[From nobody Thu May 7 10:49:08 2026 Received: (at 1135584-close) by bugs.debian.org; 7 May 2026 09:47:08 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 70; hammy, 150; neutral, 130; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:46104) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wKvK0-00FGcG-2M for 1135584-close@bugs.debian.org; Thu, 07 May 2026 09:47:08 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wKvJz-00692F-1V for 1135584-close@bugs.debian.org; Thu, 07 May 2026 09:47:07 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=TNLnvWeiWV+RYrrCfS2ONTH1i9K5YIYNilK0fd6ps4o=; b=iBjQ7w7V1y/AJvcC4e+HvF/58+ 6061/TsQT3sDpa77KOr+XIR98qO4OJvlkwShtTA0+iuR3RtgwIjbuplLhYRAgOq/U1yC2Q9+KckER nWSZPjVEgyqtrRCrTygCB0cNboIXKYmjjAG59JO+Nm4LjqEFo7ignOoNKgEB+wneQzC6LRGqjHMBI S0uogFvancBztjuZ8QhpG6looFNMyZwB5bBbJIkzJNNbJx8nghfBkZW8sQmcQpDWCggeDwk+HqT+s aApXJHD1aSQi6YfRci9rbCHLKZd8ZcXCeS3uQJ28vNYN0JiUjfrUbnD/WYblvTIWl41I8csCzi+gS WH+2ZPEA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wKvJy-0000000CCEw-2VsJ; Thu, 07 May 2026 09:47:06 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1135584-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: starlet Debian: DAK Debian-Changes: starlet_0.31-2+deb13u1_source.changes Debian-Source: starlet Debian-Version: 0.31-2+deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1135584: fixed in starlet 0.31-2+deb13u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============4567707169029442578==" Message-Id: <E1wKvJy-0000000CCEw-2VsJ@fasolo.debian.org> Date: Thu, 07 May 2026 09:47:06 +0000 --===============4567707169029442578== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: starlet Source-Version: 0.31-2+deb13u1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of starlet, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1135584@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated starlet package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 06 May 2026 17:21:29 +0200 Source: starlet Architecture: source Version: 0.31-2+deb13u1 Distribution: trixie Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1135584 Changes: starlet (0.31-2+deb13u1) trixie; urgency=3Dmedium . * Add patch from upstream Git to prevent HTTP Smuggling. Fixes CVE-2026-40561. (Closes: #1135584) Checksums-Sha1: 248227d66f7a724e619f8d304b139ee33a9961e9 2381 starlet_0.31-2+deb13u1.dsc f280c6521e305ef00b3d12b7e6b4279b4ed6b4b2 5036 starlet_0.31-2+deb13u1.debian.= tar.xz Checksums-Sha256: 243afe433bcbfd563282c3f4bfedfc5deea1f7469e8b4d765b4136f0d0bb7469 2381 starle= t_0.31-2+deb13u1.dsc a51586f2611346dedc3594ee19c77b681e7fa7302864d94441dde61892aedf48 5036 starle= t_0.31-2+deb13u1.debian.tar.xz Files: fc2ff32c8ab9b8a051f4e32f0bfa302b 2381 perl optional starlet_0.31-2+deb13u1.d= sc 86e83813b2ccaafd2906e30a7f4fc44a 5036 perl optional starlet_0.31-2+deb13u1.d= ebian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmn7d81fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgYxMRAAxAosB9IZDV5HEgvL+dBxqpteU3kKVKTvYW/fCY1wvK3ncIJsWZ22qOMw bhTYJ+0Xd+to0iw5ep5HRLN1OSuBFq7I465ee3eIu8LCr4VQJU3abtjJgwA45wg7 tsUTHYprZlkRuuJ4AlW2RwpdeOnR+Qxj9Rlb17+4uley4FQVIcL9D4tKYmda3u7m ebRQOnEXIMQeskO3CeUx57PaTQ5ON6w5swsywbRhuHLFAPp2/wF1T1PbRUyV3e93 1Chz5u6E2wPhMXGfArbbUHsu5+zyy30p3zj4Mh3tDDDEXnmlqtYsMaFIAD89vRWx iGm5zeO9oyfienUCJf50cKOyCAkC2LoxWuogNr7+pD8RP174a0osslNHwRkgFk5w LrWEk/OU276jDIvx3LsxWtncmQdXAsq3MH0pIgNikXKOxJnUYYl90JtTuWvxkjmL 5lBzyMK+JzmbrqJ+970iqSUoXUWh/rWsfQVqAz+JJadKKn4sXg9U7Qe7YJ8KacOc pI8CAsXVdabaUU6U1n9WkADqdMbIsWP0eiIbTlrZ13OFwdRem48yJBUlyLyuKIRd Qn2vlyGfhJLxykmuCV2Kq2oiZzynZAOm7/H4aho5dTUoVfMcjyDAQszoGrl5ymLW ICT8y0w3P3hSU77qO/BAik3WRaSgILse6XLdJJLAPmd2fTprX/4=3D =3DtTJo -----END PGP SIGNATURE----- --===============4567707169029442578== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCafxfmgAKCRCb9qggYcy5 IXEzAQCsOTprkeBxNouBB/IsOZqSWB65wG0CWiP+5p3I+oKFTgEAkLkBSKsLno1j J9SDmMWNfRJnvI7bkiAV9l9kPkkbyQQ= =mNW4 -----END PGP SIGNATURE----- --===============4567707169029442578==-- ]