Mageia Perl HTML Parser Critical Heap Corruption Vuln 2026

Back Linuxsecurity

Mageia Perl HTML Parser Critical Heap Corruption Vuln 2026

Linuxsecurity •LinuxSecurity Advisories • July 18, 2026

Share: View original

Description: HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. (CVE-2026-8829)

Description: HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. (CVE-2026-8829)

- - - -

-

-

-

-

- 10/core/perl-HTML-Parser-3.830.0-3.1.mga10 - 9/core/perl-HTML-Parser-3.810.0-1.1.mga9

- 10/core/perl-HTML-Parser-3.830.0-3.1.mga10

- 9/core/perl-HTML-Parser-3.810.0-1.1.mga9

Publication date: 18 Jul 2026 URL: https: //advisories.mageia.org/MGASA-2026-0264.html Type: security CVE: CVE-2026-8829

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Mageia Perl Packages Addressed Mageia has released updates for several Perl packages to address critical security vulnerabilities. Notable issues include CVE-2026-14803, which allows memory exhaustion in Mojo::JSON versions before 9.47, and CVE-2026-11625, affecting Bytes::Random::Secure versions through 0.29, which can expose internal state across forked processes. Additionally, CVE-2026-14895 highlights a regular expression denial of service in String::Util versions before 1.36. Lastly, CVE-2026-8829 addresses a heap corruption vulnerability in HTML::Entities versions before 3.84. These vulnerabilities could lead to significant service disruptions and potential exploitation if not patched. Users of Mageia 10 and earlier versions are advised to update their systems immediately to mitigate these risks. 6 sources 73

Extracted Entities

CVEs (1)

CWE Weaknesses (2)

CWE-122 - Heap-based Buffer Overflow CWE-416 - Use After Free

Domains (1)

advisories.mageia.org

Platforms (1)

Tools (1)