[Apollo] Advisories Statistics light light Login

RLSA-2026:84587

Security Mirrored from RHSA-2026:84587
Issued at: 2026-10-20
Updated at: 2026-10-20

Advisory content derived from Red Hat RHSA-2026:84587, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Moderate: perl-URI security update



Description

This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 (and updated by RFC 2732).

Security Fix(es):

* URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization (CVE-2026-19953)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 riscv64 Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2526492

CVEs

CVE-2026-19953

Affected packages

Rocky Linux 10 aarch64 - AppStream

perl-URI-0:5.27-3.el10_2.1.src.rpm perl-URI-0:5.27-3.el10_2.1.noarch.rpm

Rocky Linux 10 ppc64le - AppStream

perl-URI-0:5.27-3.el10_2.1.src.rpm perl-URI-0:5.27-3.el10_2.1.noarch.rpm

Rocky Linux 10 riscv64 - AppStream

perl-URI-0:5.27-3.el10_2.1.src.rpm perl-URI-0:5.27-3.el10_2.1.noarch.rpm

Rocky Linux 10 s390x - AppStream

perl-URI-0:5.27-3.el10_2.1.src.rpm perl-URI-0:5.27-3.el10_2.1.noarch.rpm

Rocky Linux 10 x86_64 - AppStream

perl-URI-0:5.27-3.el10_2.1.src.rpm perl-URI-0:5.27-3.el10_2.1.noarch.rpm