12 matches found
Fedora 43 : perl-HTTP-Date (2026-b1bdb7c518)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b1bdb7c518 advisory. Changes: 6.08 2026-07-09 02:04:21Z - SECURITY Reject input longer than 64 characters in parsedate to prevent quadratic regex backtracking a denial of service...
SUSE SLES12 Security Update : perl-HTTP-Date (SUSE-SU-2026:3334-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3334-1 advisory. This update for perl-HTTP-Date fixes the following issue: - CVE-2026-14741: CPU exhaustion due to polynomial regex backtracking in parsedate when...
SUSE SLES16 Security Update : perl-HTTP-Date (SUSE-SU-2026:22859-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:22859-1 advisory. This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion via polynomial regex backtracking in parsedate...
perl-HTTP-Date-6.80.0-1.1 on GA media (moderate)
perl-HTTP-Date-6.80.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11350-1 Rating: moderate Cross-References: CVE-2026-14741 CVSS scores: CVE-2026-14741 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-14741 SUSE : 6.9...
openSUSE 16 Security Update : perl-HTTP-Date (openSUSE-SU-2026:21427-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21427-1 advisory. This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion via polynomial regex backtracking in parsedate bsc1271705...
Security update for perl-HTTP-Date (moderate)
openSUSE security update: security update for perl-http-date ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21427-1 Rating: moderate References: bsc1271705 Cross-References: CVE-2026-14741 CVSS scores: CVE-2026-14741 SUSE : 5.3...
OPENSUSE-SU-2026:11350-1 perl-HTTP-Date-6.80.0-1.1 on GA media
These are all security issues fixed in the perl-HTTP-Date-6.80.0-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE-SU-2026:22859-1 Security update for perl-HTTP-Date
This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion via polynomial regex backtracking in parsedate bsc1271705...
CVE-2026-14741
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parsedate. parsedate matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...
CVE-2026-14741 HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parsedate. parsedate matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...
Fedora 44 : perl-HTTP-Date (2026-8cec3cbf5b)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8cec3cbf5b advisory. Changes: 6.08 2026-07-09 02:04:21Z - SECURITY Reject input longer than 64 characters in parsedate to prevent quadratic regex backtracking a denial of service...
new packages: perl-HTTP-Date
An update is available for perl-HTTP-Date. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...