rpm package
opensuse/perl-Date-Manip&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/perl-Date-Manip&distro=openSUSE%20Leap%2016.0
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-60075 | Hig | 7.5 | < 6.980.0-bp160.2.1 | 6.980.0-bp160.2.1 | Jul 30, 2026 | Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in _parse_time. _parse_time removes a time from anywhere in the string with the unanchored substitution `s/$timerx/ /`, where $timerx is an auto-generat | |
| CVE-2026-60074 | Hig | 7.5 | < 6.980.0-bp160.2.1 | 6.980.0-bp160.2.1 | Jul 30, 2026 | Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the `\d` shorthand, which on a character string matches the whole Unicode decimal digit p |
- affected < 6.980.0-bp160.2.1fixed 6.980.0-bp160.2.1
Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in _parse_time. _parse_time removes a time from anywhere in the string with the unanchored substitution `s/$timerx/ /`, where $timerx is an auto-generat
- affected < 6.980.0-bp160.2.1fixed 6.980.0-bp160.2.1
Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the `\d` shorthand, which on a character string matches the whole Unicode decimal digit p