Security update for perl-HTTP-Date
A security update for perl-HTTP-Date addresses CVE-2026-14741, which involves CPU exhaustion caused by polynomial regex backtracking in the parse_date function. This vulnerability can lead to denial of service conditions due to excessive CPU usage. The issue has been fixed in the update provided by the SUSE Product Security Team.
AI Analysis
Technical Summary
CVE-2026-14741 is a vulnerability in the perl-HTTP-Date package where the parse_date function is susceptible to CPU exhaustion through polynomial regex backtracking. This can cause the application to consume excessive CPU resources, potentially leading to denial of service. The SUSE Product Security Team has released an update to fix this issue.
Potential Impact
The vulnerability allows an attacker to cause CPU exhaustion, which may result in denial of service by making the affected application or system unresponsive or significantly degraded in performance.
Mitigation Recommendations
A security update has been released by the SUSE Product Security Team to fix this vulnerability. Users should apply the update to remediate the issue. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for the latest remediation guidance.
Security update for perl-HTTP-Date
Description
A security update for perl-HTTP-Date addresses CVE-2026-14741, which involves CPU exhaustion caused by polynomial regex backtracking in the parse_date function. This vulnerability can lead to denial of service conditions due to excessive CPU usage. The issue has been fixed in the update provided by the SUSE Product Security Team.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-14741 is a vulnerability in the perl-HTTP-Date package where the parse_date function is susceptible to CPU exhaustion through polynomial regex backtracking. This can cause the application to consume excessive CPU resources, potentially leading to denial of service. The SUSE Product Security Team has released an update to fix this issue.
Potential Impact
The vulnerability allows an attacker to cause CPU exhaustion, which may result in denial of service by making the affected application or system unresponsive or significantly degraded in performance.
Mitigation Recommendations
A security update has been released by the SUSE Product Security Team to fix this vulnerability. Users should apply the update to remediate the issue. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for the latest remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:21427-1
- Cve Count
- 1
- State
- PUBLISHED
Threat ID: 6aab496755bf5e2cf5990d02
Added to database: 09/17/2026, 01:59:03 UTC
Last enriched: 09/17/2026, 02:11:09 UTC
Last updated: 09/17/2026, 02:11:09 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.