ALAS2-2026-3856: CVEs fixed (Amazon Linux)

ALAS2-2026-3856 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-60074 HIGH 7.5 Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the n
• CVE-2026-60075 HIGH 7.5 Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored t

Applies to

• Amazon Linux 2

← Back to latest CVEs