[Git][security-tracker-team/security-tracker][master] Add commit references for libcrypt-pbkdf2-perl issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
974f5ed8 by Salvatore Bonaccorso at 2026-06-12T21:30:02+02:00
Add commit references for libcrypt-pbkdf2-perl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,9 +1,11 @@
 CVE-2026-9641 (Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default al ...)
 	- libcrypt-pbkdf2-perl <unfixed> (bug #1139867)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/40933040/
+	NOTE: Fixed by: https://github.com/arodland/Crypt-PBKDF2/commit/320db2451c42916ce787479de8a0bb1fb37a6700 (0.261630)
 CVE-2026-9638 (Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure rand ...)
 	- libcrypt-pbkdf2-perl <unfixed> (bug #1139867)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/40932643/
+	NOTE: Fixed by: https://github.com/arodland/Crypt-PBKDF2/commit/1d0a1ad8474fd3dddfd10a04ea6837951f6e6519 (0.261630)
 CVE-2026-9266 (A Missing Required Cryptographic Step vulnerability has been identifie ...)
 	NOT-FOR-US: Moxa
 CVE-2026-8828 (A lack of authorization validation in version 1.0.0 or later of the Ch ...)
@@ -295,6 +297,7 @@ CVE-2026-10557 (The Yarbo Android and iOS applications contain hard-coded MQTT b
 CVE-2017-20240 (Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timi ...)
 	- libcrypt-pbkdf2-perl <unfixed> (bug #1139867)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/40929601/
+	NOTE: Fixed by: https://github.com/arodland/Crypt-PBKDF2/commit/ac5aac7c8c0e411165a6665a9c1f449b745f2629 (0.261630)
 CVE-2026-50012
 	- squid 7.6-1
 	NOTE: https://www.openwall.com/lists/oss-security/2026/06/12/1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/974f5ed8eb8da9165ac0a0e91a2457a8e7a5249a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/974f5ed8eb8da9165ac0a0e91a2457a8e7a5249a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260612/7f4d1369/attachment.htm>