USN-7434-1: Perl vulnerability

USN-7434-1: Perl vulnerability
14 April 2025

Perl could be made to crash or run programs if it processed specially crafted data.

Releases

• Ubuntu 24.10
• Ubuntu 24.04 LTS
• Ubuntu 22.04 LTS

Packages
perl - Practical Extraction and Report Language

Details
It was discovered that Perl incorrectly handled transliterating non-ASCII
bytes. A remote attacker could use this issue to cause Perl to crash,
resulting in a denial of service, or possibly execute arbitrary code.

Update instructions
The problem can be corrected by updating your system to the following

package versions:
Ubuntu 24.10

• perl - 5.38.2-5ubuntu0.1
  Ubuntu 24.04
• perl - 5.38.2-3.2ubuntu0.1
  Ubuntu 22.04
• perl - 5.34.0-3ubuntu1.4

In general, a standard system update will make all the necessary changes.