[From nobody Mon Aug 3 19:03:11 2026 Received: (at 1141639-close) by bugs.debian.org; 3 Aug 2026 18:00:22 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 13; hammy, 150; neutral, 311; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:58876) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wqwxa-00C7su-04 for 1141639-close@bugs.debian.org; Mon, 03 Aug 2026 18:00:22 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wqwxY-00HF85-2T for 1141639-close@bugs.debian.org; Mon, 03 Aug 2026 18:00:20 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=bG+OyQj3ddERZFYKheELjN7qtBmLZw5nna3UkCqqv4Y=; b=Gx0UyIKX867b+a1DOAnNBOIq6j 9vPwe4S8Ppc86KuC2Klr9fOb7AI1Jt8XKmk8za39RTHlnE4pP+Q3K8umMWiDI6HAqWaTYVZXus55y rnspTfUtlaWbxlu0q2RxVpirU1JSofJaXnZpwzjhJeVBlLdThWJzsbAEXqrFaFrUyxKXlxX5GVqHl ZW42+FR045VXY7i/JI2VZmjWk3Yz1SZ9w9PUzCQHbLaxWQ0e7O0Cu/+vKBWnHzjhkxxpkJYj5Ji6C SKua4GGyg1Zel2AfqfkNN1X5NceOOTv/tNBZBKueVcv1YyEdPgzvy/u/z2lmUt8e51c/ecThI/Ls8 RL0dtvBg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wqwxX-000000079DI-3X4Y; Mon, 03 Aug 2026 18:00:19 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Niko Tyni <ntyni@debian.org> To: 1141639-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: perl Debian: DAK Debian-Changes: perl_5.44.0-1_multi.changes Debian-Source: perl Debian-Version: 5.44.0-1 Debian-Architecture: all amd64 source Debian-Suite: experimental Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1141639: fixed in perl 5.44.0-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2591627917397989333==" Message-Id: <E1wqwxX-000000079DI-3X4Y@fasolo.debian.org> Date: Mon, 03 Aug 2026 18:00:19 +0000 X-CrossAssassin-Score: 3 --===============2591627917397989333== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: perl Source-Version: 5.44.0-1 Done: Niko Tyni <ntyni@debian.org> We believe that the bug you reported is fixed in the latest version of perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1141639@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Niko Tyni <ntyni@debian.org> (supplier of updated perl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA384 Format: 1.8 Date: Sat, 01 Aug 2026 16:13:58 +0300 Binary: libperl5.44 libperl-dev perl perl-base perl-debug perl-doc perl-modul= es-5.44 Source: perl Architecture: all amd64 source Version: 5.44.0-1 Distribution: experimental Urgency: medium Maintainer: Niko Tyni <ntyni@debian.org> Changed-By: Niko Tyni <ntyni@debian.org> Closes: 1138859 1138860 1138861 1140152 1141639 1142037 Description:=20 libperl5.44 - shared Perl library libperl-dev - Perl library: development files perl-base - minimal Perl system perl-debug - debug-enabled Perl interpreter perl-doc - Perl documentation perl - Larry Wall's Practical Extraction and Report Language perl-modules-5.44 - Core Perl modules Changes: perl (5.44.0-1) experimental; urgency=3Dmedium . * Update to new upstream version 5.44.0. * [SECURITY] includes various upstream fixes: + CVE-2026-7017: HTTP::Tiny credential forwarding on redirects. (Closes: #1141639) + CVE-2026-42496: Archive::Tar symlink extraction. (Closes: #1138860) + CVE-2026-42497: Archive::Tar hardlink extraction. (Closes: #1138859) + CVE-2026-9538: Archive::Tar memory exhaustion. (Closes: #1138861) + CVE-2026-12087: Socket: pack_ip_mreq_source() out-of-bounds heap read. (Closes: #1140152) + CVE-2026-13221: silently incorrect regular expression matches. (Closes: #1142037) Checksums-Sha1:=20 52da9fdc1cede54d5c3fac22d90954ac89e18eec 2372 perl_5.44.0-1.dsc 1af3f3e6f0828e75f36ffaf50541a42a2bd33876 422344 perl_5.44.0.orig-regen-confi= gure.tar.xz f64277b1a19107491ebd59249a33b7ea986eadd4 14919940 perl_5.44.0.orig.tar.xz a9ae4a664ce09fba56591033c23113ef3672969b 167824 perl_5.44.0-1.debian.tar.xz 5d0c6091ad6aa1e647e157fd0a11e02df1aedefc 1169872 libperl-dev_5.44.0-1_amd64.