[Git][security-tracker-team/security-tracker][master] Add CVE-2026-8368/libwww-perl

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
90df8050 by Salvatore Bonaccorso at 2026-05-12T21:33:50+02:00
Add CVE-2026-8368/libwww-perl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17,7 +17,11 @@ CVE-2026-8389 (JIT miscompilation in the JavaScript Engine: JIT component. This
 CVE-2026-8388 (Incorrect boundary conditions in the JavaScript Engine: JIT component. ...)
 	TODO: check
 CVE-2026-8368 (LWP::UserAgent versions before 6.83 for Perl leak Authorization and Pr ...)
-	TODO: check
+	- libwww-perl <unfixed>
+	NOTE: https://lists.security.metacpan.org/cve-announce/msg/39974665/
+	NOTE: https://github.com/libwww-perl/libwww-perl/pull/512
+	NOTE: https://github.com/libwww-perl/libwww-perl/pull/284
+	NOTE: Fixed by: https://github.com/libwww-perl/libwww-perl/commit/9c4aeb6f2dd32f2b7eaf2d7827cade31ea6cb2c6 (v6.83)
 CVE-2026-8278
 	REJECTED
 CVE-2026-8162 (multiparty at 4.2.3 and lower versions are vulnerable to denial of servic ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/90df80505686f4d8f283e1168e92fd3bb4d277cc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/90df80505686f4d8f283e1168e92fd3bb4d277cc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260512/2f740822/attachment.htm>