-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Aug 2026 11:53:55 +0300 Source: perl Binary: libperl-dev libperl5.40 perl perl-base perl-debug Architecture: arm64 Version: 5.40.1-6+deb13u1 Distribution: trixie Urgency: medium Maintainer: arm64 Build Daemon (arm-conova-04) Changed-By: Niko Tyni Description: libperl-dev - Perl library: development files libperl5.40 - shared Perl library perl - Larry Wall's Practical Extraction and Report Language perl-base - minimal Perl system perl-debug - debug-enabled Perl interpreter Closes: 1137345 1138854 1138855 1138856 1138858 1138859 1138860 1138863 1138905 1138906 1140152 1141639 1142037 Changes: perl (5.40.1-6+deb13u1) trixie; urgency=medium . * [SECURITY] various upstream fixes: + CVE-2026-7017: HTTP::Tiny credential forwarding on redirects. (Closes: #1141639) + CVE-2026-42496: Archive::Tar symlink extraction. (Closes: #1138860) + CVE-2026-42497: Archive::Tar hardlink extraction. (Closes: #1138859) + CVE-2026-12087: Socket: pack_ip_mreq_source() out-of-bounds heap read. (Closes: #1140152) + CVE-2026-13221: silently incorrect regular expression matches. (Closes: #1142037) + CVE-2025-15649: header parsing in IO::Uncompress::Unzip. (Closes: #1138863) + CVE-2026-7010: CRLF-validation in HTTP::Tiny. (Closes: #1138858) + CVE-2026-8376: Buffer overflow in Perl_study_chunk. (Closes: #1137345) + CVE-2026-48959: CPU exhaustion in IO::Uncompress::Unzip. (Closes: #1138856) + CVE-2026-48961: crash in zipdetails. (Closes: #1138855) + CVE-2026-48962: code execution in IO-Compress via output globs. (Closes: #1138854) + CVE-2026-57432: out of bound heap reads in pack() and unpack(). (Closes: #1138905) + CVE-2026-57433: signed integer overflow in Storable. (Closes: #1138906) Checksums-Sha1: 5647dd0e19e7162b155364aa787240e04ab4deb0 1020872 libperl-dev_5.40.1-6+deb13u1_arm64.deb ec681b1c76ef9bc54fbea602bbf7777574d1a183 4137968 libperl5.40_5.40.1-6+deb13u1_arm64.deb caa6d98aac0fee39245d03f147aed9939e2ed4c7 1529152 perl-base_5.40.1-6+deb13u1_arm64.deb e75011beb9d65621c8e0643ce0b96935f6550ace 12812708 perl-debug_5.40.1-6+deb13u1_arm64.deb b382e52b34539cf79f56eca6516d590e10424bfc 7148 perl_5.40.1-6+deb13u1_arm64-buildd.buildinfo ca460ac8e1cc137984d8433c4ee82fd8df3ea02f 267732 perl_5.40.1-6+deb13u1_arm64.deb Checksums-Sha256: 141af4085ce44cb746fd2c6c146dd54ec9d7cb5bfb683d9c7830af3099737eb4 1020872 libperl-dev_5.40.1-6+deb13u1_arm64.deb b3cf688efb6096b2f3d95e96ad5b216602146ad11f792c1f3b2f66b5556241d9 4137968 libperl5.40_5.40.1-6+deb13u1_arm64.deb 4cee6f6b5b4b501d82118c56aa31bbefc2491415bc03a00e21bdacff2406b288 1529152 perl-base_5.40.1-6+deb13u1_arm64.deb b23678da73dbaaa5eb434c1677a2b60bb4806e9931362dfb320d9c6b651d6172 12812708 perl-debug_5.40.1-6+deb13u1_arm64.deb b5f88c7361a93ff9296d098846a31efa8fe3d858b585482962ed1b53b9a4db81 7148 perl_5.40.1-6+deb13u1_arm64-buildd.buildinfo 7f15c34267346a0da41b9fe36d509d70dfb8d39561d275c4f4c53d429290f6d2 267732 perl_5.40.1-6+deb13u1_arm64.deb Files: b70806cc2aa8f77c1af876d8bb4403b0 1020872 libdevel optional libperl-dev_5.40.1-6+deb13u1_arm64.deb e7e7d1d6415c3ef36e0ac94f73654935 4137968 libs optional libperl5.40_5.40.1-6+deb13u1_arm64.deb 385b51c61fa8fd05417a29444eb1f89e 1529152 perl required perl-base_5.40.1-6+deb13u1_arm64.deb 59fece3e85e1c66748d8469c5e68edd3 12812708 devel optional perl-debug_5.40.1-6+deb13u1_arm64.deb 13b8575c77c781e251d6f7b054364700 7148 perl standard perl_5.40.1-6+deb13u1_arm64-buildd.buildinfo c711b0e21d61aad215e3e7eb7dc091bd 267732 perl standard perl_5.40.1-6+deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgSZRd/+N1Ed3hy+mPMAxAOQQpzsFAmqYniwACgkQPMAxAOQQ pzu1whAAhEfDvB2ztBEn1vR+tD/hT8idzkZjTi71a6qPmo9+LEW6nJh58lBzB20T ULcKFLk15Kaz6hnUDwKueilof2UuU9sSGh2HkjjV/Qbftg0sOkCZ98b/akGpmOSx lRuQL6QCcYv2hQJe/diajO7esyqC5GsUcLwxbOZmsAxzKiWPvFOcYTSeyX2sPiB7 CNfK2YLB70ttTgPANyl8sXtWZ1GawVAFvq4MsxcwhY4LRO7MTGifEG7rONXZpeA8 eb8wjRar0/446Onu5KcGQYaplLHmlM++m0dfkoHpRe+9CTvPyOyHMTBMpkiWa1+B 5+GW/IEodQBA1qlxL1N5W/sdS+xA/JEBEJf713toAibELEt/nIRKBP0D2Axnu5J6 FOstSVsJIT8/B2glQV17/O6Exa8hrg0vaMxChh97Srca1iCHcgL1ST/fVp6DfNOH yWn9NSNFo5NBflM5C7sB8CRM0+OfEr41S8k9o0A3GHaueLtQ2NomNW1Jw0JDOxC+ xbeDWAf+TkxBGga60+j+ibBQgBFUZcIz+FanchHnT03aMhpcswK/Spyt5l2HV3Wb KcVcCEiSzq8zoSINXEZHSKGCB+WOxkE6ZKSke4+3y4/LUhqgCKIP5VdNGpun0tjN cq3NL6dO2zBfJK6Ay6m9o2/UQ/K9az1NqG0uw13WS5MvnqvrOAY= =5fZd -----END PGP SIGNATURE-----