= deb d5dd071615b15af9caafa6db11d10eeaab1666fc 4314308 libperl5.44_5.44.0-1_amd64.= deb 1241cdb2d398f534a9f191edc5ca3d1edeed0690 1893660 perl-base_5.44.0-1_amd64.deb 4a8f2da10bd3820e9d67e119b6ca4a8e03694b7d 14229824 perl-debug_5.44.0-1_amd64.= deb b2e68ee0be61249b82f6023cb437235ed93bdbad 8632296 perl-doc_5.44.0-1_all.deb 5e059124d30cc540a7122d5f534bf64ed7cd80ae 3264904 perl-modules-5.44_5.44.0-1_= all.deb 3b41d7b0ef18f03e8282fa154a4f1dd8ee56b581 6788 perl_5.44.0-1_amd64.buildinfo f00bc2d862927b8f02a8477412d07baec1178618 267456 perl_5.44.0-1_amd64.deb Checksums-Sha256:=20 c350428472e7325f1f4c675f8b8884bc308f493bc16b01481b54cee7e23acc2b 2372 perl_5= .44.0-1.dsc 82e0dcddac1dd15c4078c969628533f587a31f4e229824763cbd84ab4db628e1 422344 perl= _5.44.0.orig-regen-configure.tar.xz 505cf43912e9480495c344c70260452e32aa2a73c546a026b3f100053b23ce91 14919940 pe= rl_5.44.0.orig.tar.xz 033db6f3304e21fc74244cd8f266a4c503aa4f69550628175598bb55215c66fa 167824 perl= _5.44.0-1.debian.tar.xz 42442899b17837421b14ca9c4a88f7a03469fc94ac814fe338117b20206b4a51 1169872 lib= perl-dev_5.44.0-1_amd64.deb 8c42c564e01a264c3c219f6a67edc4c650c6d569e099832cd2e7f8df67d40aeb 4314308 lib= perl5.44_5.44.0-1_amd64.deb 9e8b4cacdf5cc0b83c615a2a70e2f31d58f0b5e4cf60d84ef9ee00bc6fb16525 1893660 per= l-base_5.44.0-1_amd64.deb 8fb0f5bc5fdfe6e8f1e00cf7806fe1ca9c30094c1e5aeb6e1a4d51fc69f9a47a 14229824 pe= rl-debug_5.44.0-1_amd64.deb 629e51f6e08333f15d4db4133063cca0296d4254d4278baeacc6ee81018db18f 8632296 per= l-doc_5.44.0-1_all.deb 3bb613760a3124e27812f1cb465e694c4fa16a2ab2e6e6cb995b629f2c302cbd 3264904 per= l-modules-5.44_5.44.0-1_all.deb 33c02cc931ec81e38d826cfd5563f281d6effae48894e3c1c0c3a397e426a6e2 6788 perl_5= .44.0-1_amd64.buildinfo de083313f83e1f0a91dd3b2d0eacb300736fa57da075be75d06e05b3f77dff9a 267456 perl= _5.44.0-1_amd64.deb Files:=20 b74f725330b7a8c1022d5a0a094b50ba 2372 perl standard perl_5.44.0-1.dsc dad7233fa6f18a19cb9a9afb90e4f4ad 422344 perl standard perl_5.44.0.orig-regen= -configure.tar.xz 55761cf1543af326492fd194647796d1 14919940 perl standard perl_5.44.0.orig.tar= .xz aa94d0156a03a38a1f064018f2fb5767 167824 perl standard perl_5.44.0-1.debian.t= ar.xz 802b65b732c978e6c2a94893e0e23632 1169872 libdevel optional libperl-dev_5.44.= 0-1_amd64.deb 9283ba15150c8e920f382d55278dcad0 4314308 libs optional libperl5.44_5.44.0-1_= amd64.deb b738fa4f8077293033032235bd281a7c 1893660 perl required perl-base_5.44.0-1_am= d64.deb a01ea1c2408ee889bd2dde7e417555ba 14229824 devel optional perl-debug_5.44.0-1= _amd64.deb c94b049c24d91106a4202e4afa646d8b 8632296 doc optional perl-doc_5.44.0-1_all.= deb c31d62cfa1c2ccbde8639ba340673dc3 3264904 libs optional perl-modules-5.44_5.4= 4.0-1_all.deb c12a01537609245f9e00c3d2af30779d 6788 perl standard perl_5.44.0-1_amd64.buil= dinfo cd0ad89ed14646911c8a9225251a9cc8 267456 perl standard perl_5.44.0-1_amd64.deb -----BEGIN PGP SIGNATURE----- iKcEARMJAC8WIQTuZv2Xfg2x/uVxefeK/rNkDrE5sgUCam4S8xEcbnR5bmlAZGVi aWFuLm9yZwAKCRCK/rNkDrE5skM0AYDaZL3Z9ilbu6MeQXc46svSz/aTZA1kz7aT CQClJPQ80M311fKlz++6StNrHFHZMtUBegPC6+lzUsn6NzPb10c9KyfPU4Y6iypz sDjehkY+t0ddeZURsMw7dhEww8f2dZbcSQ=3D=3D =3DAZ4Z -----END PGP SIGNATURE----- --===============2591627917397989333== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCanDXMwAKCRCb9qggYcy5 IRzyAQCU20inXmM6tp1B5Rxbv5BPpHAjUZr58r99FQrrEm9D0QD/RqVzb8NwquFn JMOQwKXBCSYQnwM3HV92WOPC73634Ac= =F/RY -----END PGP SIGNATURE----- --===============2591627917397989333==-- ]