[Git][security-tracker-team/security-tracker][master] lts: libcgi-session-perl postponed in bookworm/bullseye

[Utkarsh Gupta (@utkarsh)]

Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ee186076 by Utkarsh Gupta at 2026-07-26T05:17:32+05:30
lts: libcgi-session-perl postponed in bookworm/bullseye

phew, that took a while..

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21552,6 +21552,8 @@ CVE-2025-12530 (IBM watsonx.data intelligence 5.2.2, 5.3.0, 5.3.1, 5.3.1 through
 CVE-2026-56016 (CGI::Session::ID::md5 versions before 4.49 for Perl generate predictab ...)
 	- libcgi-session-perl 4.49-1 (bug #1141197)
 	[trixie] - libcgi-session-perl <no-dsa> (Minor issue)
+	[bookworm] - libcgi-session-perl <postponed> (Minor issue; predictable session IDs only practically exploitable under a persistent interpreter such as FastCGI or mod_perl)
+	[bullseye] - libcgi-session-perl <postponed> (Minor issue; predictable session IDs only practically exploitable under a persistent interpreter such as FastCGI or mod_perl)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/41439279/
 CVE-2026-13774 (Use after free in Extensions in Google Chrome prior to 150.0.7871.47 a ...)
 	{DSA-6378-1 DLA-4672-1}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee186076f0a2dc99080c2357ff7b0c2f0ce69a5f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee186076f0a2dc99080c2357ff7b0c2f0ce69a5f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260726/842dc567/attachment.htm>