Advisories » MGASA-2026-0120

Updated perl-Starlet packages fix security vulnerability

Publication date: 07 May 2026
Modification date: 07 May 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-40561

Description

Starlet versions through 0.31 for Perl allow HTTP Request Smuggling via
Improper Header Precedence. (CVE-2026-40561)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35464
• https://www.openwall.com/lists/oss-security/2026/05/03/1
• https://datatracker.ietf.org/doc/html/rfc7230#section-3.3.3
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40561

SRPMS

9/core

• perl-Starlet-0.310.0-4.1.mga9