[Git][security-tracker-team/security-tracker][master] Track fixed version for libcpanel-json-xs-perl issues via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 20 06:59:52 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5259938e by Salvatore Bonaccorso at 2026-10-20T07:59:20+02:00
Track fixed version for libcpanel-json-xs-perl issues via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -687,63 +687,63 @@ CVE-2024-4412 (The software accepts user-supplied data without sufficient valida
CVE-2023-38375 (IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site ...)
NOT-FOR-US: IBM
CVE-2026-110688 (Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadrat ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479935/
NOTE: Fixed by; https://github.com/rurban/Cpanel-JSON-XS/commit/384309f6a297384e69c851b5d64e1c421d9b2dcc (4.80)
CVE-2026-110687 (Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479909/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/bb9da30b67f637f4d57922f0e043376363f28f0c (4.80)
CVE-2026-110686 (Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callba ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479884/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/c3e7e3c5b0b72d82b072c6a7cfb8c34cec4c7ea2 (4.80)
CVE-2026-110685 (Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded argume ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479881/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/9ab010221c069a7af9ef7463454ecd3b8ace9c58 (4.80)
CVE-2026-110684 (Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479877/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/5b15916b5e7841e447664ace51fb50c12d1e0f39 (4.80)
CVE-2026-110682 (Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chu ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479866/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/f632d6690d82c14cd2d76d648805325201c52b83 (4.80)
CVE-2026-110681 (Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpre ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479851/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/c53eefbaa59c344abd4c71762118da04280987e8 (4.80)
CVE-2026-110680 (Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479835/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/44c4591cc62ea7f453a0ed931abf24394e1560a1 (4.80)
CVE-2026-110678 (Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479789/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/d516f296b1714e06b0fb9eaae72f4558ae3d83d6 (4.80)
CVE-2026-110677 (Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the arra ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479737/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/edb13030a708afc2cde0d2629fb6bdd31288ce6c (4.80)
CVE-2026-110676 (Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479732/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/996ab96972b967a917536d291947b5f3cf42e960 (4.80)
CVE-2026-110675 (Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malfor ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479714/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/c2cd02281b9d6904ca0aff2740154e742abc070c (4.80)
CVE-2026-110674 (Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicat ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479709/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/c52037857d6a99d96ebd1ce3e2fa769505f028cf (4.80)
CVE-2026-110673 (Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479705/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/995eb484a9351753e2a8ec3317918b5b4a4e086a (4.80)
CVE-2026-110672 (Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of ...)
- - libcpanel-json-xs-perl <unfixed>
+ - libcpanel-json-xs-perl 4.80-1
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479703/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/532b53cf8d2ca5ab6bc24048325566d1f7132425 (4.80)
CVE-2026-97859 (Seven Gitea API routes under `/api/v1/users/{username}` (followers, fo ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5259938e908ac7356172e06a3c20ef49d89692d5
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5259938e908ac7356172e06a3c20ef49d89692d5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/9ad677f0/attachment.htm>
More information about the debian-security-tracker-commits
mailing list