Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ffecbf32 by Salvatore Bonaccorso at 2026-05-26T21:20:47+02:00
Reference commits for perl issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -529,12 +529,15 @@ CVE-2026-48715 [Stack Buffer Overflow in radvdump Route
Information Option Parse
CVE-2026-9538 (Archive::Tar versions before 3.10 for Perl allow memory
exhaustion via ...)
- perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/40396448/
+ NOTE:
https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7
(3.10)
CVE-2026-42497 (Archive::Tar versions before 3.08 for Perl extract hardlinks
to attack ...)
- perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/40396457/
+ NOTE:
https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158
(3.08)
CVE-2026-42496 (Archive::Tar versions before 3.08 for Perl extract symlinks
with attac ...)
- perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/40396459/
+ NOTE:
https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158
(3.08)
CVE-2026-48589 (Apache Shiro\u2019s Jakarta EE module used the HTTP Referer
header in ...)
- shiro <not-affected> (Jakarta EE integration introduced in 2.0.0)
NOTE: https://www.openwall.com/lists/oss-security/2026/05/25/9
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ffecbf3204eb62d578229779a7411f7e553d4a79
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ffecbf3204eb62d578229779a7411f7e553d4a79
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
