Security update for perl-HTTP-Tiny
This update for perl-HTTP-Tiny fixes the following issues: Changes in perl-HTTP-Tiny: - updated to 0.094 0.094 - No changes from 0.093-TRIAL 0.093 - fix to prevent invalid characters in all headers, and prevent header smuggling (CVE-2026-7010) bsc#1264992 - updated to 0.092 0.092 - No changes from 0.091-TRIAL 0.091 [ADDED] - Added keep_alive_timeout to force keepalive connections to be closed based on a timeout. [CHANGED] - Optional tests are always required when releasing. - Always use TCP_NODELAY option. [FIXED] - Fixed test incorrectly testing cookie jar interactions multiple times. - Fixed perl version comparisons to work when not starting with 5. - Fixed link to LIMITATIONS in documentation. - updated to 0.090 0.090 - No changes from 0.089-TRIAL 0.089 [CHANGED] - Find the certificate bundle via IO::Socket::SSL rather than implementing it in HTTP::Tiny. - When encoding form data, given a hashref with an arrayref value, preserve the order of the values in the arrayref rather than sorting. [DOCS] - Fixed internal link to "TLS/SSL SUPPORT" section
Security update for perl-HTTP-Tiny
Description
This update for perl-HTTP-Tiny fixes the following issues: Changes in perl-HTTP-Tiny: - updated to 0.094 0.094 - No changes from 0.093-TRIAL 0.093 - fix to prevent invalid characters in all headers, and prevent header smuggling (CVE-2026-7010) bsc#1264992 - updated to 0.092 0.092 - No changes from 0.091-TRIAL 0.091 [ADDED] - Added keep_alive_timeout to force keepalive connections to be closed based on a timeout. [CHANGED] - Optional tests are always required when releasing. - Always use TCP_NODELAY option. [FIXED] - Fixed test incorrectly testing cookie jar interactions multiple times. - Fixed perl version comparisons to work when not starting with 5. - Fixed link to LIMITATIONS in documentation. - updated to 0.090 0.090 - No changes from 0.089-TRIAL 0.089 [CHANGED] - Find the certificate bundle via IO::Socket::SSL rather than implementing it in HTTP::Tiny. - When encoding form data, given a hashref with an arrayref value, preserve the order of the values in the arrayref rather than sorting. [DOCS] - Fixed internal link to "TLS/SSL SUPPORT" section
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:20792-1
- Cve Count
- 1
Threat ID: 6aab498355bf5e2cf5990ed7
Added to database: 09/17/2026, 01:59:31 UTC
Last updated: 09/17/2026, 01:59:31 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.