Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
974f5ed8 by Salvatore Bonaccorso at 2026-06-12T21:30:02+02:00
Add commit references for libcrypt-pbkdf2-perl issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,9 +1,11 @@
CVE-2026-9641 (Crypt::PBKDF2 versions before 0.261630 for Perl have a weak
default al ...)
- libcrypt-pbkdf2-perl <unfixed> (bug #1139867)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/40933040/
+ NOTE: Fixed by:
https://github.com/arodland/Crypt-PBKDF2/commit/320db2451c42916ce787479de8a0bb1fb37a6700
(0.261630)
CVE-2026-9638 (Crypt::PBKDF2 versions before 0.261630 for Perl generate
insecure rand ...)
- libcrypt-pbkdf2-perl <unfixed> (bug #1139867)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/40932643/
+ NOTE: Fixed by:
https://github.com/arodland/Crypt-PBKDF2/commit/1d0a1ad8474fd3dddfd10a04ea6837951f6e6519
(0.261630)
CVE-2026-9266 (A Missing Required Cryptographic Step vulnerability has been
identifie ...)
NOT-FOR-US: Moxa
CVE-2026-8828 (A lack of authorization validation in version 1.0.0 or later of
the Ch ...)
@@ -295,6 +297,7 @@ CVE-2026-10557 (The Yarbo Android and iOS applications
contain hard-coded MQTT b
CVE-2017-20240 (Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable
to timi ...)
- libcrypt-pbkdf2-perl <unfixed> (bug #1139867)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/40929601/
+ NOTE: Fixed by:
https://github.com/arodland/Crypt-PBKDF2/commit/ac5aac7c8c0e411165a6665a9c1f449b745f2629
(0.261630)
CVE-2026-50012
- squid 7.6-1
NOTE: https://www.openwall.com/lists/oss-security/2026/06/12/1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/974f5ed8eb8da9165ac0a0e91a2457a8e7a5249a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/974f5ed8eb8da9165ac0a0e91a2457a8e7a5249a
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
