-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-18537daffc 2026-09-29 01:05:47.911283+00:00 --------------------------------------------------------------------------------
Name : perl-HTML-FormFu Product : Fedora 44 Version : 2.07 Release : 23.fc44 URL : https://metacpan.org/dist/HTML-FormFu Summary : HTML Form Creation, Rendering and Validation Framework Description : HTML::FormFu is a HTML form framework which aims to be as easy as possible to use for basic web forms, but with the power and flexibility to do anything else you might want to do (as long as it involves forms). -------------------------------------------------------------------------------- Update Information: HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. In this package, a max_counter attribute has been added to Repeatable elements that caps the client-supplied repeat count from the query string. Default is 100, inherited from a new form-level repeatable_max_counter attribute. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 20 2026 Emmanuel Seyman <[email protected]> - 2.07-23 - Modernize spec file - Apply fix to CVE-2026-19873 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2536983 - CVE-2026-19873 perl-HTML-FormFu: HTML::FormFu: Denial of Service via unbounded repeat count in Repeatable elements [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2536983 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-18537daffc' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
