Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

Fedora 44 perl-Catalyst-Plugin-Authentication Vulnerability CVE-2026-5091

fedora
Calendar Grey June 1, 2026
Scroller Fedora
Catalyst::Plugin::Authentication for Fedora 44 fixes timing attack issues in versions up to 0.10024. Upgrade recommended.
Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks since these versions use Perl's built-in eq comparison

Summary

The authentication plugin provides generic user support for Catalyst apps.

It is the basis for both authentication (checking the user is who they

claim to be), and authorization (allowing the user to do what the system

authorizes them to do).

Update Information:

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks since these versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password. Version 0.10026 of the module fixes this issue.

Topics%20covered

Topics Covered

security advisory fedora important timing attack authentication perl-Catalyst

Change Log

* Sun May 24 2026 Emmanuel Seyman - 0.10026-1 - Update to 0.10026 (fixes CVE-2026-5091)

References


[ 1 ] Bug #2483712 - CVE-2026-5091 perl-Catalyst-Plugin-Authentication: Catalyst::Plugin::Authentication: Information disclosure via timing attack [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2483712

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-26666575ae' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: perl-Catalyst-Plugin-Authentication
Product: Fedora 44
Version: 0.10026
Release: 1.fc44
URL: https://metacpan.org/release/Catalyst-Plugin-Authentication
Summary: Infrastructure plugin for the Catalyst authentication framework

Topics%20covered

Topics Covered

security advisory fedora important timing attack authentication perl-Catalyst

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.