Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
56d5a963 by Salvatore Bonaccorso at 2026-06-13T07:47:37+02:00
Track fixed version via unstable for libcrypt-pbkdf2-perl issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -19,11 +19,11 @@ CVE-2026-XXXX [RUSTSEC-2026-0177]
NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0177.html
NOTE: https://github.com/PyO3/pyo3/pull/6096
CVE-2026-9641 (Crypt::PBKDF2 versions before 0.261630 for Perl have a weak
default al ...)
- - libcrypt-pbkdf2-perl <unfixed> (bug #1139867)
+ - libcrypt-pbkdf2-perl 0.261630-1 (bug #1139867)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/40933040/
NOTE: Fixed by:
https://github.com/arodland/Crypt-PBKDF2/commit/320db2451c42916ce787479de8a0bb1fb37a6700
(0.261630)
CVE-2026-9638 (Crypt::PBKDF2 versions before 0.261630 for Perl generate
insecure rand ...)
- - libcrypt-pbkdf2-perl <unfixed> (bug #1139867)
+ - libcrypt-pbkdf2-perl 0.261630-1 (bug #1139867)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/40932643/
NOTE: Fixed by:
https://github.com/arodland/Crypt-PBKDF2/commit/1d0a1ad8474fd3dddfd10a04ea6837951f6e6519
(0.261630)
CVE-2026-9266 (A Missing Required Cryptographic Step vulnerability has been
identifie ...)
@@ -339,7 +339,7 @@ CVE-2026-10715 (Camaleon CMS 2.9.2 contains an improper
authorization vulnerabil
CVE-2026-10557 (The Yarbo Android and iOS applications contain hard-coded MQTT
broker ...)
NOT-FOR-US: Yarbo
CVE-2017-20240 (Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable
to timi ...)
- - libcrypt-pbkdf2-perl <unfixed> (bug #1139867)
+ - libcrypt-pbkdf2-perl 0.261630-1 (bug #1139867)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/40929601/
NOTE: Fixed by:
https://github.com/arodland/Crypt-PBKDF2/commit/ac5aac7c8c0e411165a6665a9c1f449b745f2629
(0.261630)
CVE-2026-50012
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/56d5a9637722950ed30a3da4eb345c7e3d0fa998
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/56d5a9637722950ed30a3da4eb345c7e3d0fa998
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
