ELA-1533-1 libcpanel-json-xs-perl security update

integer buffer overflow

2025-10-01
Packagelibcpanel-json-xs-perl
Version4.09-1+deb10u1 (buster)
Related CVEs CVE-2025-40928


A vulnerability has been fixed in libcpanel-json-xs-perl, a Perl module for serialising to JSON.

CVE-2025-40928

Integer buffer overflow causing a segfault when parsing crafted JSON,
enabling denial-of-service attacks or other unspecified impact.


For Debian 10 buster, these problems have been fixed in version 4.09-1+deb10u1.

We recommend that you upgrade your libcpanel-json-xs-perl packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.