openSUSE-SU-2026:21529-1

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/openSUSE-SU-2026:21529-1

Upstream

Related

Published

2026-08-04T14:58:00Z

Modified

2026-08-05T18:23:43.672800769Z

Summary

Security update for perl-HTTP-Tiny

Details

This update for perl-HTTP-Tiny fixes the following issues:

Changes in perl-HTTP-Tiny:

updated to 0.096
CVE-2026-7017: Fixed forwarded credential headers to cross-origin redirect targets (bsc#1271020)
Caller-supplied Authorization, Cookie, and Proxy-Authorization headers are now stripped on cross-origin redirects by default. Use allowcredentialedredirects to opt out.
Redirects are no longer automatically followed when going from https to http. Use allow_downgrade to revert to the original behaviour.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.096-bp160.1.1

{
    "binaries": [
        {
            "perl-HTTP-Tiny": "0.096-bp160.1.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21529-1.json"