[Git][security-tracker-team/security-tracker][master] Track fixes for libhttp-body-perl via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8742e0c4 by Salvatore Bonaccorso at 2026-10-30T19:39:50+01:00
Track fixes for libhttp-body-perl via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2909,41 +2909,41 @@ CVE-2026-100105 (A user with permission to edit contact points but not their pro
 CVE-2025-30414 (Local privilege escalation due to improper authentication. The followi ...)
 	NOT-FOR-US: Acronis
 CVE-2026-117501 (HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion vi ...)
-	- libhttp-body-perl <unfixed> (bug #1152485)
+	- libhttp-body-perl 1.24.01-1 (bug #1152485)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44711939/
 	NOTE: Fixed by: https://github.com/libwww-perl/HTTP-Body/commit/7c6dc1ecd49e30ac405a3959c606ba389718f556
 CVE-2026-117500 (HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via r ...)
-	- libhttp-body-perl <unfixed> (bug #1152485)
+	- libhttp-body-perl 1.24.01-1 (bug #1152485)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44711935/
 	NOTE: Fixed by: https://github.com/libwww-perl/HTTP-Body/commit/9ab46daaede02fb13ea55a7e3ede34c8b918d8ca
 	NOTE: Fixed by: https://github.com/libwww-perl/HTTP-Body/commit/3abc958d78bd84bf4abb87bad79b9432eab7e694
 CVE-2026-116531 (HTTP::Body versions before 1.23_01 for Perl lose track of chunk bounda ...)
-	- libhttp-body-perl <unfixed> (bug #1152485)
+	- libhttp-body-perl 1.24.01-1 (bug #1152485)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44711932/
 	NOTE: Fixed by: https://github.com/libwww-perl/HTTP-Body/commit/5869dde9fe6d13f189a435b6583fd63fcc18677a (v1.24)
 CVE-2026-116285 (HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via q ...)
-	- libhttp-body-perl <unfixed> (bug #1152485)
+	- libhttp-body-perl 1.24.01-1 (bug #1152485)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44711941/
 	NOTE: Fixed by: https://github.com/libwww-perl/HTTP-Body/commit/954a5343d2a095b59d357f28759c5388d1169574 (v1.24)
 CVE-2026-116135 (HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent es ...)
-	- libhttp-body-perl <unfixed> (bug #1152485)
+	- libhttp-body-perl 1.24.01-1 (bug #1152485)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44711937/
 	NOTE: Fixed by: https://github.com/libwww-perl/HTTP-Body/commit/336f1a23b4115a5cbeb546f36df5af62c90bdc0d (v1.24)
 CVE-2026-116134 (HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion vi ...)
-	- libhttp-body-perl <unfixed> (bug #1152485)
+	- libhttp-body-perl 1.24.01-1 (bug #1152485)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44711947/
 	NOTE: Fixed by: https://github.com/libwww-perl/HTTP-Body/commit/c5d13911aabfad4a7ae4b6ee98ac2315400e5ed5 (v1.24)
 CVE-2026-116133 (HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via q ...)
-	- libhttp-body-perl <unfixed> (bug #1152485)
+	- libhttp-body-perl 1.24.01-1 (bug #1152485)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44711943/
 	NOTE: Fixed by: https://github.com/libwww-perl/HTTP-Body/commit/bf77eb959bbe1641b77f69eefe98d58ce4c4ec79 (v1.24)
 CVE-2026-116132 (HTTP::Body versions before 1.23_01 for Perl leave the temporary file o ...)
-	- libhttp-body-perl <unfixed> (bug #1152485)
+	- libhttp-body-perl 1.24.01-1 (bug #1152485)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44711945/
 	NOTE: https://rt.cpan.org/Public/Bug/Display.html?id=84004
 	NOTE: Fixed by: https://github.com/libwww-perl/HTTP-Body/commit/29e933b22ff918ccf5412d3513c885208511cfa3 (v1.24)
 CVE-2026-116131 (HTTP::Body versions before 1.23_01 for Perl allow memory and temporary ...)
-	- libhttp-body-perl <unfixed> (bug #1152485)
+	- libhttp-body-perl 1.24.01-1 (bug #1152485)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44711949/
 	NOTE: Fixed by: https://github.com/libwww-perl/HTTP-Body/commit/47beca524a3062eacfd646664576f005fb4be19b (v1.24)
 CVE-2026-XXXX [Memory corruption when an application cancels its lookups after a connection failure]



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8742e0c44d6b96db152a4f5aea44bf1a4e900559

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8742e0c44d6b96db152a4f5aea44bf1a4e900559
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/9d6587c5/attachment.htm>