Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
90df8050 by Salvatore Bonaccorso at 2026-05-12T21:33:50+02:00
Add CVE-2026-8368/libwww-perl
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -17,7 +17,11 @@ CVE-2026-8389 (JIT miscompilation in the JavaScript Engine:
JIT component. This
CVE-2026-8388 (Incorrect boundary conditions in the JavaScript Engine: JIT
component. ...)
TODO: check
CVE-2026-8368 (LWP::UserAgent versions before 6.83 for Perl leak Authorization
and Pr ...)
- TODO: check
+ - libwww-perl <unfixed>
+ NOTE: https://lists.security.metacpan.org/cve-announce/msg/39974665/
+ NOTE: https://github.com/libwww-perl/libwww-perl/pull/512
+ NOTE: https://github.com/libwww-perl/libwww-perl/pull/284
+ NOTE: Fixed by:
https://github.com/libwww-perl/libwww-perl/commit/9c4aeb6f2dd32f2b7eaf2d7827cade31ea6cb2c6
(v6.83)
CVE-2026-8278
REJECTED
CVE-2026-8162 ([email protected] and lower versions are vulnerable to denial of
servic ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/90df80505686f4d8f283e1168e92fd3bb4d277cc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/90df80505686f4d8f283e1168e92fd3bb4d277cc
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
