-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Aug 2026 11:53:55 +0300 Source: perl Binary: libperl-dev libperl5.40 perl perl-base perl-debug Architecture: s390x Version: 5.40.1-6+deb13u1 Distribution: trixie Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Niko Tyni Description: libperl-dev - Perl library: development files libperl5.40 - shared Perl library perl - Larry Wall's Practical Extraction and Report Language perl-base - minimal Perl system perl-debug - debug-enabled Perl interpreter Closes: 1137345 1138854 1138855 1138856 1138858 1138859 1138860 1138863 1138905 1138906 1140152 1141639 1142037 Changes: perl (5.40.1-6+deb13u1) trixie; urgency=medium . * [SECURITY] various upstream fixes: + CVE-2026-7017: HTTP::Tiny credential forwarding on redirects. (Closes: #1141639) + CVE-2026-42496: Archive::Tar symlink extraction. (Closes: #1138860) + CVE-2026-42497: Archive::Tar hardlink extraction. (Closes: #1138859) + CVE-2026-12087: Socket: pack_ip_mreq_source() out-of-bounds heap read. (Closes: #1140152) + CVE-2026-13221: silently incorrect regular expression matches. (Closes: #1142037) + CVE-2025-15649: header parsing in IO::Uncompress::Unzip. (Closes: #1138863) + CVE-2026-7010: CRLF-validation in HTTP::Tiny. (Closes: #1138858) + CVE-2026-8376: Buffer overflow in Perl_study_chunk. (Closes: #1137345) + CVE-2026-48959: CPU exhaustion in IO::Uncompress::Unzip. (Closes: #1138856) + CVE-2026-48961: crash in zipdetails. (Closes: #1138855) + CVE-2026-48962: code execution in IO-Compress via output globs. (Closes: #1138854) + CVE-2026-57432: out of bound heap reads in pack() and unpack(). (Closes: #1138905) + CVE-2026-57433: signed integer overflow in Storable. (Closes: #1138906) Checksums-Sha1: 13d5e6762092f5d9e2094a1dc483cfd5360d7657 1138880 libperl-dev_5.40.1-6+deb13u1_s390x.deb 81c4286a71ee130b8c25d53763917ad1d763f845 4281036 libperl5.40_5.40.1-6+deb13u1_s390x.deb 0e78aa0f9013571c953dc1fbec51cd48d776860c 1686344 perl-base_5.40.1-6+deb13u1_s390x.deb ec59a1d3925c2a7f0f2733c24a50d20933d4ecfe 13281828 perl-debug_5.40.1-6+deb13u1_s390x.deb 2522a4512d05bafc7df29374a95aab7290431e5d 7026 perl_5.40.1-6+deb13u1_s390x-buildd.buildinfo a9b5a7d9f6be1424de54a3be89e646e14e0a3c5d 267732 perl_5.40.1-6+deb13u1_s390x.deb Checksums-Sha256: 21226bccce4cec6ee5fa91a0cb402acfdc435feb8a9be94663292de82d03b618 1138880 libperl-dev_5.40.1-6+deb13u1_s390x.deb c604c64f84f7bae5c029ef455dbc1d3868a1b9a19c09391ca2e8b76e9691f0fe 4281036 libperl5.40_5.40.1-6+deb13u1_s390x.deb e30c769fa78030fed4f086fc66aed894b371599004c6f62168086fafb5e745d1 1686344 perl-base_5.40.1-6+deb13u1_s390x.deb b9491552f70d4349bffdf5cc89e1af7d72f70a12b53190c6931a948edc81316e 13281828 perl-debug_5.40.1-6+deb13u1_s390x.deb 05a368205158c6410a539ca885dae7422eeb1fd01b64e25bac2b7f9bb729559b 7026 perl_5.40.1-6+deb13u1_s390x-buildd.buildinfo 6c66d53bd975cda7a4afcaf48016683e7434694ad35a223ce0ac84866bf03f70 267732 perl_5.40.1-6+deb13u1_s390x.deb Files: 4b271234918c839532f7bd6e5e07a56e 1138880 libdevel optional libperl-dev_5.40.1-6+deb13u1_s390x.deb ce6968c8d93456fbf9f96f1d66fda6ee 4281036 libs optional libperl5.40_5.40.1-6+deb13u1_s390x.deb 239dc0cc48c08c7e27e4f96f3769a9ca 1686344 perl required perl-base_5.40.1-6+deb13u1_s390x.deb 1695fc78e2ab9d87f159d586e64a3066 13281828 devel optional perl-debug_5.40.1-6+deb13u1_s390x.deb 1dd5ce89dec0055cce1296479d03b9e3 7026 perl standard perl_5.40.1-6+deb13u1_s390x-buildd.buildinfo 08b00435818b3e60c5aaea143262da47 267732 perl standard perl_5.40.1-6+deb13u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfUKc1SwkyxlVJBiWHOd5r2LlPicFAmqYtWgACgkQHOd5r2Ll PicNeA/+N3Ydj24wlwoTuhuEXuIXbej06B71tRY95rG0HZgMhOehzFBd03oIjRdp meVltg8FR6xOr6uy2sWAvCp/UEgbC30hH+2w98u5HcdgpBuZwG17rtBtDjPwjKfW NdcWRfwfvXnhIwDVDan6UnFVcVYjKx9PaCQG1LFOT1cImXT+JlPVKBap11fO5mPk xLLXjcrd4lsSrslcVUtfXXpYBdIWH2zzC9HJkQjSX6gFHLmqPsm/e++iwgRafZ5b UOjMmjrdyeAs1D7gmLtT0zLh7fDgcDE/zT86BrvLtPSVlhwzdU558sMuAWnyNpAU FnQ3zdG6L5HdpV+yNaDCjQDFbsc/0z1U/7ywvl5jL4uFZ2rENH7a6dfIXFV32gOx UkYSSK6wn3TV7pnXLsPDDRKHz21YCOLquNS2hhgh0aoSQZFUwv98Ju3I/afZd2qw SQm8QqbkIPVRJn/2cPF3Cunz0yBRiQ0axhSfwru93bDQLUaC2BJdA1GD2Kq3I+cj lvi3iuRMFwfamx1vzEvbX18lffPbl9qBDHxLT0ylfEavY7RNTEM2JIpUkWDIxfgy 5pSzLLAnmShFL3tOXNG8Ntp6vaVOdd1OZ8sdb5NkPCEiZ2/MMPLhXAhAQytG+7+N 9h81re3LJqwYLeYYxR41/6bgqcm6cpTlOqw6tZx4q93Mg1HGClo= =Gl/Q -----END PGP SIGNATURE-----