Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7e3872d5 by Salvatore Bonaccorso at 2026-09-29T21:19:49+02:00
Track fixed version for libdancer2-perl issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -10290,7 +10290,7 @@ CVE-2026-94640 (A flaw was found in rpcbind. This
vulnerability allows a remote,
CVE-2026-15801 (A vulnerability was found in CRI-O related to the container
checkpoint ...)
- cri-o <itp> (bug #979702)
CVE-2026-93712 (Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files
from out ...)
- - libdancer2-perl <unfixed> (bug #1148732)
+ - libdancer2-perl 2.2.2-1 (bug #1148732)
[trixie] - libdancer2-perl <no-dsa> (Minor issue)
[bookworm] - libdancer2-perl <postponed> (Minor issue)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43742973/
@@ -10298,21 +10298,21 @@ CVE-2026-93712 (Dancer2 versions from 2.1.0 before
2.2.0 for Perl serve files fr
NOTE: Introduced with:
https://github.com/PerlDancer/Dancer2/commit/d2f922bbf4ca18942a177d38fa62abcce05ed3f4
(v0.02)
NOTE: Fixed by:
https://github.com/PerlDancer/Dancer2/commit/2446a09ffb83fef71cc75c327bd6e4b1f007b885
(v2.2.0)
CVE-2026-93711 (Dancer2 versions before 2.2.0 for Perl do not strip CR and LF
from res ...)
- - libdancer2-perl <unfixed> (bug #1148732)
+ - libdancer2-perl 2.2.2-1 (bug #1148732)
[trixie] - libdancer2-perl <no-dsa> (Minor issue)
[bookworm] - libdancer2-perl <postponed> (Minor issue)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43742971/
NOTE: https://github.com/PerlDancer/Dancer2/issues/1822
NOTE: Fixed by:
https://github.com/PerlDancer/Dancer2/commit/ff89ac12af7b8899812a79e9924dfea7a5d9833b
(v2.2.0)
CVE-2026-93710 (Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a
route tha ...)
- - libdancer2-perl <unfixed> (bug #1148732)
+ - libdancer2-perl 2.2.2-1 (bug #1148732)
[trixie] - libdancer2-perl <not-affected> (Vulnerable code introduced
later in 2.0.0)
[bookworm] - libdancer2-perl <not-affected> (Vulnerable code introduced
later in 2.0.0)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43742969/
NOTE:
https://github.com/PerlDancer/Dancer2/security/advisories/GHSA-v527-r4px-7vx7
NOTE: Fixed by:
https://github.com/PerlDancer/Dancer2/commit/8fd31a32798f9aa25e4fccbd6c7cb9dd3a0c1029
(v2.2.0)
CVE-2026-93709 (Dancer2 versions before 2.2.0 for Perl serve a layout as a
page when a ...)
- - libdancer2-perl <unfixed> (unimportant; bug #1148732)
+ - libdancer2-perl 2.2.2-1 (unimportant; bug #1148732)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43742968/
NOTE: https://github.com/PerlDancer/Dancer2/issues/1823
NOTE: Fixed by:
https://github.com/PerlDancer/Dancer2/commit/293fce08812b0928f34ab2d7b9357450707c3630
(v2.2.0)
@@ -88164,7 +88164,7 @@ CVE-2026-64187 (In the Linux kernel, the following
vulnerability has been resolv
- linux 7.1.4-1
NOTE:
https://git.kernel.org/linus/2094dab19d45c487285617b7b68913d0cc0c1211 (7.2-rc4)
CVE-2026-13577 (Dancer2 versions before 2.2.0 for Perl generate insecure
session ids w ...)
- - libdancer2-perl <unfixed> (bug #1142718)
+ - libdancer2-perl 2.2.2-1 (bug #1142718)
[trixie] - libdancer2-perl <no-dsa> (Minor issue)
[bookworm] - libdancer2-perl <postponed> (Minor issue)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/41975698/
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e3872d5e6a893b95d04a78eda546319df71b2f8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e3872d5e6a893b95d04a78eda546319df71b2f8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
