Advisories » MGASA-2026-0286

Updated perl-CGI-Session package fixes a security vulnerability

Publication date: 20 Jul 2026
Modification date: 20 Jul 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-56016

Description

The updated package fixes a security vulnerability:
CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable
session ids from low-entropy sources. (CVE-2026-56016)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35800
• https://www.openwall.com/lists/oss-security/2026/07/01/6
• https://metacpan.org/release/MARKSTOS/CGI-Session-4.49/changes
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/OXFQ3DBWPONO7MHLPUC3HP44MVOLIY4B/
• https://www.cve.org/CVERecord?id=CVE-2026-56016

SRPMS

10/core

• perl-CGI-Session-4.490.0-1.mga10