[Git][security-tracker-team/security-tracker][master] CVE-2024-58135/libmojolicious-perl: unbreak link in web ui
Sylvain Beucler (@beuc)
gitlab at salsa.debian.org
Tue May 27 17:24:36 BST 2025
Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker
Commits:
7f7cf7b8 by Sylvain Beucler at 2025-05-27T18:01:10+02:00
CVE-2024-58135/libmojolicious-perl: unbreak link in web ui
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7297,7 +7297,7 @@ CVE-2024-58135 (Mojolicious versions from 7.28 through 9.40 for Perl may generat
NOTE: secret. It requires libcryptx-perl >=0.080, but they say this
NOTE: is only because that is the only release they tested.
NOTE: I.e., it is likely that the fix works fine with older CryptX:
- NOTE: <https://github.com/mojolicious/mojo/discussions/2255>.
+ NOTE: https://github.com/mojolicious/mojo/discussions/2255
NOTE: As per upstream mojolicious/v9.39 will still be considered
NOTE: vulnerable to the CVE since the CryptX is not a required
NOTE: dependency.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7f7cf7b86d3a932e6aadf97be4dedf06e745ddad
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7f7cf7b86d3a932e6aadf97be4dedf06e745ddad
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250527/c7065ab1/attachment.htm>
More information about the debian-security-tracker-commits
mailing list