ELSA-2026-99849

ELSA-2026-99849 - perl-CGI security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-13

Description

[4.38-3]
- CVE-2026-120650 perl-CGI: perl-cgi: Denial of Service via unenforced request and upload limits
- CVE-2026-120641 perl-CGI: perl-cgi: arbitrary file write via unsanitized upload filenames
- CVE-2026-120642 perl-CGI: perl-cgi: Security feature bypass via untainted request parameters

Related CVEs

CVE-2026-120641

CVE-2026-120642

CVE-2026-120650

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	perl-CGI-4.38-3.el8_10.src.rpm	facd2b6720e1d824a9ed29c12595b599dec17c12e309e423edf6f4046effc8ff	-	ol8_aarch64_appstream
	perl-CGI-4.38-3.el8_10.noarch.rpm	4b4b7c97ee9a79bb4e4d5d58acc44d6ec071d074deef8e7e79ec3025de2d718b	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	perl-CGI-4.38-3.el8_10.src.rpm	facd2b6720e1d824a9ed29c12595b599dec17c12e309e423edf6f4046effc8ff	-	ol8_x86_64_appstream
	perl-CGI-4.38-3.el8_10.noarch.rpm	4b4b7c97ee9a79bb4e4d5d58acc44d6ec071d074deef8e7e79ec3025de2d718b	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team