[Git][security-tracker-team/security-tracker][master] Track fixed version for libcgi-pm-perl issues via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Nov 4 09:23:39 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
af8b1bcd by Salvatore Bonaccorso at 2026-11-04T10:22:52+01:00
Track fixed version for libcgi-pm-perl issues via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1481,91 +1481,91 @@ CVE-2026-121195 (Incorrect authorization in TrustedTypes in Google Chrome prior
CVE-2026-121141 (Improper input validation in Editing in Google Chrome prior to 157.0.8 ...)
- chromium <unfixed>
CVE-2026-120651 (CGI versions before 5.00 for Perl allow an infinite loop on a short re ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44875017/
NOTE: https://github.com/leejo/CGI.pm/commit/16d9f61acf8b844b7360e8d726338e3ce34dfa9f (v5.01)
NOTE: https://github.com/leejo/CGI.pm/commit/8a78305065690461ae283fa24e5ebe4ec8a22fbc (v5.01)
CVE-2026-120650 (CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustio ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44875016/
NOTE: https://github.com/leejo/CGI.pm/commit/17b838dc14d2b82ae6c7e76f66ec2c3f3b08038b (v5.01)
NOTE: https://github.com/leejo/CGI.pm/commit/f3febefe63fe3881d8c3ae10fa83ca8ec950b959 (v5.01)
NOTE: https://github.com/leejo/CGI.pm/commit/277baeb74fde7bce975a7bd0a1f98dcf1b9b2050 (v5.01)
NOTE: https://github.com/leejo/CGI.pm/commit/8940a74e53a41563f72813b45f99cceaaa4c92e8 (v5.01)
CVE-2026-120648 (CGI versions before 5.00 for Perl allow HTML injection via text contai ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44875015/
NOTE: https://github.com/leejo/CGI.pm/commit/6a17eb84703d84bca86b0079f5870ca9c921ffd4 (v5.01)
CVE-2026-120647 (CGI versions before 5.00 for Perl allow Content-Disposition parameter ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874995/
NOTE: https://github.com/leejo/CGI.pm/commit/131280a5c5bc51b65797bd57ef0ee8da8468065b (v5.01)
CVE-2026-120646 (CGI versions from 4.71 before 5.00 for Perl allow denial of service vi ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874987/
NOTE: https://github.com/leejo/CGI.pm/commit/a14a7decfdc18f2daf436d30df9b543e3f0f8da3 (v5.01)
CVE-2026-120645 (CGI versions before 5.00 for Perl allow denial of service via submitte ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44875001/
NOTE: https://github.com/leejo/CGI.pm/commit/824956fbb0c4eb77044ba2dc9180a30df12cb309 (v5.01)
CVE-2026-120644 (CGI::Cookie versions before 5.00 for Perl allow cookie attribute injec ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44875022/
NOTE: https://github.com/leejo/CGI.pm/commit/0b3527faaa9de55f79ca7d59dd3bcfb2c5540e00 (v5.01)
CVE-2026-120643 (CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874955/
NOTE: https://github.com/leejo/CGI.pm/commit/851430be84c4d0f350681814e1d7718b9959f2c2 (v5.01)
CVE-2026-120642 (CGI versions before 5.00 for Perl return request-derived values untain ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874935/
NOTE: https://github.com/leejo/CGI.pm/commit/6ae50ce84073b8f68a6e3750479de70d5b8f2dcf (v5.01)
CVE-2026-120641 (CGI versions before 5.00 for Perl return upload filenames with any cli ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874911/
NOTE: https://github.com/leejo/CGI.pm/commit/5379eb18e87b7f985613f5c4f7bae94478a4fa2f (v5.01)
CVE-2026-120640 (CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDA ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874900/
NOTE: https://github.com/leejo/CGI.pm/commit/bc4022f553301014e522133ba1e1f4e49e3bef08 (v5.01)
CVE-2026-120639 (CGI versions before 5.00 for Perl allow HTTP header injection via enti ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874826/
NOTE: https://github.com/leejo/CGI.pm/commit/69955309d371c8093d11cf12e3ddef491537ffad (v5.01)
NOTE: https://github.com/leejo/CGI.pm/commit/7733c2753f4f240012097507cda2b6e87ae46db4 (v5.01)
CVE-2026-120638 (CGI versions before 5.00 for Perl allow open redirects via HTML entity ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874824/
NOTE: https://github.com/leejo/CGI.pm/commit/7733c2753f4f240012097507cda2b6e87ae46db4 (v5.01)
CVE-2026-120637 (CGI versions before 5.00 for Perl take request parameters from the pro ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874823/
NOTE: https://github.com/leejo/CGI.pm/commit/b753ff75a3bc4554c075cc37c1db605a55297029 (v5.01)
CVE-2026-120636 (CGI versions before 5.00 for Perl allow open redirects and script inje ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874807/
NOTE: https://github.com/leejo/CGI.pm/commit/9405ef3909ee94991a3474167aa53b9051bd8765 (v5.01)
CVE-2026-120635 (CGI versions before 5.00 for Perl allow form fields to be smuggled pas ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874788/
NOTE: https://github.com/leejo/CGI.pm/commit/f719fc08e8756708bcd4f1e357d5c0f8702f85dd (v5.01)
NOTE: https://github.com/leejo/CGI.pm/commit/cbf04979f9974458ac223793bbd9d0b6a772aa66 (v5.01)
NOTE: https://github.com/leejo/CGI.pm/commit/fe9516804d59a3774e280c15dbb7072fbd0ba5f1 (v5.01)
NOTE: https://github.com/leejo/CGI.pm/commit/e0ef8f4248c6ae3025749040d8595d206b6a1b49 (v5.01)
CVE-2026-120634 (CGI::Carp versions before 5.00 for Perl leak warnings across requests ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874753/
NOTE: https://github.com/leejo/CGI.pm/commit/604a83fec105f75fe06f1a75026c4c34fd5a1f61 (v5.01)
CVE-2026-120633 (CGI versions before 5.00 for Perl trust the client X-Forwarded-Host he ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874727/
NOTE: https://github.com/leejo/CGI.pm/commit/d76752a5e8dfd365b0fe3a0b9a7da6c054e856af (v5.01)
CVE-2026-120632 (CGI versions before 5.00 for Perl allow CPU exhaustion via a backtrack ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874729/
NOTE: https://github.com/leejo/CGI.pm/commit/1e529c7ac8d410a51b4b04ab9d6cc00d51ef33c0 (v5.01)
CVE-2026-120631 (CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of se ...)
- - libcgi-pm-perl <unfixed>
+ - libcgi-pm-perl 5.02-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44874720/
NOTE: https://github.com/leejo/CGI.pm/commit/95e044af2ec24d99a61e99d6291580ad47aff641 (v5.01)
CVE-2026-54880
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/af8b1bcd42a2998d72d06daa27909f0907395222
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/af8b1bcd42a2998d72d06daa27909f0907395222
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/8efb9361/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list