Advisories » MGASA-2026-0544

Updated perl-ExtUtils-Typemaps-Default package fixes security vulnerabilities

Publication date: 26 Oct 2026
Modification date: 26 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-107373 , CVE-2026-107794

Description

ExtUtils::Typemaps::STL::String versions before 1.06 for Perl
T_STD_STRING typemap may read the SV length before stringifying the
argument. (CVE-2026-107373)
ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a
32 GiB array on an empty list. (CVE-2026-107794)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36504
• https://www.openwall.com/lists/oss-security/2026/10/10/7
• https://metacpan.org/release/SMUELLER/ExtUtils-Typemaps-Default-1.06/changes
• https://rt.cpan.org/Public/Bug/Display.html?id=94110
• https://www.openwall.com/lists/oss-security/2026/10/10/8
• https://metacpan.org/release/SMUELLER/ExtUtils-Typemaps-Default-1.07/changes
• https://rt.cpan.org/Public/Bug/Display.html?id=91213
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRN5O43U7BVSD6AUJJF2XIVIIYTDQO6I/
• https://www.cve.org/CVERecord?id=CVE-2026-107373
• https://www.cve.org/CVERecord?id=CVE-2026-107794

SRPMS

10/core

• perl-ExtUtils-Typemaps-Default-1.70.0-1.mga10