SUSE-SU-2026:2782-1

SUSE-SU-2026:2782-1 · Security update for perl-Cpanel-JSON-XS

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for perl-Cpanel-JSON-XS fixes the following issues - CVE-2026-9334: type confusion via duplicate object keys when `dupkeys_as_arrayref` is enabled (bsc#1267546). - CVE-2026-9516: denial of service via UTF-8 BOM prefixed input when a decode filter callback throws (bsc#1267547).

Fix available

Published: 2026-07-06T18:01:58Z
Updated: 2026-07-09T10:00:04.545280928Z

Stack: system

Affected products and versions

perl-cpanel-json-xs SUSE:Linux Enterprise Module for Package Hub 15 SP7
Affected ranges
- ECOSYSTEM: < 4.380.0-150700.3.6.1
Update to 4.380.0-150700.3.6.1

Original sources

https://www.suse.com/support/update/announcement/2026/suse-su-20262782-1/
https://bugzilla.suse.com/1267546
https://bugzilla.suse.com/1267547
https://www.suse.com/security/cve/CVE-2026-9334
https://www.suse.com/security/cve/CVE-2026-9516
https://osv.dev/vulnerability/SUSE-SU-2026:2782-1

Check your server →

SUSE-SU-2026:2782-1 · Security update for perl-Cpanel-JSON-XS

Affected products and versions

perl-cpanel-json-xs SUSE:Linux Enterprise Module for Package Hub 15 SP7

Original sources