Back Linuxsecurity Fedora 44 perl-Dancer2 Important Session ID Update FEDORA-2026
Artifactory Alert: Chained flaws let attackers gain admin control. Check your version now ×
Dancer2 is the new generation of Dancer, the lightweight web-framework for
Perl. It is a complete rewrite based on Moo and is meant to be easy and fun.
Dancer2 générates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there.
* Sun Sep 6 2026 Emmanuel Seyman - 2.0.1-4 - Add CSPRNG modules as Requires, fixes CVE-2026-13577 (#2509105)
* Sun Sep 6 2026 Emmanuel Seyman - 2.0.1-4 - Add CSPRNG modules as Requires, fixes CVE-2026-13577 (#2509105)
[ 1 ] Bug #2509105 - CVE-2026-13577 perl-Dancer2: Dancer2: Predictable session IDs allow system access [fedora-all]
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-d13a2593b1' at the command line. For more information, refer to the dnf documentation available at
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
