Skip to content

Version 1.3.19

Latest
Latest

Choose a tag to compare

View all tags
@guimard guimard released this 15 May 09:52
· 2 commits to master since this release
v1.3.19
0dd14ad
  • Fix CVE-2026-8503: Apache::Session::Generate::SHA256 used a low-entropy seed (time, PID, rand, stringified hash ref) to derive session identifiers. Use Crypt::URandom to generate session ids from a cryptographically secure source, falling back to the previous hashing method only if /dev/urandom is unavailable. Similar in scope to CVE-2025-40931 and CVE-2025-40932.
  • Fix Redis indexes: never cleaned before
  • Improve resilience and reliability Patroni driver
Assets 2
Loading