Alerts This Week
Warning Icon 1 562
Alerts This Week
Warning Icon 1 562

Fedora 42: perl-JSON-XS Critical Heap Overflow CVE-2025-40928 Alert

fedora
Calendar Grey September 17, 2025
Dist Fedora Esm H88
Buffer overflow in perl-JSON-XS poses risks of crashes or data leaks, necessitating urgent updates for Fedora 42 individuals.
This update updates perl-JSON-XS 4.04

Summary

This module converts Perl data structures to JSON and vice versa. Its

primary goal is to be correct and its secondary goal is to be fast. To

reach the latter goal it was written in C.

Update Information:

This update updates perl-JSON-XS 4.04. This version fixes heap overflow causing crashes, possibly information disclosure or worse (CVE-2025-40928) and causes JSON::XS to accept invalid JSON texts as valid in some cases.

Topics%20covered

Topics Covered

security advisory fedora critical heap overflow information disclosure perl-JSON-XS

Change Log

* Mon Sep 8 2025 Emmanuel Seyman - 1:4.04-1 - Update to 4.04

References


[ 1 ] Bug #2393914 - CVE-2025-40928 perl-JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2393914

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-53273e282c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: perl-JSON-XS
Product: Fedora 42
Version: 4.04
Release: 1.fc42
URL: https://metacpan.org/release/JSON-XS
Summary: JSON serializing/de-serializing, done correctly and fast

Topics%20covered

Topics Covered

security advisory fedora critical heap overflow information disclosure perl-JSON-XS

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here