Linux · Security advisory · May 27, 2026

RHSA-2026:29941: perl-IO-Compress security update

RHSA-2026:29941, released May 27, 2026, fixes 1 CVE in perl-IO-Compress (version 2.212-512.el10_0.1). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0044

38th percentile

Fixed package versions

Product	Release	Fixed in
perl-IO-Compress	RHEL 10	2.212-512.el10_0.1

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2026-48962	libperl5.38t64: IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled...		8.2	0.0044	None reported

Also fixes CVE-2026-48962

libperl5.38t64 5.38.2-3.2ubuntu0.4
libperl5.38t64 on Ubuntu 24.04.5 LTS (noble)
perl 5.38.2-3.2ubuntu0.4
perl on Ubuntu 24.04.5 LTS (noble)
perl-base 5.38.2-3.2ubuntu0.4
perl-base on Ubuntu 24.04.5 LTS (noble)
perl-debug 5.38.2-3.2ubuntu0.4
perl-debug on Ubuntu 24.04.5 LTS (noble)
perl-modules-5.38 5.38.2-3.2ubuntu0.4
perl-modules-5.38 on Ubuntu 24.04.5 LTS (noble)
ELSA-2026-30851
perl, perl-Algorithm-Diff, perl-Archive-Tar and 219 more on ol 8
RHSA-2026:30851
perl, perl-Algorithm-Diff, perl-Archive-Tar and 219 more on RHEL 8
RLSA-2026:30851
perl, perl-Algorithm-Diff, perl-Archive-Zip and 108 more on rocky 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2026:29941

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo