[Git][security-tracker-team/security-tracker][master] Track fixed version for libdancer2-perl issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7e3872d5 by Salvatore Bonaccorso at 2026-09-29T21:19:49+02:00
Track fixed version for libdancer2-perl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10290,7 +10290,7 @@ CVE-2026-94640 (A flaw was found in rpcbind. This vulnerability allows a remote,
 CVE-2026-15801 (A vulnerability was found in CRI-O related to the container checkpoint ...)
 	- cri-o <itp> (bug #979702)
 CVE-2026-93712 (Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from out ...)
-	- libdancer2-perl <unfixed> (bug #1148732)
+	- libdancer2-perl 2.2.2-1 (bug #1148732)
 	[trixie] - libdancer2-perl <no-dsa> (Minor issue)
 	[bookworm] - libdancer2-perl <postponed> (Minor issue)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43742973/
@@ -10298,21 +10298,21 @@ CVE-2026-93712 (Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files fr
 	NOTE: Introduced with: https://github.com/PerlDancer/Dancer2/commit/d2f922bbf4ca18942a177d38fa62abcce05ed3f4 (v0.02)
 	NOTE: Fixed by: https://github.com/PerlDancer/Dancer2/commit/2446a09ffb83fef71cc75c327bd6e4b1f007b885 (v2.2.0)
 CVE-2026-93711 (Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from res ...)
-	- libdancer2-perl <unfixed> (bug #1148732)
+	- libdancer2-perl 2.2.2-1 (bug #1148732)
 	[trixie] - libdancer2-perl <no-dsa> (Minor issue)
 	[bookworm] - libdancer2-perl <postponed> (Minor issue)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43742971/
 	NOTE: https://github.com/PerlDancer/Dancer2/issues/1822
 	NOTE: Fixed by: https://github.com/PerlDancer/Dancer2/commit/ff89ac12af7b8899812a79e9924dfea7a5d9833b (v2.2.0)
 CVE-2026-93710 (Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route tha ...)
-	- libdancer2-perl <unfixed> (bug #1148732)
+	- libdancer2-perl 2.2.2-1 (bug #1148732)
 	[trixie] - libdancer2-perl <not-affected> (Vulnerable code introduced later in 2.0.0)
 	[bookworm] - libdancer2-perl <not-affected> (Vulnerable code introduced later in 2.0.0)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43742969/
 	NOTE: https://github.com/PerlDancer/Dancer2/security/advisories/GHSA-v527-r4px-7vx7
 	NOTE: Fixed by: https://github.com/PerlDancer/Dancer2/commit/8fd31a32798f9aa25e4fccbd6c7cb9dd3a0c1029 (v2.2.0)
 CVE-2026-93709 (Dancer2 versions before 2.2.0 for Perl serve a layout as a page when a ...)
-	- libdancer2-perl <unfixed> (unimportant; bug #1148732)
+	- libdancer2-perl 2.2.2-1 (unimportant; bug #1148732)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43742968/
 	NOTE: https://github.com/PerlDancer/Dancer2/issues/1823
 	NOTE: Fixed by: https://github.com/PerlDancer/Dancer2/commit/293fce08812b0928f34ab2d7b9357450707c3630 (v2.2.0)
@@ -88164,7 +88164,7 @@ CVE-2026-64187 (In the Linux kernel, the following vulnerability has been resolv
 	- linux 7.1.4-1
 	NOTE: https://git.kernel.org/linus/2094dab19d45c487285617b7b68913d0cc0c1211 (7.2-rc4)
 CVE-2026-13577 (Dancer2 versions before 2.2.0 for Perl generate insecure session ids w ...)
-	- libdancer2-perl <unfixed> (bug #1142718)
+	- libdancer2-perl 2.2.2-1 (bug #1142718)
 	[trixie] - libdancer2-perl <no-dsa> (Minor issue)
 	[bookworm] - libdancer2-perl <postponed> (Minor issue)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/41975698/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e3872d5e6a893b95d04a78eda546319df71b2f8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e3872d5e6a893b95d04a78eda546319df71b2f8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260929/86d2ed67/attachment.htm>