Back Linuxsecurity

Fedora 43 perl-CSS-Minifier-XS Critical Memory Leak Fix CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 9, 2026

This package contains the Perl module CSS::Minifier::XS. Versions of the module before 0.14 have a memory leak when the entire document is minified away (CVE-2026-13593). This update brings version 0.15 which fixes this issue.

* Tue Jun 30 2026 Emmanuel Seyman - 0.15-1 - Update to 0.15

[ 1 ] Bug #2494733 - CVE-2026-13593 perl-CSS-Minifier-XS: CSS::Minifier::XS: Memory leak via crafted input leading to Denial of Service [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-abc468979d' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Memory Leak Vulnerability in Perl CSS::Minifier::XS Affects Fedora 43 and 44 A critical memory leak vulnerability (CVE-2026-13593) has been identified in the Perl module CSS::Minifier::XS, affecting versions prior to 0.14. This vulnerability allows crafted input to exploit the memory leak, potentially leading to Denial of Service (DoS) conditions. The issue was published on 2026-06-29 and has been addressed in version 0.15, released on 2026-06-30. Both Fedora 43 and Fedora 44 distributions are affected, and users are advised to update their systems immediately. The update can be installed using the 'dnf' update program. This vulnerability poses a significant risk as it can be exploited by attackers to disrupt services. Users are encouraged to apply the patch to mitigate the risk of exploitation. 4 sources 72

Extracted Entities

Fedora 43 perl-CSS-Minifier-XS Critical Memory Leak Fix CVE-2026

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)