Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-57433: Perl packages on Debian could be exploited by attackers
CVE-2026-57433 · published today
Summary
The Perl packages supplied for Debian (including debian/rootio-perl, debian/perl, canonical/perl, perl, and rootio-perl) have a weakness that could let a malicious user run unwanted code on the system. This could affect the security and stability of any server using these packages. Install the latest updates provided by the Debian repositories as soon as possible to close the gap.
What to do
- Update debian rootio-perl to version 5.32.1-4+deb11u5.aikido.8.
- Update debian perl to version 5.40.1-6.aikido.8.
- Update canonical perl to version 5.18.2-2ubuntu1.7+esm8.
- Update canonical perl to version 5.22.1-9ubuntu0.9+esm3.
- Update canonical perl to version 5.26.1-6ubuntu0.7+esm3.
- Update canonical perl to version 5.30.0-9ubuntu0.5+esm3.
- Update canonical perl to version 5.34.0-3ubuntu1.8.
- Update canonical perl to version 5.38.2-3.2ubuntu0.4.
- Update debian perl to version 5.40.1-8.
- Update debian rootio-perl to version 5.32.1-4+deb11u5.aikido.6.
- Update debian rootio-perl to version 5.36.0-7+deb12u3.aikido.13.
- Update debian rootio-perl to version 5.40.1-6.aikido.6.
- Update debian perl to version 5.32.1-4+deb11u5.aikido.10.
- Update debian rootio-perl to version 5.32.1-4+deb11u5.aikido.10.
- Update debian perl to version 5.32.1-4+deb11u5.aikido.8.
- Update debian perl to version 5.32.1-4+deb11u5.aikido.9.
- Update debian perl to version 5.40.1-6.aikido.9.
- Update debian rootio-perl to version 5.40.1-6.aikido.9.
- Update debian perl to version 5.32.1-4+deb11u5.aikido.7.
- Update debian rootio-perl to version 5.32.1-4+deb11u5.aikido.7.
- Update debian rootio-perl to version 5.32.1-4+deb11u5.aikido.9.
- Update debian perl to version 5.36.0-7+deb12u3.aikido.14.
- Update debian rootio-perl to version 5.36.0-7+deb12u3.aikido.14.
- Update debian rootio-perl to version 5.40.1-6.aikido.8.
- Update perl to version 5.40.1-6.aikido.10.
- Update rootio-perl to version 5.40.1-6.aikido.10.
- Update perl to version 5.36.0-7+deb12u3.aikido.19.
- Update rootio-perl to version 5.36.0-7+deb12u3.aikido.19.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:11 | debian | rootio-perl |
< 5.32.1-4+deb11u5.aikido.8 < 5.32.1-4+deb11u5.aikido.6 < 5.32.1-4+deb11u5.aikido.10 < 5.32.1-4+deb11u5.aikido.7 < 5.32.1-4+deb11u5.aikido.9 Fix: upgrade to 5.32.1-4+deb11u5.aikido.8
|
| Root:Debian:13 | debian | perl |
< 5.40.1-6.aikido.8 < 5.40.1-6.aikido.9 Fix: upgrade to 5.40.1-6.aikido.8
|
| Debian:11 | debian | perl | All versions |
| Debian:12 | debian | perl | All versions |
| Debian:13 | debian | perl | All versions |
| Debian:14 | debian | perl |
< 5.40.1-8 Fix: upgrade to 5.40.1-8
|
| Ubuntu:Pro:14.04:LTS | canonical | perl |
< 5.18.2-2ubuntu1.7+esm8 Fix: upgrade to 5.18.2-2ubuntu1.7+esm8
|
| Ubuntu:Pro:16.04:LTS | canonical | perl |
< 5.22.1-9ubuntu0.9+esm3 Fix: upgrade to 5.22.1-9ubuntu0.9+esm3
|
| Ubuntu:Pro:18.04:LTS | canonical | perl |
< 5.26.1-6ubuntu0.7+esm3 Fix: upgrade to 5.26.1-6ubuntu0.7+esm3
|
| Ubuntu:Pro:20.04:LTS | canonical | perl |
< 5.30.0-9ubuntu0.5+esm3 Fix: upgrade to 5.30.0-9ubuntu0.5+esm3
|
| Ubuntu:22.04:LTS | canonical | perl |
< 5.34.0-3ubuntu1.8 Fix: upgrade to 5.34.0-3ubuntu1.8
|
| Ubuntu:24.04:LTS | canonical | perl |
< 5.38.2-3.2ubuntu0.4 Fix: upgrade to 5.38.2-3.2ubuntu0.4
|
| Ubuntu:26.04:LTS | canonical | perl | All versions |
| Root:Debian:12 | debian | rootio-perl |
< 5.36.0-7+deb12u3.aikido.13 < 5.36.0-7+deb12u3.aikido.14 Fix: upgrade to 5.36.0-7+deb12u3.aikido.13
|
| Root:Debian:13 | debian | rootio-perl |
< 5.40.1-6.aikido.6 < 5.40.1-6.aikido.9 < 5.40.1-6.aikido.8 Fix: upgrade to 5.40.1-6.aikido.6
|
| Root:Debian:11 | debian | perl |
< 5.32.1-4+deb11u5.aikido.10 < 5.32.1-4+deb11u5.aikido.8 < 5.32.1-4+deb11u5.aikido.9 < 5.32.1-4+deb11u5.aikido.7 Fix: upgrade to 5.32.1-4+deb11u5.aikido.10
|
| Root:Debian:12 | debian | perl |
< 5.36.0-7+deb12u3.aikido.14 Fix: upgrade to 5.36.0-7+deb12u3.aikido.14
|
| Root:Debian:13 | – | perl |
< 5.40.1-6.aikido.10 Fix: upgrade to 5.40.1-6.aikido.10
|
| Root:Debian:13 | – | rootio-perl |
< 5.40.1-6.aikido.10 Fix: upgrade to 5.40.1-6.aikido.10
|
| Root:Debian:12 | – | perl |
< 5.36.0-7+deb12u3.aikido.19 Fix: upgrade to 5.36.0-7+deb12u3.aikido.19
|
| Root:Debian:12 | – | rootio-perl |
< 5.36.0-7+deb12u3.aikido.19 Fix: upgrade to 5.36.0-7+deb12u3.aikido.19
|
Original advisory text
CVE-2026-57433 in perl - Patched by Root
Root has patched CVE-2026-57433 in the perl package for Root:Debian:12. Multiple fixed versions available.
References
- https://github.com/Perl/perl5/commit/e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.pa...
- https://security-tracker.debian.org/tracker/CVE-2026-57433 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2026/07/13/7
- https://ubuntu.com/security/CVE-2026-57433 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-57433 Third Party Advisory
- https://lists.security.metacpan.org/cve-announce/msg/41780100/ Third Party Advisory
- https://ubuntu.com/security/notices/USN-8675-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8684-1 Vendor Advisory
Severity
9.8
Critical
Exploitation
EPSS <1%
Type
CWE-190Integer Overflow
Timeline
Published28 Sep 2026
Updated28 Sep 2026
First seen13 Jul 2026
Track software like this
Free during beta