-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Aug 2026 11:53:55 +0300 Source: perl Binary: libperl-dev libperl5.40 perl perl-base perl-debug Architecture: ppc64el Version: 5.40.1-6+deb13u1 Distribution: trixie Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-conova-01) Changed-By: Niko Tyni Description: libperl-dev - Perl library: development files libperl5.40 - shared Perl library perl - Larry Wall's Practical Extraction and Report Language perl-base - minimal Perl system perl-debug - debug-enabled Perl interpreter Closes: 1137345 1138854 1138855 1138856 1138858 1138859 1138860 1138863 1138905 1138906 1140152 1141639 1142037 Changes: perl (5.40.1-6+deb13u1) trixie; urgency=medium . * [SECURITY] various upstream fixes: + CVE-2026-7017: HTTP::Tiny credential forwarding on redirects. (Closes: #1141639) + CVE-2026-42496: Archive::Tar symlink extraction. (Closes: #1138860) + CVE-2026-42497: Archive::Tar hardlink extraction. (Closes: #1138859) + CVE-2026-12087: Socket: pack_ip_mreq_source() out-of-bounds heap read. (Closes: #1140152) + CVE-2026-13221: silently incorrect regular expression matches. (Closes: #1142037) + CVE-2025-15649: header parsing in IO::Uncompress::Unzip. (Closes: #1138863) + CVE-2026-7010: CRLF-validation in HTTP::Tiny. (Closes: #1138858) + CVE-2026-8376: Buffer overflow in Perl_study_chunk. (Closes: #1137345) + CVE-2026-48959: CPU exhaustion in IO::Uncompress::Unzip. (Closes: #1138856) + CVE-2026-48961: crash in zipdetails. (Closes: #1138855) + CVE-2026-48962: code execution in IO-Compress via output globs. (Closes: #1138854) + CVE-2026-57432: out of bound heap reads in pack() and unpack(). (Closes: #1138905) + CVE-2026-57433: signed integer overflow in Storable. (Closes: #1138906) Checksums-Sha1: 6d20fc780910aa6ac0a138ead1fefb63e71ac180 1129888 libperl-dev_5.40.1-6+deb13u1_ppc64el.deb 8115c07eefd048a4c795b95e51485f22db1ea005 4294604 libperl5.40_5.40.1-6+deb13u1_ppc64el.deb 544de1ee4e20a6d36d59871df014fb097cba9ea8 1654496 perl-base_5.40.1-6+deb13u1_ppc64el.deb 7f18b02b3fd24c666745389a0eda52eb1585dc1f 13219324 perl-debug_5.40.1-6+deb13u1_ppc64el.deb f004fb59d51275a894a017dee96fe465bd4654d2 7181 perl_5.40.1-6+deb13u1_ppc64el-buildd.buildinfo 0cae84ac4f309ef55dc507afa290335ac71989a6 267732 perl_5.40.1-6+deb13u1_ppc64el.deb Checksums-Sha256: 4d3f9a7ed0aee2a32c4a1dbc32f7a4aedd8c40547ac01efaa6dff63401288464 1129888 libperl-dev_5.40.1-6+deb13u1_ppc64el.deb 4c0e8f1d9bdca86c37491cd007057e9809c7ba6fa0194c625e8eedec0a7e82a5 4294604 libperl5.40_5.40.1-6+deb13u1_ppc64el.deb ca8af6e07e94b8b00438a444174f020bcf9d93248a04c42cd628131c0d9becb0 1654496 perl-base_5.40.1-6+deb13u1_ppc64el.deb 3d15a81249ea859a43be6a07d1adfe630636cc54592fb17c9be6ffbb60f6681b 13219324 perl-debug_5.40.1-6+deb13u1_ppc64el.deb 513af681aba583971865d03089cbf7a948e3136b96b87a1a4a8b0f518daa5942 7181 perl_5.40.1-6+deb13u1_ppc64el-buildd.buildinfo dae511b0be8dbd1cf307ef0b5314e46b10988541479a7410785f02b12baa95ea 267732 perl_5.40.1-6+deb13u1_ppc64el.deb Files: 6257ee9cdd67800322a1370d1bd97f57 1129888 libdevel optional libperl-dev_5.40.1-6+deb13u1_ppc64el.deb caf54e24d83092f079c04ecc7faf16d8 4294604 libs optional libperl5.40_5.40.1-6+deb13u1_ppc64el.deb 0328e03cfd910246186bc7131786a990 1654496 perl required perl-base_5.40.1-6+deb13u1_ppc64el.deb b10b07a2cc89c61ee903b55077c8350a 13219324 devel optional perl-debug_5.40.1-6+deb13u1_ppc64el.deb bdff651906f3d2909757d2b85de537be 7181 perl standard perl_5.40.1-6+deb13u1_ppc64el-buildd.buildinfo f1ca8c19491ebf9c77dc3357b4a81885 267732 perl standard perl_5.40.1-6+deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDoRc43uRWMOoIqIgDNLUPhbmg7MFAmqZROcACgkQDNLUPhbm g7PRFA//a8+gJ+kaeFTQcc3gk7vzr9coqWUlDFdTeZKWZt8KS0GI2N5JR1wKO5HR 0ipzAMoXvBZf94lH1vsjfFxllksLakSpgbFdHBRFYBIvsWZqGPHlqmPBKuKNSpUt NuJOp1Ht5HLSn30x0sKklwSbUVTRA4wOubsrtLQ6XTX8gbdz6JodvmkObheYWAMM oNIvMP5l5hXlbqwmKC5X3xqXQLxteuY87d8FArBYSwpp3hop8DKILe92xM2XqOfG ne4JpHnPS3QUQj0PxH1tNpN6t26qwRnZDMEwjQC42P7ACt8+bMjwhlmFeIyek3Tr SklrF0xqzPCtr0Xs/lifhO0OqVVmrAzLv580nt777mBDTJUyR6yIhOW5u9jyFAuc SaV9S7oQhV0KwgJOee7M8ifS7BnTCGUYoPv4QPLwQUKORsqonBZqc7z0bF7Ia56s SJdkvlIF87QxxgMe2P2Xpr+lk09fd0r0Y0aXDB/KpUChXPh/m8GPdefU5wrSY5r/ 48IyiPkyh2rI1fiWL0cb9KO/Eu/kvLkGE9tRT/Nj8VorpD7ez2gDy5I1cggd0QQR 6SzsuvmpWfT4Zh4JPcos2WXny4TCFdTi4QlJf8r2xy5x+xRF8LRkVZvXHMiHeavN hC4xtlrLVlUnaMfpVnJJXPdA9IeVlM3moJnOf+2uMtcwrRYt3WY= =joXB -----END PGP SIGNATURE-----