c4e2434e460986ddcc639dbb86bd52eb683d7f6dbc62cef596ec47f8973fa2ba	-	ol8_aarch64_developer_EPEL
	perl-Cpanel-JSON-XS-4.41-1.el8.aarch64.rpm	f57d333546a1a2242b984a2c92ffc5c0fa7799db788dfb6e1de1d59d0daf9855	-	ol8_aarch64_developer_EPEL
Oracle Linux 8 (x86_64)	perl-Cpanel-JSON-XS-4.41-1.el8.src.rpm	c4e2434e460986ddcc639dbb86bd52eb683d7f6dbc62cef596ec47f8973fa2ba	-	ol8_x86_64_developer_EPEL
	perl-Cpanel-JSON-XS-4.41-1.el8.x86_64.rpm	8a30c5b4fa245b1caafcab4f1c6f1a369b7a63e79a2f41f43d88932e6a348138	-	ol8_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team