Packages / Alpine Linux 3.22 / perl-cgi-session-doc

Package: perl-cgi-session-doc (4.48-r5)

perl module for persistent session data in CGI applications (documentation)

Download perl-cgi-session-doc

Architecture	Package size	Installed size	Files	Package
aarch64	47 KiB	44 KiB	list of files	Not published
x86_64	47 KiB	44 KiB	list of files	Not published

Package-file coverage (not observed)

The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.

No package-associated file paths were observed for the displayed build metadata.

Field source: Alpine Linux 3.22 main aarch64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Alpine Linux 3.22 in the browser Build an image that includes perl-cgi-session-doc

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
4.48-r5	v3.22 / main	aarch64	Alpine Linux 3.22 · main · aarch64	47 KiB	44 KiB	Not reported
4.48-r5	v3.22 / main	x86_64	Alpine Linux 3.22 · main · x86_64	47 KiB	44 KiB	Not reported

Field source: Alpine Linux 3.22 main aarch64

Known vulnerabilities

CVE Severity Version impact

CVE	Severity	Version impact
[CVE-2026-56016] Published: Jul 1, 2026, 12:00:00 AM UTC CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generate_id method builds the session id from a MD5 digest of the process id, the ep	High(7.4)	Unknown Details (2) `4.48-r5` · aarch64 · v3.22 Unknown · Fixed: `4.49-r0` Version impact unknown pypi · perl-cgi-session · alpine · 3.24 `4.48-r5` · x86_64 · v3.22 Unknown · Fixed: `4.49-r0` Version impact unknown pypi · perl-cgi-session · alpine · 3.24

[CVE-2026-56016]

Published: Jul 1, 2026, 12:00:00 AM UTC

CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generate_id method builds the session id from a MD5 digest of the process id, the ep

High(7.4)

Unknown

Details (2)

4.48-r5 · aarch64 · v3.22
Unknown · Fixed: 4.49-r0
Version impact unknown
pypi · perl-cgi-session · alpine · 3.24
4.48-r5 · x86_64 · v3.22
Unknown · Fixed: 4.49-r0
Version impact unknown
pypi · perl-cgi-session · alpine · 3.24

Last synced: Oct 30, 2026, 8:43:57 PM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

4.48-r5 / aarch64Observed Sep 1, 2026apk-checksum Q1uLFniTaM58…zRxkikM=Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (apk-checksum): Q1uLFniTaM58fX4pgsIqIlzRxkikM=

Field source: Alpine Linux 3.22 main aarch64

4.48-r5 / x86_64Observed Sep 1, 2026apk-checksum Q1g5KwRIAUeY…4DkJWOo=Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (apk-checksum): Q1g5KwRIAUeYa7Jq567wPA4DkJWOo=

Field source: Alpine Linux 3.22 main x86_64

Sources

Alpine Linux 3.22 main aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
v3-22-main-aarch64:f7efc8df868dcf96e2967eddef971c9392967140dd67d9c47191c15c50a3a39c
Repository-signature verification record
Signed-object SHA-256
12ca41c385c88000f3a3938b88f1cabc3abde6337e6710b5082efd136aaa41a1
Keyring revision
alpine-aarch64
SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Alpine Linux 3.22 main x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
v3-22-main-x86-64:35b157e9e557438f32186c9ba618ea0dfac6c3ad3474aa79e594a9bc69accc38
Repository-signature verification record
Signed-object SHA-256
1801309d7e5cff21e4939aec4ff487cf7551ed3e52d8f89edd3115da11317a32
Keyring revision
alpine-x86_64
SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026