[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-40931/libapache-session-perl

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d2362fe4 by Salvatore Bonaccorso at 2026-03-15T18:47:13+01:00
Add Debian bug reference for CVE-2025-40931/libapache-session-perl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5007,7 +5007,7 @@ CVE-2026-3381 (Compress::Raw::Zlib versions through 2.219 for Perl use potential
 CVE-2026-3257 (UnQLite versions through 0.06 for Perl uses a potentially insecure ver ...)
 	NOT-FOR-US: UnQLite Perl module
 CVE-2025-40931 (Apache::Session::Generate::MD5 versions through 1.94 for Perl create i ...)
-	- libapache-session-perl <unfixed>
+	- libapache-session-perl <unfixed> (bug #1130891)
 	[trixie] - libapache-session-perl <postponed> (Minor issue, revisit when fixed upstream)
 	[bookworm] - libapache-session-perl <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - libapache-session-perl <postponed> (Minor issue; can be fixed in next update)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2362fe49158d13456a623e1dcc4b00885be27d5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2362fe49158d13456a623e1dcc4b00885be27d5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260315/de770a82/attachment.htm>