HCE2-SA-2025-0162 Important HCE 2.0 Security Fix(es): A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.    $ perl -e _x27;$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;_x27;    Segmentation fault (core dumped) It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses. (CVE-2024-56406) HCE 2.0 perl-5.34.0-3.r14.hce2.aarch64.rpm perl-devel-5.34.0-3.r14.hce2.aarch64.rpm perl-help-5.34.0-3.r14.hce2.noarch.rpm perl-libs-5.34.0-3.r14.hce2.aarch64.rpm perl-5.34.0-3.r14.hce2.x86_64.rpm perl-devel-5.34.0-3.r14.hce2.x86_64.rpm perl-libs-5.34.0-3.r14.hce2.x86_64.rpm