openSUSE perl-Cpanel-JSON-XS Critical DoS Buffer Overflow Vuln 2026-21140-1

This update for perl-Cpanel-JSON-XS fixes the following issues:

Changes in perl-Cpanel-JSON-XS:

- updated to 4.420.0 (4.42)

see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes

4.42 2026-06-27 (rurban)

- Ensure encode with a type spec hashref does not change the hashref argument (GH #240)

- Fix -e docs: "written" → "read" (GH #239, reported by Ron Savage).

- Fix Boolean eq overload matching undef (GH #207, reported by fd-t).

Cpanel::JSON::XS::Boolean overloaded eq would match undef as equal

to false because undef stringifies to "". Added defined() guard.

- Fix error messages showing overloaded stringification for blessed

objects (GH #191, reported by karenetheridge). Error messages now

use ClassName=TYPE(addr) format, bypassing any "" overload.

- Fix type_all_string overriding allow_blessed/convert_blessed (GH #175,

reported by alpha6). With type_all_string +...