-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Aug 2026 11:53:55 +0300 Source: perl Binary: libperl-dev libperl5.40 perl perl-base perl-debug Architecture: riscv64 Version: 5.40.1-6+deb13u1 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-manda-01) Changed-By: Niko Tyni Description: libperl-dev - Perl library: development files libperl5.40 - shared Perl library perl - Larry Wall's Practical Extraction and Report Language perl-base - minimal Perl system perl-debug - debug-enabled Perl interpreter Closes: 1137345 1138854 1138855 1138856 1138858 1138859 1138860 1138863 1138905 1138906 1140152 1141639 1142037 Changes: perl (5.40.1-6+deb13u1) trixie; urgency=medium . * [SECURITY] various upstream fixes: + CVE-2026-7017: HTTP::Tiny credential forwarding on redirects. (Closes: #1141639) + CVE-2026-42496: Archive::Tar symlink extraction. (Closes: #1138860) + CVE-2026-42497: Archive::Tar hardlink extraction. (Closes: #1138859) + CVE-2026-12087: Socket: pack_ip_mreq_source() out-of-bounds heap read. (Closes: #1140152) + CVE-2026-13221: silently incorrect regular expression matches. (Closes: #1142037) + CVE-2025-15649: header parsing in IO::Uncompress::Unzip. (Closes: #1138863) + CVE-2026-7010: CRLF-validation in HTTP::Tiny. (Closes: #1138858) + CVE-2026-8376: Buffer overflow in Perl_study_chunk. (Closes: #1137345) + CVE-2026-48959: CPU exhaustion in IO::Uncompress::Unzip. (Closes: #1138856) + CVE-2026-48961: crash in zipdetails. (Closes: #1138855) + CVE-2026-48962: code execution in IO-Compress via output globs. (Closes: #1138854) + CVE-2026-57432: out of bound heap reads in pack() and unpack(). (Closes: #1138905) + CVE-2026-57433: signed integer overflow in Storable. (Closes: #1138906) Checksums-Sha1: ceb9574764d664f2284c667e1cc076996adaf10e 2699708 libperl-dev_5.40.1-6+deb13u1_riscv64.deb 79d7f53a42307c19158ddb7138248c10fd97d0cd 3948668 libperl5.40_5.40.1-6+deb13u1_riscv64.deb f1286f639579deb887e42eb9559075ffce8e7e27 1662696 perl-base_5.40.1-6+deb13u1_riscv64.deb 874cbbf237184daf9f5eecf842d010315e1d6620 12693052 perl-debug_5.40.1-6+deb13u1_riscv64.deb ec158ba0a39275c6a83df76959a1655172e38b3d 7126 perl_5.40.1-6+deb13u1_riscv64-buildd.buildinfo 49e358932bfbe7baaa767383135a072f68dc0f0e 267732 perl_5.40.1-6+deb13u1_riscv64.deb Checksums-Sha256: 54f1b612d483182c13aeff93dc1ea076a0d2aeab20a9fe16bd23e02a2a315b48 2699708 libperl-dev_5.40.1-6+deb13u1_riscv64.deb d6f2695a4d85edddb56059db0603aaa73b8fab4de6deb39f454147b61e9a6f59 3948668 libperl5.40_5.40.1-6+deb13u1_riscv64.deb bffbdfe9454265e4880d67b69e97777a82855ae8fa50e0347802ea077b027bca 1662696 perl-base_5.40.1-6+deb13u1_riscv64.deb 4c4a7501dfb13b24dbdc5807fb314ae47c81c79a1c498870150461f086bceebc 12693052 perl-debug_5.40.1-6+deb13u1_riscv64.deb 6bbb5d21e4122d75769c9c63ecaf62b60b3bfbbb60799aa499de83dac746e41b 7126 perl_5.40.1-6+deb13u1_riscv64-buildd.buildinfo 46f9cbc920d24960ae6b9f964bed72fdcf49ac6492ad80da79d1a2f9461974dd 267732 perl_5.40.1-6+deb13u1_riscv64.deb Files: f04085ca315b56f592598572b356b24d 2699708 libdevel optional libperl-dev_5.40.1-6+deb13u1_riscv64.deb e4576f6ce3599ab88145f9eb68767d9e 3948668 libs optional libperl5.40_5.40.1-6+deb13u1_riscv64.deb fa21a71f7946c07dc1e0065994782476 1662696 perl required perl-base_5.40.1-6+deb13u1_riscv64.deb c3a672f62416cebc74ad2ffe3d6e8f08 12693052 devel optional perl-debug_5.40.1-6+deb13u1_riscv64.deb 616e6c4934306ba7479228629b01650f 7126 perl standard perl_5.40.1-6+deb13u1_riscv64-buildd.buildinfo ad8727b362153f26c4bf5cdcf0915c52 267732 perl standard perl_5.40.1-6+deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwN+C+Bc8deN4UliX50ghctvtZFQFAmqYxo0ACgkQ50ghctvt ZFTzfQ//aQI+WOwv6Ghw8SayYy2k7jMmV+VsU0KpylHjX0BNwY9hpKSyOwiZfUvq +cUyGRNZ85xhItrnv7MLlJhKTcF2gcQVJkCfz1/7Tt0C1tezBxKG/I/nO9yj1Myx OLsT9NrtLKhPc3ijFJoOPIy0WHamJLvvA7LUEqgP7zSPreKIBjaCtHLqk0pTMNK6 sKUC489u50l9XW91f1Z0gmsw03zOo3592rSHFYY+q8Oh1yPgiTDX2Y5O8wIlKVTH yXekGjOCEE/S6o3zLJTPHIKwGIvci2qv4QEltEocHGfC1NFZ8Cz+3QJ8CYVRwYI0 XEEDUKXKofEcWeavKUjabarOXc0gKY+IFuQtVVYQzZ+ra6KGAU0SLgWUgxCkqdqq wSpMILhmYIjEeNNafAEQf+7MUdsXB7/LHDyFuY/nRIXKf2H194F8TB8NEsB53mg4 pC3iGi30GxcvZOq/RxXU4ljZaYgslxE4naf1KWgZRrNOusJS4s2GHtdCMQauHEEd D7zQD8/9GFYTXPqVfLr9Lp30WSKdmy6q1yGQaty0zkdtRKWvVC3dowkDT9raOB4N 70dLM1O64VIqXL2HcbXypxsyPlEi3nTMZ8ESyO14impWtylad0pljsQ13PgZgrpV ICVyaNwhpRckkeL15uy0wPEwMH3iY787dGzV2u6umts/C5U7KEg= =2el6 -----END PGP SIGNATURE-----