180 matches found
[SECURITY] Fedora 45 Update: perl-Plack-Middleware-ReverseProxy-0.17-1.fc45
Plack::Middleware::ReverseProxy resets some HTTP headers, which changed by reverse-proxy. You can specify the reverse proxy address and stop fake requests using 'enableif' directive in your app.psgi...
[SECURITY] Fedora 45 Update: perl-Plack-1.0055-1.fc45
Plack is a set of tools for using the PSGI stack. It contains middleware components, a reference server and utilities for Web application frameworks. Plack is like Ruby's Rack or Python's Paste for WSGI...
Fedora 45 : perl-Plack / perl-Plack-Middleware-ReverseProxy (2026-04e2968a8a)
The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-04e2968a8a advisory. A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive...
FreeBSD : p5-Plack -- memory allocation vulnerability (3bd1edbf-d2d4-11f1-97dc-40b034429ecf)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3bd1edbf-d2d4-11f1-97dc-40b034429ecf advisory. Plack project reports: Fix HTTP::Server::PSGI allocating a buffer as large as the declared...
CVE-2026-115825
A flaw was found in perl-Plack. The HTTP::Server::PSGI server pre-allocates memory for incoming request bodies based entirely on the declared Content-Length header before reading data. A remote attacker can exploit this flaw by sending an HTTP request with an excessively large Content-Length...
[SECURITY] Fedora 43 Update: perl-Plack-Middleware-ReverseProxy-0.17-1.fc43
Plack::Middleware::ReverseProxy resets some HTTP headers, which changed by reverse-proxy. You can specify the reverse proxy address and stop fake requests using 'enableif' directive in your app.psgi...
[SECURITY] Fedora 43 Update: perl-Plack-1.0055-1.fc43
Plack is a set of tools for using the PSGI stack. It contains middleware components, a reference server and utilities for Web application frameworks. Plack is like Ruby's Rack or Python's Paste for WSGI...
[SECURITY] Fedora 44 Update: perl-Plack-1.0055-1.fc44
Plack is a set of tools for using the PSGI stack. It contains middleware components, a reference server and utilities for Web application frameworks. Plack is like Ruby's Rack or Python's Paste for WSGI...
[SECURITY] Fedora 44 Update: perl-Plack-Middleware-ReverseProxy-0.17-1.fc44
Plack::Middleware::ReverseProxy resets some HTTP headers, which changed by reverse-proxy. You can specify the reverse proxy address and stop fake requests using 'enableif' directive in your app.psgi...
PT-2026-127785
These are all security issues fixed in the perl-Plack-1.0057-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-127787
These are all security issues fixed in the perl-Plack-1.0057-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-127786
These are all security issues fixed in the perl-Plack-1.0057-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-127784
These are all security issues fixed in the perl-Plack-1.0057-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-127770
These are all security issues fixed in the perl-Plack-1.0057-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:12275-1 perl-Plack-1.0057-1.1 on GA media
These are all security issues fixed in the perl-Plack-1.0057-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-127783
These are all security issues fixed in the perl-Plack-1.0057-1.1 package on the GA media of openSUSE Tumbleweed...
p5-Plack -- memory allocation vulnerability
Plack project reports: Fix HTTP::Server::PSGI allocating a buffer as large as the declared Content-Length, which let a single request crash the server with "Out of memory!" CVE-2026-115825...
SUSE CVE-2026-111946
Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When the response body is a filehandle and the fileetag option is not set, the ETag is built from the file's inode number, modification time and size. Clients receiving affected...
CVE-2026-111946
Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When the response body is a filehandle and the fileetag option is not set, the ETag is built from the file's inode number, modification time and size. Clients receiving affected...
EUVD-2026-104605
Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When the response body is a filehandle and the fileetag option is not set, the ETag is built from the file's inode number, modification time and size. Clients receiving affected...