Fedora 43: perl-JSON-XS Critical Heap Overflow Risk CVE-2025-40928
fedora
September 17, 2025
This update updates perl-JSON-XS 4.04
Summary
This module converts Perl data structures to JSON and vice versa. Its
primary goal is to be correct and its secondary goal is to be fast. To
reach the latter goal it was written in C.
Update Information:
This update updates perl-JSON-XS 4.04. This version fixes heap overflow causing crashes, possibly information disclosure or worse (CVE-2025-40928) and causes JSON::XS to accept invalid JSON texts as valid in some cases.
Topics Covered
Change Log
* Mon Sep 8 2025 Emmanuel Seyman
References
Fedora Update Notification
FEDORA-2025-8b24ea25bb
2025-09-17 00:15:09.617289+00:00
Name : perl-JSON-XS
Product : Fedora 43
Version : 4.04
Release : 1.fc43
URL : https://metacpan.org/release/JSON-XS
Summary : JSON serializing/de-serializing, done correctly and fast
Description :
This module converts Perl data structures to JSON and vice versa. Its
primary goal is to be correct and its secondary goal is to be fast. To
reach the latter goal it was written in C.
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-8b24ea25bb' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: perl-JSON-XS
Product: Fedora 43
Version: 4.04
Release: 1.fc43
Summary: JSON serializing/de-serializing, done correctly and fast
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!