RLSA-2026:98578: Moderate: perl-URI security update
Published Nov 13, 2026
·Updated
This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 (and updated by RFC 2732).
Security Fix(es):
URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization (CVE-2026-19953)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
1 affected componentFixes available
rocky-linux/perl-uri<0:5.27-4.el10_3
0:5.27-4.el10_3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/perl-URIto a version that resolves this vulnerability.Fixed in 0:5.27-4.el10_3
Event History
Nov 13, 2026
Advisory Published
via OSV·12:06 PM
Data Sourced
via OSV·12:06 PM
DescriptionSeverityAffected Software