OpenBSD's Perl could write past a heap cache during regex matching
Brief
OpenBSD pulled the two upstream Perl commits that size the cache correctly.
Notes
source-changes (afresh1@, 2026-08-14 19:09:27). gnu/usr.bin/perl/regexec.c and regexp.h.
CVE-2026-15534 (CPANSec, 2026-08-09). Out-of-bounds heap reads and writes via an undersized superlinear cache. Versions through 5.45.1.
Upstream 568e6fd238867bb9e99fa3f47cba3169009239e0 makes the countdown unsigned. 54cf3d44cbbedd17d774e9a37921963e8fd5d0cb makes the cache 64-bit clean so a long subject plus many nodes cannot leave a tiny cache.
No OpenBSD src SHA on GitHub or Codeberg. Do not invent one. Not labeled SECURITY FIX. No errata as of the 2026-08-10 Last-Modified.
Commit msg162766