perl-5.44.0

[Bruce Dubbs]

New minor version. We need to check if it incorporates the issues from #5976.

[Xi Ruoyao]

​https://metacpan.org/release/LEONT/perl-5.44.0/view/pod/perldelta.pod

CVE-2026-8376 - Buffer overflow in Perl_study_chunk

Perl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. On 32-bit builds, this can lead to an integer overflow of the size of the buffer leading to out-of-bounds writes.

CVE-2026-57432 - Buffer overflow in S_measure_struct

If you call pack or unpack to operate on a structure whose computed size is too large to fit in memory, an integer overflow could happen that would result in a buffer overflow. This usually happens as a result of embedding a large number as the repeat count for an item.

CVE-2026-13221 - Regex trie 16-bit field overflow

The trie optimization in the regex engine could overflow in an alternation with more than ~65k branches. This could cause both false positives and false negatives on such regular expressions.

[Bruce Dubbs]

Fixed at commit f1476cdc33c.

Update to shadow-4.20.0.
Update to systemd-261.2.
Update to sqlite-3.53.4.
Update to pkgconf-3.0.4.
Update to perl-5.44.0.
Update to linux-7.1.5.
Update to libtool-2.6.2.
Update to iana-etc-20260723.
Update to binutils-2.47.