-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Aug 2026 11:53:55 +0300 Source: perl Binary: libperl-dev libperl5.40 perl perl-base perl-debug Architecture: i386 Version: 5.40.1-6+deb13u1 Distribution: trixie Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Niko Tyni Description: libperl-dev - Perl library: development files libperl5.40 - shared Perl library perl - Larry Wall's Practical Extraction and Report Language perl-base - minimal Perl system perl-debug - debug-enabled Perl interpreter Closes: 1137345 1138854 1138855 1138856 1138858 1138859 1138860 1138863 1138905 1138906 1140152 1141639 1142037 Changes: perl (5.40.1-6+deb13u1) trixie; urgency=medium . * [SECURITY] various upstream fixes: + CVE-2026-7017: HTTP::Tiny credential forwarding on redirects. (Closes: #1141639) + CVE-2026-42496: Archive::Tar symlink extraction. (Closes: #1138860) + CVE-2026-42497: Archive::Tar hardlink extraction. (Closes: #1138859) + CVE-2026-12087: Socket: pack_ip_mreq_source() out-of-bounds heap read. (Closes: #1140152) + CVE-2026-13221: silently incorrect regular expression matches. (Closes: #1142037) + CVE-2025-15649: header parsing in IO::Uncompress::Unzip. (Closes: #1138863) + CVE-2026-7010: CRLF-validation in HTTP::Tiny. (Closes: #1138858) + CVE-2026-8376: Buffer overflow in Perl_study_chunk. (Closes: #1137345) + CVE-2026-48959: CPU exhaustion in IO::Uncompress::Unzip. (Closes: #1138856) + CVE-2026-48961: crash in zipdetails. (Closes: #1138855) + CVE-2026-48962: code execution in IO-Compress via output globs. (Closes: #1138854) + CVE-2026-57432: out of bound heap reads in pack() and unpack(). (Closes: #1138905) + CVE-2026-57433: signed integer overflow in Storable. (Closes: #1138906) Checksums-Sha1: 6cf57af27ccf2b353624eb00161a95c91dc250f0 1220504 libperl-dev_5.40.1-6+deb13u1_i386.deb 88fef81488857f70a0d231f596c5793768d7e6d0 3956432 libperl5.40_5.40.1-6+deb13u1_i386.deb ccfe172dd0e30ee7cf56f73d7e63b0a9d6c93939 1769888 perl-base_5.40.1-6+deb13u1_i386.deb f09130bd392adb466cc1729cecf5a2ba60ef4e50 12495480 perl-debug_5.40.1-6+deb13u1_i386.deb cc440276e2fec7f6f93dc63c5662dd692e0b3649 7056 perl_5.40.1-6+deb13u1_i386-buildd.buildinfo 2b9f9d0bd2cfe51e582dc4564879395fcac33cd8 267732 perl_5.40.1-6+deb13u1_i386.deb Checksums-Sha256: 39f9df9fcf91188a86748ae5ba3c84d92b147cb833b9505a4a8b61fd7bcdd47c 1220504 libperl-dev_5.40.1-6+deb13u1_i386.deb 2fb2c29ff81d58426a2e9654ddee15398ebd6a624c6aa8d27bde388aa25c67df 3956432 libperl5.40_5.40.1-6+deb13u1_i386.deb b96b326dcecd566b561e180a4bda34c52939a5807c5fd41e393b5ea2a8472836 1769888 perl-base_5.40.1-6+deb13u1_i386.deb 61c30f50828a13d919f3f9da25ccc256498712e56862db6b9fbdb7edb5781b71 12495480 perl-debug_5.40.1-6+deb13u1_i386.deb 678ae804503030c083b2bf84e58433abedb64fcf31f9e57ca9c2d81baebbcc4a 7056 perl_5.40.1-6+deb13u1_i386-buildd.buildinfo 778b212723f4e7115ec059232e0dd61465d798fc2e7e7f02d08b220b3bfb7ce7 267732 perl_5.40.1-6+deb13u1_i386.deb Files: 392501c52a7e355020e9e6e3452fbb13 1220504 libdevel optional libperl-dev_5.40.1-6+deb13u1_i386.deb d74162de930bb1f47c4429aca50b0950 3956432 libs optional libperl5.40_5.40.1-6+deb13u1_i386.deb 03c916a808b116942f79b9df19789e6e 1769888 perl required perl-base_5.40.1-6+deb13u1_i386.deb 7867fa789cda678356ef6bb79d661982 12495480 devel optional perl-debug_5.40.1-6+deb13u1_i386.deb 5ddc7875839319ad182a26837a76784e 7056 perl standard perl_5.40.1-6+deb13u1_i386-buildd.buildinfo 3a60bbe159045682085b99ebf814ef39 267732 perl standard perl_5.40.1-6+deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmqZNbIACgkQbheoBegw XLKQxQ/8DQaJbjQn6Zxzt6POdIsCVxOYEO349T45UnP+Xy/rCVESMm2dp/pkyNeZ 2mlOshSRCWLVEAoKRd312gMszUoDZ5D4xt1CeARe819SKF7vGQOWSv/kMJQv6/7y Kd8d3ke1dnUuVXdTvrb+dFx1LSY4F/vFbCveT/DZSQH4qv8HyWu7kpbMN9iU6sjX Mgclu8f6UIDEFC5hyLNgh3xf0TKYqe0bigd5zKDj2QvNPBf5tKJBCO3ZeuAP0UJI GhD6bmRQaH1EeHRWmysRlDQc158UHzyhAIIUh6y1n7M0L0xcsJOLx4B8asj1UfgU b43yCi0jJKjR1Of6JV+aCcEPpHOLQYyyaE4hY6Fdyw+JGxZY0fBbftqr3NyJTIHY iBnpBLILEKIDq1jom8NstrwNiq6rovxfKH/ttV3lHY/e0FXpojhf7nsvZXe3Dfhk ZFahSpcKfS0m5XIYpSF+6Wmyze/FwP76iNBli3/75Ct8jEG/rYQiA/aQcHekx7pZ dAznzv01Nucf25I0KAwQVnmbPZV8HappXj+DIaOZOdKqRwDDDAa3BmP9O2WqlV9G yHYriQ91WdMPWD3JpFjUbo6RDuQezw7N5NoAfda5C3pl8L5QpS4OxCsh1XTDUKrL lNNKCAbERqII4RN/bZT9BdxJ+IrCCHTwCNuO9i/cIAx/9Ut9lck= =yJl7 -----END PGP SIGNATURE-----