p PatchFirst

RLSA-2026:84588

RLSA-2026:84588 · Moderate: perl-URI security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 (and updated by RFC 2732). Security Fix(es): * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization (CVE-2026-19953) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 7.2 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • perl-uri Rocky Linux:9

    Affected ranges
    • ECOSYSTEM: < 0:5.09-3.el9_8.1

    Update to 0:5.09-3.el9_8.1

Original sources

Check your server →