Advisories » MGASA-2026-0149

Updated perl-WWW-Mechanize-Cached, perl-File-XDG & perl-Path-Tiny packages fix security vulnerabilities

Publication date: 18 May 2026
Modification date: 18 May 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-8612

Description

WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached
HTTP responses from a world-writable on-disk cache, enabling local
response forgery and code execution.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35533
• https://www.openwall.com/lists/oss-security/2026/05/15/1
• https://metacpan.org/release/OALDERS/WWW-Mechanize-Cached-2.00/changes
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8612

SRPMS

9/core

• perl-WWW-Mechanize-Cached-2.0.0-1.mga9
• perl-Path-Tiny-0.150.0-1.mga9
• perl-File-XDG-1.30.0-1.mga9