openSUSE-SU-2026:20792-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20792-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20792-1
Upstream
Related
Published
2026-05-25T09:05:33Z
Modified
2026-05-26T08:15:05Z
Summary
Security update for perl-HTTP-Tiny
Details

This update for perl-HTTP-Tiny fixes the following issues:

Changes in perl-HTTP-Tiny:

  • updated to 0.094 0.094 - No changes from 0.093-TRIAL 0.093 - fix to prevent invalid characters in all headers, and prevent header smuggling (CVE-2026-7010) bsc#1264992

  • updated to 0.092 0.092 - No changes from 0.091-TRIAL 0.091 [ADDED] - Added keep_alive_timeout to force keepalive connections to be closed based on a timeout. [CHANGED] - Optional tests are always required when releasing. - Always use TCP_NODELAY option. [FIXED] - Fixed test incorrectly testing cookie jar interactions multiple times. - Fixed perl version comparisons to work when not starting with 5. - Fixed link to LIMITATIONS in documentation.

  • updated to 0.090 0.090 - No changes from 0.089-TRIAL 0.089 [CHANGED] - Find the certificate bundle via IO::Socket::SSL rather than implementing it in HTTP::Tiny. - When encoding form data, given a hashref with an arrayref value, preserve the order of the values in the arrayref rather than sorting. [DOCS] - Fixed internal link to "TLS/SSL SUPPORT" section

References

Affected packages