Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 271fcead by Salvatore Bonaccorso at 2026-07-07T21:10:08+02:00 Add CVE-2026-7017/libhttp-tiny-perl - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,11 @@ +CVE-2026-7017 + - libhttp-tiny-perl <unfixed> + - perl <unfixed> + NOTE: https://lists.security.metacpan.org/cve-announce/msg/41618211/ + NOTE: https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/pull/36 + NOTE: Fixed by: https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/84984ef3930ddd4afcf5eb83b40d3cee200739c3 (release-0.095) + NOTE: Fixed by: https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/e7a03aedf2395158f2b0d3bad2df943349227bb3 (release-0.095) + NOTE: Fixed by: https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/8f32ca89e21c3ad0422adc698fa6ad17a193f55f (release-0.095) CVE-2026-53878 [Header injection possibility since DomainNameValidator accepted newlines in input] - python-django 3:5.2.16-1 (bug #1141629) NOTE: https://www.djangoproject.com/weblog/2026/jul/07/security-releases/ View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/271fceadf007b0182157681c418589d5693eae12 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/271fceadf007b0182157681c418589d5693eae12 You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
