First published: Wed Apr 23 2025(Updated: )
USN-7434-1 fixed a vulnerability in Perl. This update provides the corresponding update for Ubuntu 25.04. Original advisory details: It was discovered that Perl incorrectly handled transliterating non-ASCII bytes. A remote attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/perl | <5.40.1-2ubuntu0.1 | 5.40.1-2ubuntu0.1 |
Ubuntu | =25.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
USN-7434-2 addresses a vulnerability in Perl that could lead to a crash due to improper handling of non-ASCII bytes.
To fix USN-7434-2, update your Perl package to version 5.40.1-2ubuntu0.1 on Ubuntu 25.04.
USN-7434-2 affects Ubuntu version 25.04 with the Perl package prior to version 5.40.1-2ubuntu0.1.
The vulnerability in USN-7434-2 can be exploited by a remote attacker to crash the Perl interpreter.
USN-7434-2 does not require specific configuration changes, but it is important to apply the update to mitigate the vulnerability.