Packages / openSUSE Tumbleweed / Unspecified / perl-JSON-XS

Package: perl-JSON-XS (4.40.0-1.6)

JSON serialising/deserialising, done correctly and fast

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be _correct_ and its secondary goal is to be _fast_. To reach the latter goal it was written in C. See MAPPING, below, on how JSON::XS maps perl values to JSON values and vice versa.

Other Packages Related to perl-JSON-XS:

dep: /usr/bin/perl
Package not available
dep: ld-linux-x86-64.so.2()(64bit)
Package not available
dep: ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)
Package not available
dep: perl(:MODULE_COMPAT_5.44.0)
Package not available
dep: perl(Types::Serialiser)
Package not available
dep: perl(common::sense)
Package not available
dep: libc.so.6(GLIBC_2.14)(64bit)
Package not available

Download perl-JSON-XS

Architecture	Package size	Installed size	Files	Package
x86_64	108 KiB	267 KiB	list of files	Download

Package file paths (16)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/bin/json_xs
/usr/lib/perl5/vendor_perl/5.44.0/x86_64-linux-thread-multi/auto/JSON
/usr/lib/perl5/vendor_perl/5.44.0/x86_64-linux-thread-multi/auto/JSON/XS
/usr/lib/perl5/vendor_perl/5.44.0/x86_64-linux-thread-multi/auto/JSON/XS/XS.so
/usr/lib/perl5/vendor_perl/5.44.0/x86_64-linux-thread-multi/JSON
/usr/lib/perl5/vendor_perl/5.44.0/x86_64-linux-thread-multi/JSON/XS
/usr/lib/perl5/vendor_perl/5.44.0/x86_64-linux-thread-multi/JSON/XS/Boolean.pm
/usr/lib/perl5/vendor_perl/5.44.0/x86_64-linux-thread-multi/JSON/XS.pm
/usr/share/doc/packages/perl-JSON-XS
/usr/share/doc/packages/perl-JSON-XS/Changes
/usr/share/doc/packages/perl-JSON-XS/README
/usr/share/licenses/perl-JSON-XS
/usr/share/licenses/perl-JSON-XS/COPYING
/usr/share/man/man1/json_xs.1.gz
/usr/share/man/man3/JSON::XS.3pm.gz
/usr/share/man/man3/JSON::XS::Boolean.3pm.gz

Field source: openSUSE Tumbleweed OSS

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try openSUSE Tumbleweed in the browser Build an image that includes perl-JSON-XS

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
4.40.0-1.6	tumbleweed / oss	x86_64	openSUSE Tumbleweed · OSS · multi-architecture	108 KiB	267 KiB	x86_64/perl-JSON-XS-4.40.0-1.6.x86_64.rpm

Field source: openSUSE Tumbleweed OSS

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE Severity Version impact

CVE	Severity	Version impact
[CVE-2025-40928] Published: Sep 8, 2025, 3:08:21 PM UTC JSON-XS vulnerability	High(8.1)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 27, 2026, 11:51:39 AM UTC Details (1) `4.40.0-1.6` · x86_64 · tumbleweed Fixed · Fixed: `4.40.0-1.1` usn · perl-JSON-XS · opensuse · tumbleweed

[CVE-2025-40928]

Published: Sep 8, 2025, 3:08:21 PM UTC

JSON-XS vulnerability

High(8.1)

Unknown

Matching against OpenFactory catalog package versions is in progress. Observed: Oct 27, 2026, 11:51:39 AM UTC

Details (1)

4.40.0-1.6 · x86_64 · tumbleweed
Fixed · Fixed: 4.40.0-1.1
usn · perl-JSON-XS · opensuse · tumbleweed

Last synced: Oct 29, 2026, 4:27:16 AM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

4.40.0-1.6 / x86_64Observed Sep 1, 2026sha512 7f486ac04761…3e29e14fSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 7f486ac0476130da8249d7e301080184ea9c1c8804ada2f97f2721fa559b37a30eba00f3319e2eca4c62a7384a564105181323cd6a11c5e02e7c5b1f3e29e14f

Field source: openSUSE Tumbleweed OSS

Sources

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable