[From nobody Tue May 5 15:51:07 2026 Received: (at 1135229-close) by bugs.debian.org; 5 May 2026 14:50:05 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.0 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PDS_BTC_ID,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 98; hammy, 150; neutral, 142; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:40104) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wKH65-00ASEn-1f for 1135229-close@bugs.debian.org; Tue, 05 May 2026 14:50:05 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wKH66-004DPQ-0h for 1135229-close@bugs.debian.org; Tue, 05 May 2026 14:50:05 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=XGtDFjd0JbFL34gKOCg6AIdupcuzaJQ4tPTLeag9BRc=; b=F9l+Qz5o+AX/t8LmpN58jye3Mo 6LYJEM4JlMfXHwO4rWdXVXJNtrSQfkSTYvbeadBR3uFcCqsVwRf/2kmbYgTg2JWk42L/bOe/Rn1Y9 /HbNd4nOqJE7xJMq6uE1DM9kstzDR+g4cuuB9zIP8LH0k4Mn9+4wcum+eHMLFxPhSnwqlUiKMHM+M EqZFrBMEDmACXq40N5ffStHZ3lQ2pQwEj5ddOftO4y+BGoJAb2BCL/MPoPCMSP0sr5FCpvsPFZKs2 jvvovXid+SZEuHOK8aPxw4YbhZeyUFKFyi8PsJuKGpKH2uBd4lmaXz5HD0IKZTj2JpCTFi4Nu3Vf6 8mw8RR0w==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wKH64-00000004DMP-1irJ; Tue, 05 May 2026 14:50:04 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1135229-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: starman Debian: DAK Debian-Changes: starman_0.4018-1_source.changes Debian-Source: starman Debian-Version: 0.4018-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1135229: fixed in starman 0.4018-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8833708810056423808==" Message-Id: <E1wKH64-00000004DMP-1irJ@fasolo.debian.org> Date: Tue, 05 May 2026 14:50:04 +0000 --===============8833708810056423808== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: starman Source-Version: 0.4018-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of starman, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1135229@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated starman package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 05 May 2026 16:26:26 +0200 Source: starman Architecture: source Version: 0.4018-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1135229 Changes: starman (0.4018-1) unstable; urgency=3Dmedium . * Team upload. * Import upstream version 0.4018. - Fix HTTP request smuggling: Transfer-Encoding now takes precedence over Content-Length per RFC 7230 =C2=A73.3.3 (CVE-2026-40560) Closes: #1135229 * Declare compliance with Debian Policy 4.7.4. * Remove =C2=ABRules-Requires-Root: no=C2=BB, which is the current default. * Remove =C2=ABPriority: optional=C2=BB, which is the current default. Checksums-Sha1: 58210a57151451ce7f5faa1d9e6e56624dc233f0 2525 starman_0.4018-1.dsc ce65fb8a483ed740b437b89f9854b47e77efa313 33079 starman_0.4018.orig.tar.gz d644240835dc935e6f07f4eea2002081f984f0c8 4148 starman_0.4018-1.debian.tar.xz Checksums-Sha256: e65a795d8f72ed35ed9f9c5e8594aa9ba452447075a2e1706a5b55864f1cf462 2525 starma= n_0.4018-1.dsc 6d8db297d851141fa4ff7748dff0551be2ba8f9a442ed9caac644dbcc9a36edd 33079 starm= an_0.4018.orig.tar.gz b67245feae809f4e41ffd07ece3b545d85903e7ee8d3f10581b3dea7ce082d51 4148 starma= n_0.4018-1.debian.tar.xz Files: 1afd1285c5b0c389f7073df6c603af91 2525 perl optional starman_0.4018-1.dsc 15a65eefb14b2e8f89bb7f8e155ae5ed 33079 perl optional starman_0.4018.orig.tar= .gz 41ab088e616060e30a244e87e644fecb 4148 perl optional starman_0.4018-1.debian.= tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmn5/p9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgY1ew//YiR87HF+lwjpNeFESUkOu3yNYFwPouX/Xc1L3MW2bFirFh/ecTZ8tSXR yioQay4hUGXPicrRCdOV6xjtpW6D6l5/B4wpIV6QQJ5oKlUM4DNNdLrY/rGb1cP9 rJ8i6YgkmQfXrdPKuHNvPgXB6W3v4+GnrAn9ufwVUltLCamVhE0ct27OeSL+iBk2 vwUAbJTCifxjRHf1OLWu84bEy67KJX6A45FM4VYhs2PyrrtYMhTgOdgT93ljfUS2 eJCeEnxs0vAMHNIRVp0nq91YcfEY7RoQgWZ0MqQLcbso+4eMIhAXRA7ikqTNiKWa LuJ28VV+U16IqYhUyeg2mqEKSLTKkIvoW7YjuY+4rYv7T0B1OOdfSnunSLJ0/clh zIvcsr4b8KY0aRS0YATJP3uWc9LTsNTthpndhdp8GgCZJJWafVRIf7aW4/GdpL51 9mTX0DZ6xrXdoSABblKzJMifANS1rikySm3eNv4KieIJBu0EdLV88jCZQpkyuY+I L4SffJACH88xFO/OoXpF6yK85DjMnnQ/5COWBC3a9GFxL6aJOhDLpIVLEjevxIXo C8RiYtmbZI8KgPHdCwJ8PwkJojBlFo8ifELUhhYtxyjWfkYTLs2c9rysWZQtf2ru mSmhGoD4Y7dN+gE0UDcuQ6J/V5oyI+vp2mZBnlGnHQjxRDq41g8=3D =3D9yse -----END PGP SIGNATURE----- --===============8833708810056423808== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCafoDnAAKCRCb9qggYcy5 IXULAQDt2wAFxIB5+4x7CU1u2A8msaBepAvTrcpfJGe2H80LFQEApkSF11NHJ0Xj JJquHaI12jFG1Xqs+yCv5ln+azlkOg4= =sAcS -----END PGP SIGNATURE----- --===============8833708810056423808==-- ]