News · via oss-security
CVE-2026-123776: RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset(), , so a FIFO or device path blocks the CGI process
Posted by Robert Rothenberg on Nov 07 CVE-2026-123776 CPAN Security Group CVE ID: CVE-2026-123776 Distribution: RRD-CGI-Image Versions: through 0.01 MetaCPAN: https://metacpan.org/dist/RRD-CGI-Image…