Threats Tagged 'cve-2026-13221'

Red Hat Cost Management On-Premise provides cost visibility and analysis for on-premise OpenShift environments. This update includes the latest bug fixes and enhancements.

A security update has been issued for Red Hat Update Infrastructure (RHUI) container images, addressing vulnerabilities including CVE-2026-13221. The update involves multiple RPM packages related to Perl and Red Hat Hardened Images. The advisory indicates a high severity level but does not provide detailed technical specifics or CVSS scores. The update is intended to mitigate security issues in affected versions of RHUI.

This security update for Perl addresses multiple vulnerabilities including uncaught exceptions in zip header parsing, heap buffer overflow in regex compilation on 32-bit builds, heap memory disclosure in socket operations, integer overflow causing out-of-bounds heap reads, and regex trie branch-count overflow leading to incorrect pattern matching. These issues collectively pose a high risk to affected systems. No specific affected versions beyond those stated are provided. No known exploits in the wild have been reported. The update fixes these issues to improve Perl's security and stability.

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. When such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error. A pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong.