-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Aug 2026 11:53:55 +0300 Source: perl Binary: libperl-dev libperl5.40 perl perl-base perl-debug Architecture: armel Version: 5.40.1-6+deb13u1 Distribution: trixie Urgency: medium Maintainer: armel Build Daemon (arm-conova-02) Changed-By: Niko Tyni Description: libperl-dev - Perl library: development files libperl5.40 - shared Perl library perl - Larry Wall's Practical Extraction and Report Language perl-base - minimal Perl system perl-debug - debug-enabled Perl interpreter Closes: 1137345 1138854 1138855 1138856 1138858 1138859 1138860 1138863 1138905 1138906 1140152 1141639 1142037 Changes: perl (5.40.1-6+deb13u1) trixie; urgency=medium . * [SECURITY] various upstream fixes: + CVE-2026-7017: HTTP::Tiny credential forwarding on redirects. (Closes: #1141639) + CVE-2026-42496: Archive::Tar symlink extraction. (Closes: #1138860) + CVE-2026-42497: Archive::Tar hardlink extraction. (Closes: #1138859) + CVE-2026-12087: Socket: pack_ip_mreq_source() out-of-bounds heap read. (Closes: #1140152) + CVE-2026-13221: silently incorrect regular expression matches. (Closes: #1142037) + CVE-2025-15649: header parsing in IO::Uncompress::Unzip. (Closes: #1138863) + CVE-2026-7010: CRLF-validation in HTTP::Tiny. (Closes: #1138858) + CVE-2026-8376: Buffer overflow in Perl_study_chunk. (Closes: #1137345) + CVE-2026-48959: CPU exhaustion in IO::Uncompress::Unzip. (Closes: #1138856) + CVE-2026-48961: crash in zipdetails. (Closes: #1138855) + CVE-2026-48962: code execution in IO-Compress via output globs. (Closes: #1138854) + CVE-2026-57432: out of bound heap reads in pack() and unpack(). (Closes: #1138905) + CVE-2026-57433: signed integer overflow in Storable. (Closes: #1138906) Checksums-Sha1: bb5cd1f6da4a015ab5a08d466a497a370f9cbeae 980740 libperl-dev_5.40.1-6+deb13u1_armel.deb fd27a43cc4f31c8b609db451e4530c506b9c8d81 3592664 libperl5.40_5.40.1-6+deb13u1_armel.deb 65263f8a5dc1976db9cc32f01794e9f5a45b2682 1488572 perl-base_5.40.1-6+deb13u1_armel.deb b16d83cc412b36103b06286f063da80c41130cfb 12611088 perl-debug_5.40.1-6+deb13u1_armel.deb 2f24e900056233ae42ec13ba64e3aee16d0c39a1 7013 perl_5.40.1-6+deb13u1_armel-buildd.buildinfo bc9532a088b1b3c66fdd67aa434b176c7ee6a712 267732 perl_5.40.1-6+deb13u1_armel.deb Checksums-Sha256: 52cfd458e87f8b38c6c72672a1eadabc6f717426ec4744ea11ad7b8482e3e353 980740 libperl-dev_5.40.1-6+deb13u1_armel.deb 52532b04fc31c081341317e580795b660df92463d72443f9da04da1509d0ee68 3592664 libperl5.40_5.40.1-6+deb13u1_armel.deb 91ca7856c041b0020718e020c3c0568ea94aa3d0c7e490345e488cf23556c727 1488572 perl-base_5.40.1-6+deb13u1_armel.deb d1262813d306966f863d13d4d00aeb4acbe8e0356dac71a51d3e9c9403cdd02f 12611088 perl-debug_5.40.1-6+deb13u1_armel.deb f93b084b06152dd64eba187ecc7fabf3c6829321c6a6df31e7aabd2e750d360c 7013 perl_5.40.1-6+deb13u1_armel-buildd.buildinfo bfcd3fac37472959bc17d3046080371f283d6b7eab442fc14813b0bb467b3211 267732 perl_5.40.1-6+deb13u1_armel.deb Files: 859255cf46dd1db288991054b73ed855 980740 libdevel optional libperl-dev_5.40.1-6+deb13u1_armel.deb 044389ec0e26a15c3ab2cf0f82f3e981 3592664 libs optional libperl5.40_5.40.1-6+deb13u1_armel.deb 8bfe4e656e1da89ce1feee0deab68983 1488572 perl required perl-base_5.40.1-6+deb13u1_armel.deb 4477a11ca4bb9a3e3ffd9d7e438c0cd1 12611088 devel optional perl-debug_5.40.1-6+deb13u1_armel.deb a273f586995842481a466ca65c2cbca4 7013 perl standard perl_5.40.1-6+deb13u1_armel-buildd.buildinfo 9ff93e8cfa65b5defe3034f0798c9aaf 267732 perl standard perl_5.40.1-6+deb13u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEa5s+5E+WDkV2pQjwIyDMsRzdi8EFAmqYn6QACgkQIyDMsRzd i8GVaQ/8CDpum4zfIHnzMwf0R4R55mCv2/Et2CxybLsLAIqbktzBkaSGxNWjXgV/ p10u4ApO16rRIT2yLsDczTSrgmTHG4ThqHp9hT/VUaCWoZUQzIXhyLUU/7TzUBnw tGfsWkozHvHWKfg3BrJx7lHZ01yhHOar1pQdqbgu9X67n6+VUQogX6oTcisHR+t3 VGTIhUcIJ8kn7Ecjw7CmggDlGbFoBXtxZHMd2YV+vAAKx4agFYQ6HLyaz4slbYtj fITqFUPRCRCauPQWO2s+gOfPKsEFosaKc0h1/mdpIzn2C7wWJ3zdOMprtzKkeKcM ttqSWNp9mr+GYLIqYhoueeX2f53QiEk4F71IgNyMcIdM5l+5/IDDWLu2H1518NcA rf7VD0aNIesGEK1nP40YCN5K6VsVTY2RW5Xxu0h2gWKuGUQZ9UmDNGcxEvzBZCJQ XYqSRMkv0FVxySVHBh/aNgf693TijfLgG5C9OwalZUbj95QrieBvGFY2zCB1lWcL QCIwu39+ep33X9fCiCn/ZQtbSaDmUqDalGYy0BD7vUP+jibBFLroHfEeWXynNQBP ncKkCcLqQG/L1CIuZOOUOJz6NlWmGWAtilE5ml1Dn6iwgrbEqfCbQN0sVHCJj4h6 QdXbQarYyFqxRq5EASszacdOzrn8Nyd0QGWAZZFv+oF9++jbQaY= =R5WJ -----END PGP SIGNATURE-----