[From nobody Tue May 5 16:21:06 2026 Received: (at 1135584-close) by bugs.debian.org; 5 May 2026 15:18:52 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 101; hammy, 150; neutral, 151; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:38690) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wKHXw-00AVnC-1F for 1135584-close@bugs.debian.org; Tue, 05 May 2026 15:18:52 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wKHXu-004CNm-2S for 1135584-close@bugs.debian.org; Tue, 05 May 2026 15:18:50 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=H+IbJ/t5p8MiX1QMkJh0Jw4HHzafu3Cu72qjLX3pNsw=; b=ZmU4feVrMAyIwn47CeSA8Zt+uo U6Qx5W2FJYUkz+Vf4Ex5LzEYGvnWUAG29y5vWdUeNRTlq9f2MgwXxz1uaB7YKo7FWeo+FyndzFJp2 hdU3losuuUCS70/VNA0juffFKGKNvCnWKHsnepzbW7QLdZ6KeZ+721vbsw17i5IbKvCpHLH960CYb 0JVEDm9l8VPVdSPYw76gHuVL6tFqrLngCFvJtrHFL13RZYjFuSfAUeWAafq0v/BARRCIFejruX8nF N2NvpUfJcmYS0yGmO0XDPaJ1Pu0FPlMZDHr6zHKLR/QNugsXSoG700YNGio6XjsgDeAfuxYn+MGYq eKAVB/CQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wKHXt-00000004Hfy-2Kks; Tue, 05 May 2026 15:18:49 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1135584-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: starlet Debian: DAK Debian-Changes: starlet_0.31-3_source.changes Debian-Source: starlet Debian-Version: 0.31-3 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1135584: fixed in starlet 0.31-3 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7548710012480737738==" Message-Id: <E1wKHXt-00000004Hfy-2Kks@fasolo.debian.org> Date: Tue, 05 May 2026 15:18:49 +0000 --===============7548710012480737738== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: starlet Source-Version: 0.31-3 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of starlet, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1135584@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated starlet package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 05 May 2026 16:54:18 +0200 Source: starlet Architecture: source Version: 0.31-3 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1135584 Changes: starlet (0.31-3) unstable; urgency=3Dmedium . * Team upload. * Add debian/upstream/metadata. * Add patch from upstream Git to prevent HTTP Smuggling. Fixes CVE-2026-40561. (Closes: #1135584) * Declare compliance with Debian Policy 4.7.4. * Remove =C2=ABPriority: optional=C2=BB, which is the current default. * Annotate test-only build dependencies with <!nocheck>. Checksums-Sha1: 83227941341a3aa2bef68f2b4826e73d6718458e 2421 starlet_0.31-3.dsc cd3163f56330588abcb54d3a35c123860e2c2319 5156 starlet_0.31-3.debian.tar.xz 6d13101cdbf96738b4112a474e2123c0ee0fbba8 211384 starlet_0.31-3.git.tar.xz 69780af7e1186efa6ecc8d47aca0ec9ec20df0a4 17344 starlet_0.31-3_source.buildin= fo Checksums-Sha256: 9c6be139606a650b9f06e8a99235343a9828f606a38a056555b563ae0f0c1229 2421 starle= t_0.31-3.dsc 0d758e2149261e4e8e38dd21b148554d9dc38d41a7a3df311303b8f4c534df85 5156 starle= t_0.31-3.debian.tar.xz e5aa865eb7614efb4034dba1593038beca2adaf79560a0bef3cb18222520ccd7 211384 star= let_0.31-3.git.tar.xz 0f742e9cba9be458789e84f3fd3a3de98fd7281eda4b374a774e63935f99b134 17344 starl= et_0.31-3_source.buildinfo Files: f40426f28d66a0729149087e4e1bf0dc 2421 perl optional starlet_0.31-3.dsc 7a948a591b6bbd7082f21b13d13cd66e 5156 perl optional starlet_0.31-3.debian.ta= r.xz 8ae03506d1d76490aeea6c175df09db5 211384 perl None starlet_0.31-3.git.tar.xz 6f51092be3f85a90712585ea5cc26cca 17344 perl optional starlet_0.31-3_source.b= uildinfo Git-Tag-Info: tag=3Da1945e655fd26ed4b4b759e91aa7f4e5ad08083d fp=3Dd1e1316e93a= 760a8104d85fabb3a68018649aa06 Git-Tag-Tagger: gregor herrmann <gregoa@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmn6BbcACgkQYG0ITkaD wHlHLA/+NOl1wqX055Lo0ZErXLvt8GQOlBZGmN3xZjc1q9mK+Sh8oCf24D4cA8cQ SxP4PLPlar2Bphx+9rzYUp1Ig8xFmADs+W6/S5NjO9ZWAAa9EoYxd+mJS680Pyzu jKvjmLlgCp3908sKH3iM64aT8SMEKc4BuRrPorZXkaV4h238kmNynRY1BybsQpZz ycc7y/S4dxzSALcZmsguZNCeV1apAW3GRc7PzEY5BcHEKmnmPdy4o1vx+O01GubT 52o2xVAzRCBEJzqGKnvi1uuEFo8ggQ//deatoRGrZMfHT6EiLb4BmIbAykMyajR1 Plaf8shKfdcDaxrJkBcfMOjGp/htnjMoyD5R6PaJz5yIc4Z+cN/4yT7CwQ6SsUI3 bRqskvgxyqO6BaRxd4lOH758VdTuSZO6KdgSHhXONK1MMCWKKz+yPKJ+1B/x+CXG gOHH+4PxIYzEcprAwbCDk3Moz9VRnvau/5h4lh7w5exJ7LZAgnIMwrYtDwdhXjYV M0x8kVy2cyUpwuFmRQtmtQ0h6Hjb+G70S4bK8RniJL9RbdiU8sP6Yf0a/17HGToq D6/lINIPE+HKerJXsx8U8Rz6Ma99NX+162IaBAuOK3oOQ99Kv6UK++rRCLzgCj/a osC2hwuA2Y6GduLy4FQNJa9kTDgb4IXWLjcMbtBmYb3nP24Xdik=3D =3DDvpB -----END PGP SIGNATURE----- --===============7548710012480737738== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCafoKWQAKCRCb9qggYcy5 ISv+AQCiCN0VYcjJKNvk4G+/zoiV+CsV7+2HHThJEfvx2Xc3nQD9EslTJBuJiDoA S6rQIegLXFPwSqcJs89o8g7r1nedeQA= =kdaQ -----END PGP SIGNATURE----- --===============7548710012480737738==-- ]