[From nobody Tue May 5 16:35:07 2026 Received: (at 1135322-close) by bugs.debian.org; 5 May 2026 15:34:29 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.7 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,MONEY,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 104; hammy, 150; neutral, 137; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:43536) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wKHn3-00AXgZ-01 for 1135322-close@bugs.debian.org; Tue, 05 May 2026 15:34:29 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wKHn1-004EOC-2D for 1135322-close@bugs.debian.org; Tue, 05 May 2026 15:34:27 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=Rn8q/G61SC5PU69tllIv/8ufV19sSS8NV+Ys8sO6YNA=; b=WwXDkuJMXvqRP9kgVbclHGX4Rh 0G5rrxpnI+BJWktsTKhPt8SGM/UkA7GHJMU4Pbs2OezZRVsj6sQjlb4M6rJGfdnKlQkXYXvJwnkvf 1tcgOwB71oXETjgpkIDuUDznr9VRijARi9P3kPJJzhl9r423UgTt5f48FxL7VfnYfvTEmwSkLcoCk ewNqO+DiLoLj4aIVJiB9guHdwYWIvA5H2FqEFFc4EvZQmkkSN+QX4wFz2NwHsxcEro+yUiFhT0K7c TrzwrBVUeUDztqEqXcdEMb2zxpouAIrNykTGsTel7r1OWKN1B932RLZLzbYr/FdgxWXeXGKfh0il5 N4Wvj1jQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wKHn0-00000004Jwc-34Z3; Tue, 05 May 2026 15:34:26 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1135322-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libdancer-perl Debian: DAK Debian-Changes: libdancer-perl_1.3522-2_source.changes Debian-Source: libdancer-perl Debian-Version: 1.3522-2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1135322: fixed in libdancer-perl 1.3522-2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3481126404576727191==" Message-Id: <E1wKHn0-00000004Jwc-34Z3@fasolo.debian.org> Date: Tue, 05 May 2026 15:34:26 +0000 --===============3481126404576727191== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libdancer-perl Source-Version: 1.3522-2 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libdancer-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1135322@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libdancer-perl packa= ge) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 05 May 2026 17:12:29 +0200 Source: libdancer-perl Architecture: source Version: 1.3522-2 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1135322 Changes: libdancer-perl (1.3522-2) unstable; urgency=3Dmedium . * Add patch from CPANSEC to fix CVE-2026-5080. Use Crypt::SysRandom instead of manually generating sessions ids. (Closes: #1135322) * Add test and runtime dependency on libcrypt-sysrandom-perl for the CVE-2026-5080 fix. * Declare compliance with Debian Policy 4.7.4. Checksums-Sha1: 271745a0af23672ba28897b96b81179a401a1e53 3372 libdancer-perl_1.3522-2.dsc 74f649db4ced7ac2f53a0fe35b2e8fcc0e6abee5 11548 libdancer-perl_1.3522-2.debia= n.tar.xz adceac8daa9a20631660398929fb9ecfe187ab98 923588 libdancer-perl_1.3522-2.git.= tar.xz ce86bc2ec89bf1be146322b5487fb4618a20c452 17380 libdancer-perl_1.3522-2_sourc= e.buildinfo Checksums-Sha256: cdfcf94d876c9aeace158aba85d87340ce60d654ab53e1c13b1253c61bf01d63 3372 libdan= cer-perl_1.3522-2.dsc bdc68f59974fae476ed05777253357c6e473a872ed5cd4dc2cc2e4b595e4c329 11548 libda= ncer-perl_1.3522-2.debian.tar.xz 75046ca73def7ebff5905917376758d1d3fda79e91626d606568607d4d2505e6 923588 libd= ancer-perl_1.3522-2.git.tar.xz b90ec091ded8d47b0dab1be58e5accc67bfe60b642c1422fc49d313b6c2c60c3 17380 libda= ncer-perl_1.3522-2_source.buildinfo Files: fc43806e4676d381dd1789bef3bec489 3372 perl optional libdancer-perl_1.3522-2.= dsc 4b25df2293737bd51158e4aff55fc88a 11548 perl optional libdancer-perl_1.3522-2= .debian.tar.xz dd11540eecac01eeb91fd1fe0f72fa7c 923588 perl None libdancer-perl_1.3522-2.gi= t.tar.xz 1150d543ed7234ab479da0d4dd7129fa 17380 perl optional libdancer-perl_1.3522-2= _source.buildinfo Git-Tag-Info: tag=3Dd02dd35b8b22c5b235439a7617ccca879e58c2bd fp=3Dd1e1316e93a= 760a8104d85fabb3a68018649aa06 Git-Tag-Tagger: gregor herrmann <gregoa@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmn6CigACgkQYG0ITkaD wHkhjRAAkqVjJ+jmHWO8GanZgyygUNJ4dDa8WOAICW0869wnm8VfiAYTco83NBXe 5UmRASr67uny5Olt4QKI1HhfXHmSX1X8VPFpfGz0Pa0j4GRTa0tOO/H6TF2ys4G+ 7wwPTVAh6V9Y+SPubnqHP/9qIvYNzsLYBmbcRSmLwouEDtR0xt5wSRMBS+hIwOHn ZyNKpV3zKgnNZw9qw9hziMaQmhSyDn7dlXUQ2tJO/rwxGCkzsccG1qK0FF8nb5Il SdV6BrD/6AOApZ4O4PBJ8+N4ViyNeU12epkcbJ+LVLrhIRfgc4/PQ32mWnfdvchg 0wiNOzjStWhQL4Qn+EV1TOsH4Vb08w7iFdRreT3S3gipAtJvI4njqLSG5OsD6qvk 1BXG5xQPGPbsnqivZr9vljIlcBFROgCYAtYsjgeQXkDCMl6xu+7VWbbpHwyfbTf8 HzmmXg5SuMXQ9ferLAxouv77Uo6zQzJ0o7Bhev88Miu+eFlpRxYbGXpJI//WaYeR WjVcWaHSOce1XIRfTXPGaAJISMsr9f5Ms6B8pp1Z3PrsKOrodqlbQ/VgWZqHH4l6 p6ZaOVf/odJCR4Ab67WHLuKXP+p9ozm7jv1uq+6xP5WZP7hYXDtleIiFzjbBu5UF FrAasYW3TfYjaCLVoL1cjXAjn0QX6nsyZE2V1c2ZvK5Uz2yE/HM=3D =3DlezC -----END PGP SIGNATURE----- --===============3481126404576727191== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCafoOAgAKCRCb9qggYcy5 Idb+AP91g6ROh/ItvjVX7w5DOFg0q/5sC42aVQCNfgbPgkFaqQEAld0Jp+6Hacas QwkgoK9ekpaNs/W9xL0qoNZwm88SNgI= =3xWI -----END PGP SIGNATURE----- --===============3481126404576727191==-- ]