Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 592
Alerts This Week
Warning Icon 1 592

Fedora 43 Perl-Mojolicious Important CSRF Token Fix FEDORA-2026-6f12b08313

fedora
Calendar Grey July 27, 2026
Scroller Fedora
Mojolicious 9.48 improves security by masking CSRF tokens, preventing BREACH attacks and enhancing session handling.
The Fedora update for perl-Mojolicious version 9.48 addresses a security flaw related to CSRF tokens, enhancing protection against BREACH attacks by masking tokens with random valu...

Summary

Back in the early days of the web there was this wonderful Perl library

called CGI, many people only learned Perl because of it. It was simple

enough to get started without knowing much about the language and powerful

enough to keep you going, learning by doing was much fun. While most of the

techniques used are outdated now, the idea behind it is not. Mojolicious is

a new attempt at implementing this idea using state of the art technology.

Update Information:

Mojolicious 9.48 fixes a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now masked with a fresh random value on every request, instead of being reused for the whole lifetime of a session.

Topics%20covered

Topics Covered

security advisory fedora advisory information disclosure breach perl-Mojolicious

Change Log

* Tue Jul 14 2026 Emmanuel Seyman - 9.48-1 - Update to 9.48

References


[ 1 ] Bug #2500953 - CVE-2026-15747 perl-Mojolicious: Mojolicious: Information disclosure via BREACH compression oracle [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2500953

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-6f12b08313' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: perl-Mojolicious
Product: Fedora 43
Version: 9.48
Release: 1.fc43
URL: https://metacpan.org/release/Mojolicious
Summary: A next generation web framework for Perl

Topics%20covered

Topics Covered

security advisory fedora advisory information disclosure breach perl-Mojolicious

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.