< back to search

shield Security update for perl-mojolicious
openSUSE-2026-278

This update for perl-Mojolicious fixes the following issues: - updated to 9.480.0 (9.48) see /usr/share/doc/packages/perl-Mojolicious/Changes 9.48 2026-07-14 - Fixed a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now masked with a fresh random value on every request, instead of being reused for the whole lifetime of a session. CVE-2026-15747 boo#1271431 - updated to 9.470.0 (9.47) see /usr/share/doc/packages/perl-Mojolicious/Changes 9.47 2026-07-05 - Added support for the QUERY HTTP request method from RFC 10008. - Added query and query_p methods to Mojo::UserAgent. - Added query method to Mojolicious::Routes::Route. - Added query method to Mojolicious::Lite. - Added query_ok method to Test::Mojo. - Fixed a security issue where the pure-Perl implementation of Mojo::JSON could exhaust all available memory when decoding deeply nested data. Decoding is now limited to 512 levels of nesting, to match the default of Cpanel::JSON::XS. - Fixed a memory leak in Morbo. (heikojansen) - Fixed Mojo::File::list_tree to no longer follow symbolic links to directories. - updated to 9.460.0 (9.46) see /usr/share/doc/packages/perl-Mojolicious/Changes 9.46 2026-06-04 - Added random_bytes function to Mojo::Util. (leont) - Improved randomness for CSRF token generation. (leont) - Fixed tls_options handling in Mojo::IOLoop::TLS. (krauro) - Fixed spec compliance issue with attribute selectors in Mojo::DOM::CSS.

  • Release Date
    Aug 7 2026
  • References
    Bugzilla: 1271431
    CVEs: CVE-2026-15747
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Package Hub 15.7 aarch64
SUSE Package Hub 15.7 x86_64
SUSE Package Hub 15.7 s390x
SUSE Package Hub 15.7 ppc64le