nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-08-26 18:24:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

perlPackages.CGISession: 4.48 -> 4.49

Browse Source 
Fixes CVE-2026-56016 in CGI::Session::ID::md5. The fix replaces rand()
with Crypt::SysRandom.

Assisted-by: Claude Code (Claude Opus 5)
Signed-off-by: Stig Palmquist <git@stig.io>
This commit is contained in:
Stig Palmquist
2026-08-08 15:47:39 +00:00
parent f8629eeb4b
commit 27574bbdf9
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
pkgs/top-level/perl-packages.nix
View File

@@ -4627,12 +4627,15 @@ with self;
CGISession = buildPerlModule {
pname = "CGI-Session";
version = "4.48";
version = "4.49";
src = fetchurl {
url = "mirror://cpan/authors/id/M/MA/MARKSTOS/CGI-Session-4.48.tar.gz";
hash = "sha256-RnVkYcJM52ZrgQjduW26thJpnfMBLIDvEQFmGf4VVPc=";
url = "mirror://cpan/authors/id/M/MA/MARKSTOS/CGI-Session-4.49.tar.gz";
hash = "sha256-X9iKgwo19UUmeH8DauXkp9FLYcQUzSmthjG/RuaXEgc=";
};
propagatedBuildInputs = [ CGI ];
propagatedBuildInputs = [
CGI
CryptSysRandom
];
meta = {
description = "Persistent session data in CGI applications";
license = lib.licenses.artistic1;