[From nobody Thu May 14 17:05:07 2026 Received: (at 1136449-close) by bugs.debian.org; 14 May 2026 16:04:40 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-112.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST,WORD_WITHOUT_VOWELS autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 95; hammy, 150; neutral, 127; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:53788) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wNYYC-00EFaF-0A for 1136449-close@bugs.debian.org; Thu, 14 May 2026 16:04:40 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wNYYA-005jPJ-0A for 1136449-close@bugs.debian.org; Thu, 14 May 2026 16:04:38 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=4u/AwP3Py2NEdEWoscptjsd61vFgbkVhcWZsJqRTpUw=; b=ma7sOWmspP9hgPkIPbrpZ8bf2I CQYhhayAv1Nk9GNXtIMnuVj2U0rQDJpjwunr+yyWDER5X+Om3fDb6ywGG1koJeSLbqdH0tqNEOxzb f6jOdo35sh9R0IlCwFhAE8SjcbTBvLF4SnCx0RAWivUeFIGmzShs/AyitskgHlwvie2+OZDvK9L3v haOi30Vp6A9NXjbGajRgZp2z9OyVIOcz8lHp8jth+DGnZgo3UjY18NF2O8M7nRzUHk7AmH3nmZLeP OYn9zkDbxUGVQhX+BXTxRyvoBeHFSFLUHxrQUCJ+2tkqnNPBabmA+LkIK37maT0uy7YEestOxl/y7 iXSwErag==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wNYY8-00000008ZQa-3jU5; Thu, 14 May 2026 16:04:36 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1136449-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libwww-perl Debian: DAK Debian-Changes: libwww-perl_6.83-1_source.changes Debian-Source: libwww-perl Debian-Version: 6.83-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1136449: fixed in libwww-perl 6.83-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5351394808827718500==" Message-Id: <E1wNYY8-00000008ZQa-3jU5@fasolo.debian.org> Date: Thu, 14 May 2026 16:04:36 +0000 --===============5351394808827718500== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libwww-perl Source-Version: 6.83-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libwww-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1136449@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libwww-perl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 14 May 2026 17:35:26 +0200 Source: libwww-perl Architecture: source Version: 6.83-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1136449 Changes: libwww-perl (6.83-1) unstable; urgency=3Dmedium . * Import upstream version 6.83. - LWP::UserAgent now strips Authorization and Proxy-Authorization headers on cross-origin redirects: CVE-2026-8368. Closes: #1136449 Checksums-Sha1: 5dda70c7aa3616135f6269d87ae84212f05266d2 2963 libwww-perl_6.83-1.dsc c1b7d8db4fd4004da47f920c131573026fef669f 190640 libwww-perl_6.83.orig.tar.gz c2c07ff5ac107a4b69befb8b68aef90011992d77 11652 libwww-perl_6.83-1.debian.tar= .xz Checksums-Sha256: 4e8ef94e7f9b10bd35e3d7160389f620558fd9ed6df56c5b462ce5b16996d2f2 2963 libwww= -perl_6.83-1.dsc e75f0fa9d3c6f0daf5a5a72fa9f8b1c9c0d23e3a84a8522ccb4f835232b95505 190640 libw= ww-perl_6.83.orig.tar.gz f8e12838d65620e2aebf16da23394eb4806603f62826de4c9eb748d51ced6934 11652 libww= w-perl_6.83-1.debian.tar.xz Files: 360b35ab115f0da0f62bd31b06d96c61 2963 perl optional libwww-perl_6.83-1.dsc dfca8f917f4727ddbdf3d81d0979172f 190640 perl optional libwww-perl_6.83.orig.= tar.gz 11350a9eddce40085a3b0ce2e89ee112 11652 perl optional libwww-perl_6.83-1.debi= an.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmoF7QxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgblbw//fETfMNQq88GQlS1JEVfjBakoaLwxB7ayJlk9/pYJk3tmqmvrawVG+1ai ix7LRWp5Jby8U3Wr/X6qFpmg33B9X3obqlx52ho5Rk8puunoVKjJZcDb2Oi1WMC5 kLruYsFwAbh3hNe3ZqJmnRslm1VamlcPPcCoh5Z/K2UrPYe6qpTi9NizfVYbD0wy GccDHeaxDCIxLdQ/JdmGDdcm4/8s4G/WRmUBiVYQFeI1Vo5Azr7Diw78FzM/pTMH 99ma31Xwm4qcgxU9xa+S+nynMXZjXuEhABMAWRBohPyJy786+7OEfrGjsrDYJNuQ 9/4oFN0d0BOQHX9SS+7AnnBM3sVNlMmz/WNNC+BOGiK4VGFTwDPiozx8GPNDYetL UL9UewSImpAtFxp0Bg8k9oV42hd7LmO87mTSCBFgrd/16L6g07YThoAdtUbH5c+Q A2Arzxp7OjaAMW9VXVJTzK6nlw3Urdfop319Iz/vKVKVtDyPBO6aUatF04XreaK8 E0VKQ5ZC8U6W9NxoFZDrMm39XYt9QgDZyecALfdxSl388RSkubyQUbOrWtGYaYvF gYmGHkozbi5/L6CS2euqTYRmUFsQKNc7u/EJqyBFkze5pk2ngsTuds0Is2SO50t0 vzvBCB+3ArW7ngGDYnUzMJjCEpBhWb+8Hl4qL0rDpPGJfhqd3zM=3D =3DAO/X -----END PGP SIGNATURE----- --===============5351394808827718500== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCagXylAAKCRCb9qggYcy5 IajBAQDDBX/5g+oLZ8rRC9+tNanioupKYwCZQjhCsryTwzPIqQD/U7V5eslJ9vhs Sb1FlQ6PyhrXfBXHvMcvZpOHTu/GJA8= =XYpd -----END PGP SIGNATURE----- --===============5351394808827718500==-- ]