-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 31 Aug 2026 17:20:53 +0200
Source: libio-compress-perl
Binary: libio-compress-perl
Architecture: all
Version: 2.213-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: gregor herrmann <gregoa@debian.org>
Description:
 libio-compress-perl - bundle of IO::Compress modules
Closes: 1138051 1138052 1138055 1146065
Changes:
 libio-compress-perl (2.213-1+deb13u1) trixie; urgency=medium
 .
   * [Security] CVE-2025-15649: header parsing in IO::Uncompress::Unzip.
     (Closes: #1146065)
   * [Security] CVE-2026-48959: CPU exhaustion in IO::Uncompress::Unzip.
     (Closes: #1138051)
   * [Security] CVE-2026-48961: crash in zipdetails.
     (Closes: #1138052)
   * [Security] CVE-2026-48962: code execution in IO-Compress via output
     globs.
     (Closes: #1138055)
   * Add debian/source/include-binaries for CVE-2025-15649 test case.
Checksums-Sha1:
 55c897fc27d33b5cab3e22975a099d9197b456a8 5814 libio-compress-perl_2.213-1+deb13u1_all-buildd.buildinfo
 8c3b9d29a2a1d1084e95357574be75f1d981fd7e 282668 libio-compress-perl_2.213-1+deb13u1_all.deb
Checksums-Sha256:
 24633aca3663b4de36363e321767c4080de1569d1f574e3cdd4ce96d2a6b0770 5814 libio-compress-perl_2.213-1+deb13u1_all-buildd.buildinfo
 fd9996474c26414a28f8261db1cdf330d0f64d01351110c798191385847c7072 282668 libio-compress-perl_2.213-1+deb13u1_all.deb
Files:
 fc0f69731d6f92fa32b316cd53a6ed3e 5814 perl optional libio-compress-perl_2.213-1+deb13u1_all-buildd.buildinfo
 3e1aec09338fdc97e4d356ba0839cb24 282668 perl optional libio-compress-perl_2.213-1+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=qE39
-----END PGP SIGNATURE-----