Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

perl-Net-CIDR-Lite Security Update: IP Address Bypass

published 5 months ago

Summary

A security update is available for perl-Net-CIDR-Lite, a software library used to work with IP addresses. If not updated, this could allow unauthorized access to your network. We recommend updating to the latest version to ensure the security of your network.

Original advisory text

Security update for perl-Net-CIDR-Lite

This update for perl-Net-CIDR-Lite fixes the following issues

- CVE-2026-45190: improper validation of trailing newlines or non-ASCII digits can lead to IP ACL bypass (bsc#1264710).
- CVE-2026-45191: extraneous leading zeros in CIDR mask values can lead to IP ACL bypass (bsc#1264709).
- CVE-2026-40198: missing validation for the IPv6 group count can lead to IP ACL bypass (bsc#1262088).
- CVE-2026-40199: mishandled IPv4 mapped IPv6 addresses can lead to IP ACL bypass (bsc#1262088).

References

https://www.suse.com/support/update/announcement/2026/suse-su-20262113-1/ Vendor Advisory
https://bugzilla.suse.com/1262088 Third Party Advisory
https://bugzilla.suse.com/1264709 Third Party Advisory
https://bugzilla.suse.com/1264710 Third Party Advisory
https://www.suse.com/security/cve/CVE-2026-40198 URL
https://www.suse.com/security/cve/CVE-2026-40199 URL
https://www.suse.com/security/cve/CVE-2026-45190 URL
https://www.suse.com/security/cve/CVE-2026-45191 URL

Timeline

Published29 May 2026

Updated30 May 2026

First seen30 May 2026

Sources

SUSE-SU-2026:2113-1 · OSV

Track software like this

Free during beta