Advisories » MGASA-2026-0360

Updated perl-HTML-FormHandler packages fix a security vulnerability

Publication date: 01 Sep 2026
Modification date: 01 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2022-4993

Description

HTML::FormHandler versions through 0.40068 for Perl allow attacker
selected method dispatch and resource exhaustion because _apply_actions
and add_error use error message text built from request data as a
Locale::Maketext bracket notation template
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36141
• https://www.openwall.com/lists/oss-security/2026/08/13/9
• https://www.cve.org/CVERecord?id=CVE-2022-4993

SRPMS

10/core

• perl-HTML-FormHandler-0.400.680-8.mga10

9/core

• perl-HTML-FormHandler-0.400.680-6.mga9