Packages / Alpine Linux 3.21 / perl-cgi-session

Package: perl-cgi-session (4.48-r5)

perl module for persistent session data in CGI applications

Other Packages Related to perl-cgi-session:

dep: [perl]
Larry Wall's Practical Extraction and Report Language

Download perl-cgi-session

Architecture	Package size	Installed size	Files	Package
aarch64	44 KiB	143 KiB	list of files	Not published
x86_64	44 KiB	143 KiB	list of files	Not published

Package-file coverage (not observed)

The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.

No package-associated file paths were observed for the displayed build metadata.

Field source: Alpine Linux 3.21 main aarch64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Alpine Linux 3.21 in the browser Build an image that includes perl-cgi-session

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
4.48-r5	v3.21 / main	aarch64	Alpine Linux 3.21 · main · aarch64	44 KiB	143 KiB	Not reported
4.48-r5	v3.21 / main	x86_64	Alpine Linux 3.21 · main · x86_64	44 KiB	143 KiB	Not reported

Field source: Alpine Linux 3.21 main aarch64

Known vulnerabilities

CVE Severity Version impact

CVE	Severity	Version impact
[CVE-2026-56016] Published: Jul 1, 2026, 12:00:00 AM UTC CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generate_id method builds the session id from a MD5 digest of the process id, the ep	High(7.4)	Unknown Details (2) `4.48-r5` · aarch64 · v3.21 Unknown · Fixed: `4.49-r0` Version impact unknown pypi · perl-cgi-session · alpine · 3.24 `4.48-r5` · x86_64 · v3.21 Unknown · Fixed: `4.49-r0` Version impact unknown pypi · perl-cgi-session · alpine · 3.24

[CVE-2026-56016]

Published: Jul 1, 2026, 12:00:00 AM UTC

CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generate_id method builds the session id from a MD5 digest of the process id, the ep

High(7.4)

Unknown

Details (2)

4.48-r5 · aarch64 · v3.21
Unknown · Fixed: 4.49-r0
Version impact unknown
pypi · perl-cgi-session · alpine · 3.24
4.48-r5 · x86_64 · v3.21
Unknown · Fixed: 4.49-r0
Version impact unknown
pypi · perl-cgi-session · alpine · 3.24

Last synced: Oct 30, 2026, 5:28:58 PM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

4.48-r5 / aarch64Observed Sep 1, 2026apk-checksum Q1hWTgIkwrv8…HFFm4Oc=Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (apk-checksum): Q1hWTgIkwrv82YMPjz9R/THFFm4Oc=

Field source: Alpine Linux 3.21 main aarch64

4.48-r5 / x86_64Observed Sep 1, 2026apk-checksum Q1dxnF9H/J56…mNBU4Ow=Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (apk-checksum): Q1dxnF9H/J56G8nqbuzwR0mNBU4Ow=

Field source: Alpine Linux 3.21 main x86_64

Sources

Alpine Linux 3.21 main aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
v3-21-main-aarch64:0bfada7396542aedf9b36ce973478a7454b364e1ef3b199e425ebd177204bbd9
Repository-signature verification record
Signed-object SHA-256
742699ce2fb72715ef61fdcf59d93061c609f5ac858daf0f7a1e286668228d3c
Keyring revision
alpine-aarch64
SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Alpine Linux 3.21 main x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
v3-21-main-x86-64:49a0d9e44922d1fe8a10e81c96033ba453a7303b441fba4a74a8166f795f63b6
Repository-signature verification record
Signed-object SHA-256
2762702c22e675442b2015e18f496051e4dc0331ee27b5f24f8cd34807574f06
Keyring revision
alpine-x86_64
SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026