Advisories » MGASA-2026-0404

Updated perl-HTML-FormFu packages fix a security vulnerability

Publication date: 14 Sep 2026
Modification date: 14 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-19873

Description

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion
via an unbounded repeat count from the query string in Repeatable
elements. (CVE-2026-19873)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36232
• https://www.openwall.com/lists/oss-security/2026/08/31/7
• https://github.com/FormFu/HTML-FormFu/issues/71
• https://www.cve.org/CVERecord?id=CVE-2026-19873

SRPMS

10/core

• perl-HTML-FormFu-2.60.0-5.1.mga10

9/core

• perl-HTML-FormFu-2.60.0-4.1.mga9