Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 9 perl-WWW-Mechanize-Cached Local Vulnerability CVE-2026-8612

mageia
Calendar Grey May 18, 2026
Dist Mageia Esm H88
Mageia updates perl-WWW-Mechanize-Cached to fix security flaws allowing local response forgery and code execution.
MGASA-2026-0149 - Updated perl-WWW-Mechanize-Cached, perl-File-XDG & perl-Path-Tiny packages fix security vulnerabilities

Summary

Description: WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution.

References

- https://bugs.mageia.org/show_bug.cgi?id=35533

- https://www.openwall.com/lists/oss-security/2026/05/15/1

- https://metacpan.org/release/OALDERS/WWW-Mechanize-Cached-2.00/changes

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8612

Topics%20covered

Topics Covered

security advisory code execution local threat Mageia response forgery perl-www-mechanize-cached

Resolution

SRPMS

- 9/core/perl-WWW-Mechanize-Cached-2.0.0-1.mga9

- 9/core/perl-Path-Tiny-0.150.0-1.mga9

- 9/core/perl-File-XDG-1.30.0-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 18 May 2026
URL: https://advisories.mageia.org/MGASA-2026-0149.html
Type: security
CVE: CVE-2026-8612

Topics%20covered

Topics Covered

security advisory code execution local threat Mageia response forgery perl-www-mechanize-cached

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here