Advisories » MGASA-2026-0350

Updated perl-Plack packages fix a security vulnerability

Publication date: 31 Aug 2026
Modification date: 31 Aug 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-7381

Description

Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow
client-controlled path rewriting.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35449
• https://www.openwall.com/lists/oss-security/2026/04/29/27
• https://www.cve.org/CVERecord?id=CVE-2026-7381

SRPMS

10/core

• perl-Plack-1.5.400-1.mga10

9/core

• perl-Plack-1.5.400-1.mga9