Back Linuxsecurity

Mageia perl-Date-Manip Important Date Handling Issue Advisory 2026

Linuxsecurity •LinuxSecurity Advisories • September 1, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×

Description: Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check Date::Manip versions through 6.99 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in _parse_time

- - - - -

- 10/core/perl-Date-Manip-6.990.0-1.mga10 - 9/core/perl-Date-Manip-6.990.0-1.mga9

- 10/core/perl-Date-Manip-6.990.0-1.mga10

- 9/core/perl-Date-Manip-6.990.0-1.mga9

Publication date: 01 Sep 2026 URL: https: //advisories.mageia.org/MGASA-2026-0361.html Type: security CVE: CVE-2026-60074, CVE-2026-60075

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CPU Exhaustion Vulnerabilities in Perl Modules Announced Mageia has issued advisories for two critical vulnerabilities affecting Perl modules Date::Manip and HTTP::Date. The vulnerabilities allow for CPU exhaustion through specific parsing methods, impacting versions of both modules. Date::Manip versions up to 6.99 are affected by non-ASCII decimal digits causing corrupted dates and quadratic backtracking issues. HTTP::Date versions before 6.08 are vulnerable to polynomial regex backtracking in date parsing. These vulnerabilities could potentially lead to denial of service conditions. The CVEs associated with these vulnerabilities are CVE-2026-60074 and CVE-2026-14741. Users are urged to update to the latest versions to mitigate these risks. The advisories were published on September 1, 2026, and highlight the urgency of addressing these flaws. 2 sources 61

Extracted Entities

Mageia perl-Date-Manip Important Date Handling Issue Advisory 2026

The full story

Extracted Entities

CVEs (2)

Domains (1)

Platforms (1)