-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 30 Aug 2026 11:53:55 +0300
Source: perl
Binary: perl-doc perl-modules-5.40
Architecture: all
Version: 5.40.1-6+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Niko Tyni <ntyni@debian.org>
Description:
 perl-doc   - Perl documentation
 perl-modules-5.40 - Core Perl modules
Closes: 1137345 1138854 1138855 1138856 1138858 1138859 1138860 1138863 1138905 1138906 1140152 1141639 1142037
Changes:
 perl (5.40.1-6+deb13u1) trixie; urgency=medium
 .
   * [SECURITY] various upstream fixes:
     + CVE-2026-7017: HTTP::Tiny credential forwarding on redirects.
         (Closes: #1141639)
     + CVE-2026-42496: Archive::Tar symlink extraction.
         (Closes: #1138860)
     + CVE-2026-42497: Archive::Tar hardlink extraction.
         (Closes: #1138859)
     + CVE-2026-12087: Socket: pack_ip_mreq_source() out-of-bounds heap read.
         (Closes: #1140152)
     + CVE-2026-13221: silently incorrect regular expression matches.
         (Closes: #1142037)
     + CVE-2025-15649: header parsing in IO::Uncompress::Unzip.
         (Closes: #1138863)
     + CVE-2026-7010:  CRLF-validation in HTTP::Tiny.
         (Closes: #1138858)
     + CVE-2026-8376:  Buffer overflow in Perl_study_chunk.
         (Closes: #1137345)
     + CVE-2026-48959: CPU exhaustion in IO::Uncompress::Unzip.
         (Closes: #1138856)
     + CVE-2026-48961: crash in zipdetails.
         (Closes: #1138855)
     + CVE-2026-48962: code execution in IO-Compress via output globs.
         (Closes: #1138854)
     + CVE-2026-57432: out of bound heap reads in pack() and unpack().
          (Closes: #1138905)
     + CVE-2026-57433: signed integer overflow in Storable.
          (Closes: #1138906)
Checksums-Sha1:
 3b5334e10f11878912f51c42feade907e98fa9c5 8252940 perl-doc_5.40.1-6+deb13u1_all.deb
 c2434b7c6d75e490cbf036fce4d99970f50ce44f 3013728 perl-modules-5.40_5.40.1-6+deb13u1_all.deb
 75b634facf9f4c319e91529183fa7a3d6203ce4d 6317 perl_5.40.1-6+deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 5199f0a0432ac3fac48d6e6a9e3a216d17977a49deff77dbdb958716fbe29b0c 8252940 perl-doc_5.40.1-6+deb13u1_all.deb
 4c46cdd8f3135aa1c95f07e817f8e5d9be590687441ac1c27e3a8c49400f35ce 3013728 perl-modules-5.40_5.40.1-6+deb13u1_all.deb
 18bfdc1d1183d4a7d9bd70c59597f89c91b493e6e2dd2fd3fb2fb06ea15b8d41 6317 perl_5.40.1-6+deb13u1_all-buildd.buildinfo
Files:
 b70c083c4edc5645a1f6de1103c7c69f 8252940 doc optional perl-doc_5.40.1-6+deb13u1_all.deb
 8898e8a6ac5bd932c35e473dcc36c0a0 3013728 libs optional perl-modules-5.40_5.40.1-6+deb13u1_all.deb
 5706e070042571a24c364f9690fa0b3f 6317 perl standard perl_5.40.1-6+deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=WKnz
-----END PGP SIGNATURE-----