CVE-2026-107794

Name	CVE-2026-107794
Description	ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a ...
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	1150541

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libextutils-typemaps-default-perl (PTS)	forky, bookworm, trixie	1.05-5	vulnerable
	sid	1.07-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
libextutils-typemaps-default-perl	source	(unstable)	1.07-1			1150541

Notes

https://lists.security.metacpan.org/cve-announce/msg/44246012/
https://rt.cpan.org/Public/Bug/Display.html?id=91213
Fixed by: https://github.com/tsee/extutils-typemap-default/commit/10f45bf0d00d3140499755c2ad49f8bf435851ac (ExtUtils-Typemaps-Default-1.07)
Fixed by: https://github.com/tsee/extutils-typemap-default/commit/3e6602d8a9db424e5842e001554bf268797e4de1 (ExtUtils-Typemaps-Default-1.07)