[Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for libcrypt-pbkdf2-perl issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
56d5a963 by Salvatore Bonaccorso at 2026-06-13T07:47:37+02:00
Track fixed version via unstable for libcrypt-pbkdf2-perl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,11 +19,11 @@ CVE-2026-XXXX [RUSTSEC-2026-0177]
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0177.html
 	NOTE: https://github.com/PyO3/pyo3/pull/6096
 CVE-2026-9641 (Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default al ...)
-	- libcrypt-pbkdf2-perl <unfixed> (bug #1139867)
+	- libcrypt-pbkdf2-perl 0.261630-1 (bug #1139867)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/40933040/
 	NOTE: Fixed by: https://github.com/arodland/Crypt-PBKDF2/commit/320db2451c42916ce787479de8a0bb1fb37a6700 (0.261630)
 CVE-2026-9638 (Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure rand ...)
-	- libcrypt-pbkdf2-perl <unfixed> (bug #1139867)
+	- libcrypt-pbkdf2-perl 0.261630-1 (bug #1139867)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/40932643/
 	NOTE: Fixed by: https://github.com/arodland/Crypt-PBKDF2/commit/1d0a1ad8474fd3dddfd10a04ea6837951f6e6519 (0.261630)
 CVE-2026-9266 (A Missing Required Cryptographic Step vulnerability has been identifie ...)
@@ -339,7 +339,7 @@ CVE-2026-10715 (Camaleon CMS 2.9.2 contains an improper authorization vulnerabil
 CVE-2026-10557 (The Yarbo Android and iOS applications contain hard-coded MQTT broker  ...)
 	NOT-FOR-US: Yarbo
 CVE-2017-20240 (Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timi ...)
-	- libcrypt-pbkdf2-perl <unfixed> (bug #1139867)
+	- libcrypt-pbkdf2-perl 0.261630-1 (bug #1139867)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/40929601/
 	NOTE: Fixed by: https://github.com/arodland/Crypt-PBKDF2/commit/ac5aac7c8c0e411165a6665a9c1f449b745f2629 (0.261630)
 CVE-2026-50012



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/56d5a9637722950ed30a3da4eb345c7e3d0fa998

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/56d5a9637722950ed30a3da4eb345c7e3d0fa998
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260613/919efc68/attachment-0001.htm>