[Git][security-tracker-team/security-tracker][master] Add CVE-2026-57433/perl in Storable module

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0f81094a by Salvatore Bonaccorso at 2026-07-13T22:44:54+02:00
Add CVE-2026-57433/perl in Storable module

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -251,7 +251,10 @@ CVE-2026-57691 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2026-57668 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-57433 (Storable versions before 3.41 for Perl have a signed integer overflow  ...)
-	TODO: check
+	- perl <unfixed>
+	- libstorable-perl <removed>
+	NOTE: https://lists.security.metacpan.org/cve-announce/msg/41780100/
+	NOTE: Fixed by: https://github.com/Perl/perl5/commit/e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7 (v5.43.11)
 CVE-2026-57432 (Perl versions through 5.43.10 have an integer overflow in S_measure_st ...)
 	- perl <unfixed>
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/41780102/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f81094a7e988a133d651b68f18c35378ad51b9c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f81094a7e988a133d651b68f18c35378ad51b9c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260713/00f20be8/attachment.htm>