RHSA-2026:57562: Important: perl-Date-Manip security update
Date::Manip is a series of modules designed to make any common date/time operation easy to do. Operations such as comparing two times, determining a data a given amount of time from another, or parsing international times are all easily done. It deals with time as it is used in the Gregorian calendar (the one currently in use) with full support for time changes due to daylight saving time.Security Fix(es): perl-Date-Manip: Date::Manip for Perl: Denial of Service via CPU exhaustion in date parsing (CVE-2026-60075) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Important: perl-Date-Manip security update
— Red Hat
Affected Software
Event History
Frequently Asked Questions
Which Red Hat Enterprise Linux deployments are covered by this advisory?
The advisory covers RHEL for x86_64, ARM 64, IBM z Systems, and Power little endian. It also covers the corresponding Extended Life Cycle offerings.
What operational impact should be assessed when prioritizing this update?
The identified issue can cause denial of service through CPU exhaustion during Date::Manip date parsing. Systems that parse date input with this Perl module should be assessed for exposure to resource exhaustion.