UBUNTU-CVE-2026-8594

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-8594

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8594.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2026-8594

Upstream

CVE-2026-8594

Published

2026-05-30T16:17:00Z

Modified

2026-06-03T11:20:10Z

Severity

6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters. Text::LineFold splits the input string by specific line break characters (such as VT, FF and others) into segments, but applies the break function to the entire string, not just the segment. A side effect of this is that the full input can be duplicated for each segment. Besides being incorrect, this can lead to unexpected resource consumption and possible denial of service. Note that Text::LineFold is part of the Unicode-LineBreak distribution, which may have a higher version number than the module.

References

Affected packages

Ubuntu:16.04:LTS

libunicode-linebreak-perl

Package

Name: libunicode-linebreak-perl
Purl: pkg:deb/ubuntu/libunicode-linebreak-perl?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0.20150716-1

0.0.20151201-1

0.0.20151201-1build1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "0.0.20151201-1build1",
            "binary_name": "libunicode-linebreak-perl"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8594.json"

Ubuntu:18.04:LTS

libunicode-linebreak-perl

Package

Name: libunicode-linebreak-perl
Purl: pkg:deb/ubuntu/libunicode-linebreak-perl?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0.20160702-1build2

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "0.0.20160702-1build2",
            "binary_name": "libunicode-linebreak-perl"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8594.json"

Ubuntu:20.04:LTS

libunicode-linebreak-perl

Package

Name: libunicode-linebreak-perl
Purl: pkg:deb/ubuntu/libunicode-linebreak-perl?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0.20190101-1

0.0.20190101-1build1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "0.0.20190101-1build1",
            "binary_name": "libunicode-linebreak-perl"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8594.json"

Ubuntu:22.04:LTS

libunicode-linebreak-perl

Package

Name: libunicode-linebreak-perl
Purl: pkg:deb/ubuntu/libunicode-linebreak-perl?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0.20190101-1build2

0.0.20190101-1build3

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "0.0.20190101-1build3",
            "binary_name": "libunicode-linebreak-perl"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8594.json"

Ubuntu:24.04:LTS

libunicode-linebreak-perl

Package

Name: libunicode-linebreak-perl
Purl: pkg:deb/ubuntu/libunicode-linebreak-perl?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0.20190101-1build4

0.0.20190101-1build5

0.0.20190101-1build6

0.0.20190101-1build7

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "0.0.20190101-1build7",
            "binary_name": "libunicode-linebreak-perl"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8594.json"

Ubuntu:25.10

libunicode-linebreak-perl

Package

Name: libunicode-linebreak-perl
Purl: pkg:deb/ubuntu/libunicode-linebreak-perl?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0.20190101-1build8

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "0.0.20190101-1build8",
            "binary_name": "libunicode-linebreak-perl"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8594.json"

Ubuntu:26.04:LTS

libunicode-linebreak-perl

Package

Name: libunicode-linebreak-perl
Purl: pkg:deb/ubuntu/libunicode-linebreak-perl?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0.20190101-1build8

0.0.20190101-2

0.0.20190101-3

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "0.0.20190101-3",
            "binary_name": "libunicode-linebreak-perl"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8594.json"