Alerts This Week
Warning Icon 1 562
Alerts This Week
Warning Icon 1 562

Fedora 41: perl-JSON-XS Critical Heap Overflow CVE-2025-40928

fedora
Calendar Grey September 17, 2025
Dist Fedora Esm H88
The latest release of perl-JSON-XS 4.04 in Fedora 41 addresses a significant heap overflow vulnerability, which poses serious risks of information leakage.
This update updates perl-JSON-XS 4.04

Summary

This module converts Perl data structures to JSON and vice versa. Its

primary goal is to be correct and its secondary goal is to be fast. To

reach the latter goal it was written in C.

Update Information:

This update updates perl-JSON-XS 4.04. This version fixes heap overflow causing crashes, possibly information disclosure or worse (CVE-2025-40928) and causes JSON::XS to accept invalid JSON texts as valid in some cases.

Topics%20covered

Topics Covered

security advisory fedora critical heap overflow information disclosure perl-JSON-XS

Change Log

* Mon Sep 8 2025 Emmanuel Seyman - 1:4.04-1 - Update to 4.04

References


[ 1 ] Bug #2393913 - CVE-2025-40928 perl-JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2393913

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-86573bd5d5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: perl-JSON-XS
Product: Fedora 41
Version: 4.04
Release: 1.fc41
URL: https://metacpan.org/release/JSON-XS
Summary: JSON serializing/de-serializing, done correctly and fast

Topics%20covered

Topics Covered

security advisory fedora critical heap overflow information disclosure perl-JSON-XS

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here