Accepted perl 5.40.1-6+deb13u1 (source) into proposed-updates

Path	csiph.com!weretis.net!feeder8.news.weretis.net!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod
From	Debian FTP Masters <ftpmaster@ftp-master.debian.org>
Newsgroups	linux.debian.changes
Subject	Accepted perl 5.40.1-6+deb13u1 (source) into proposed-updates
Date	Wed, 02 Sep 2026 23:20:02 +0200
Message-ID	<Nz0xc-ePcS-27@gated-at.bofh.it> (permalink)
X-Original-To	debian-changes@lists.debian.org
X-Mailbox-Line	From debian-changes-request@lists.debian.org Wed Sep 2 21:17:26 2026
Old-Return-Path	<envelope@ftp-master.debian.org>
X-Spam-Flag	NO
X-Spam-Score	-107.99
X-Dak	dak process-policy
X-Debian	DAK
X-Debian-Package	perl
Debian	DAK
Debian-Changes	perl_5.40.1-6+deb13u1_source.changes
Debian-Source	perl
Debian-Version	5.40.1-6+deb13u1
Debian-Architecture	source
Debian-Suite	proposed-updates
Debian-Archive-Action	accept
MIME-Version	1.0
Content-Type	multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7765069989230529334=="
X-Debian-Message	from DAK
Reply-To	debian-devel@lists.debian.org
Mail-Followup-To	debian-devel@lists.debian.org
X-Mailing-List	<debian-changes@lists.debian.org> archive/latest/18954
List-ID	<debian-changes.lists.debian.org>
List-URL	<https://lists.debian.org/debian-changes/>
List-Archive	https://lists.debian.org/msgid-search/E1x1sKT-0000000FPFA-0PjW@fasolo.debian.org
Approved	robomod@news.nic.it
Lines	90
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Wed, 02 Sep 2026 21:17:09 +0000
X-Original-Message-ID	<E1x1sKT-0000000FPFA-0PjW@fasolo.debian.org>
Xref	csiph.com linux.debian.changes:14321

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384

Format: 1.8
Date: Sun, 30 Aug 2026 11:53:55 +0300
Source: perl
Architecture: source
Version: 5.40.1-6+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Niko Tyni <ntyni@debian.org>
Changed-By: Niko Tyni <ntyni@debian.org>
Closes: 1137345 1138854 1138855 1138856 1138858 1138859 1138860 1138863 1138905 1138906 1140152 1141639 1142037
Changes:
 perl (5.40.1-6+deb13u1) trixie; urgency=medium
 .
   * [SECURITY] various upstream fixes:
     + CVE-2026-7017: HTTP::Tiny credential forwarding on redirects.
         (Closes: #1141639)
     + CVE-2026-42496: Archive::Tar symlink extraction.
         (Closes: #1138860)
     + CVE-2026-42497: Archive::Tar hardlink extraction.
         (Closes: #1138859)
     + CVE-2026-12087: Socket: pack_ip_mreq_source() out-of-bounds heap read.
         (Closes: #1140152)
     + CVE-2026-13221: silently incorrect regular expression matches.
         (Closes: #1142037)
     + CVE-2025-15649: header parsing in IO::Uncompress::Unzip.
         (Closes: #1138863)
     + CVE-2026-7010:  CRLF-validation in HTTP::Tiny.
         (Closes: #1138858)
     + CVE-2026-8376:  Buffer overflow in Perl_study_chunk.
         (Closes: #1137345)
     + CVE-2026-48959: CPU exhaustion in IO::Uncompress::Unzip.
         (Closes: #1138856)
     + CVE-2026-48961: crash in zipdetails.
         (Closes: #1138855)
     + CVE-2026-48962: code execution in IO-Compress via output globs.
         (Closes: #1138854)
     + CVE-2026-57432: out of bound heap reads in pack() and unpack().
          (Closes: #1138905)
     + CVE-2026-57433: signed integer overflow in Storable.
          (Closes: #1138906)
Checksums-Sha1:
 735f1a33e381a4037b22f895726d2ffce281b39a 2404 perl_5.40.1-6+deb13u1.dsc
 1c181a089b69ccda8f7adce847dd5d8984e247a7 186360 perl_5.40.1-6+deb13u1.debian.tar.xz
 ea71ff39ab625af81797eabf49136bbde5cba4d6 5370 perl_5.40.1-6+deb13u1_source.buildinfo
Checksums-Sha256:
 92d1cfb32167d77fada7284f1c291de72f93eb896f5cfd58247d020182b403a8 2404 perl_5.40.1-6+deb13u1.dsc
 5ee76db601d6f4638433ab9b0f5bd5cfb15b102a79d902ff282e762becb7e724 186360 perl_5.40.1-6+deb13u1.debian.tar.xz
 1d89f7d92719f484d03265fcb34f83604a133e8881dd316e5d0f3d5f123fc556 5370 perl_5.40.1-6+deb13u1_source.buildinfo
Files:
 7a19d8c54c89ea059a709d4aaa11ddef 2404 perl standard perl_5.40.1-6+deb13u1.dsc
 25a497217f31c1bd9abec448d442a144 186360 perl standard perl_5.40.1-6+deb13u1.debian.tar.xz
 d4d9e67ab46dd7c539b74461b14e7aa5 5370 perl standard perl_5.40.1-6+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iKcEARMJAC8WIQTuZv2Xfg2x/uVxefeK/rNkDrE5sgUCaphfzREcbnR5bmlAZGVi
aWFuLm9yZwAKCRCK/rNkDrE5sgacAYCoZbN23QhO+v2JfNcanwF/DXR/IxDBIVbz
wr0rQgPWbzmq5KXCXgA4BZ/Wp5+unkQBf1v9bOahz673IgWB1C/XGwZ7jUDHEVcJ
yxs3NFuIerDHvhsPIkaDw83nFiQsm/BdeQ==
=xXL0
-----END PGP SIGNATURE-----

Back to linux.debian.changes | Previous | Next | Find similar | Unroll thread

Thread

Accepted perl 5.40.1-6+deb13u1 (source) into proposed-updates Debian FTP Masters <ftpmaster@ftp-master.debian.org> - 2026-09-02 23:20 +0200

csiph-web