Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Perl XML Parser Vulnerability in Red Hat Systems

published 6 months ago

Summary

A security update is available for the Perl XML Parser in Red Hat systems. This update fixes a vulnerability that could allow an attacker to execute malicious code on a vulnerable system. It is recommended to apply the update as soon as possible to ensure the security of your system.

What to do

Update redhat perl-xml-parser to version 0:2.46-9.el9_6.1.
Update redhat perl-xml-parser-debuginfo to version 0:2.46-9.el9_6.1.
Update redhat perl-xml-parser-debugsource to version 0:2.46-9.el9_6.1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_eus:9.6::appstream	redhat	perl-xml-parser	< 0:2.46-9.el9_6.1 Fix: upgrade to 0:2.46-9.el9_6.1
Red Hat:rhel_eus:9.6::appstream	redhat	perl-xml-parser-debuginfo	< 0:2.46-9.el9_6.1 Fix: upgrade to 0:2.46-9.el9_6.1
Red Hat:rhel_eus:9.6::appstream	redhat	perl-xml-parser-debugsource	< 0:2.46-9.el9_6.1 Fix: upgrade to 0:2.46-9.el9_6.1

Original advisory text

Red Hat Security Advisory: perl-XML-Parser security update

References

https://access.redhat.com/errata/RHSA-2026:9605 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2448999 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2449001 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9605.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2006-10002 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2006-10002 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2006-10002 Vendor Advisory
https://github.com/cpan-authors/XML-Parser/commit/6b291f4d260fc124a6ec80382b87a9... Third Party Advisory
https://github.com/cpan-authors/XML-Parser/issues/64 Third Party Advisory
https://rt.cpan.org/Ticket/Display.html?id=19859 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2006-10003 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2006-10003 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2006-10003 Vendor Advisory
https://github.com/cpan-authors/XML-Parser/commit/3eb9cc95420fa0c3f76947c4708962... Third Party Advisory
https://github.com/cpan-authors/XML-Parser/issues/39 Third Party Advisory
https://rt.cpan.org/Ticket/Display.html?id=19860 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published22 Apr 2026

Updated4 Jul 2026

First seen4 Jul 2026

Sources

RHSA-2026:9605 · OSV

Track software like this

Free during beta