Re: [oss-security] CVE-2026-4176: Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib

[Jacob Bachmeyer]

On 3/29/26 15:55, Stig Palmquist wrote:
========================================================================
CVE-2026-4176                                        CPAN Security Group
========================================================================
[...]

Solutions
---------
Update to Perl stable release 5.40.4 or 5.42.2 or later, which include
Compress::Raw::Zlib 2.222.

You hint at the other solution under "Workarounds" but neglect to 
actually mention it here:

For *any* Perl version, simply install Compress::Raw::Zlib 2.222 from CPAN.


-- Jacob