[From nobody Wed May 20 16:05:05 2026 Received: (at 1137160-close) by bugs.debian.org; 20 May 2026 15:04:08 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 97; hammy, 150; neutral, 134; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:41560) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wPiSu-00Abmg-1m for 1137160-close@bugs.debian.org; Wed, 20 May 2026 15:04:08 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wPiSt-004Nl8-0e for 1137160-close@bugs.debian.org; Wed, 20 May 2026 15:04:07 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=oSaWUV9jRhVay6L/B+BngL915PuBCAK4UNBu2DySvPQ=; b=T7N3MXE8/DWMX9sHbt4oiWOvOB Uv/jwcyb5pkYCVhzBsnIxaAKOOWrD/V6NwTJFokinkYaPRZ1XkW5UwX7CMriBsGi8R55h9Ra5IgUR pUKfKvmOpGfCgl35lfZ0MpMldlsH+PdA06d81eAu61Voi70lRNLKP+rFXkHtuIT6P2Kqm910NNXFq zHCfpDxHZAIjlhW9XXyvLLYoRIvJBfUrmoCkQgYif77u5KLSEYdc5FZl37sa1wGLQs5/qo+9QB692 dlWTjOVI0QNtrmXHSLUImiRRdqBpE09fthzbjZWD2yhjROLOQwrQoM2mmwOhCpnGfZ+IcDFD559/t wGCJhZxw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wPiSs-0000000GRlZ-0oh5; Wed, 20 May 2026 15:04:06 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1137160-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libtemplate-perl Debian: DAK Debian-Changes: libtemplate-perl_3.102-3_source.changes Debian-Source: libtemplate-perl Debian-Version: 3.102-3 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1137160: fixed in libtemplate-perl 3.102-3 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3468685534439782059==" Message-Id: <E1wPiSs-0000000GRlZ-0oh5@fasolo.debian.org> Date: Wed, 20 May 2026 15:04:06 +0000 --===============3468685534439782059== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libtemplate-perl Source-Version: 3.102-3 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libtemplate-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1137160@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libtemplate-perl pac= kage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 16:44:18 +0200 Source: libtemplate-perl Architecture: source Version: 3.102-3 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1137160 Changes: libtemplate-perl (3.102-3) unstable; urgency=3Dmedium . * Team upload. * Add patch from upstream Git to escape single quotes in HTML filter. Fixes CVE-2026-5090: allows HTML and JavaScript to be injected. (Closes: #1137160) Checksums-Sha1: 05340e7ad61c6cf293d2787288916e2a8eba7fdd 2527 libtemplate-perl_3.102-3.dsc 2c3e0883d9d27e9dbc48402e78cd8138ad1dd6e6 6252 libtemplate-perl_3.102-3.debia= n.tar.xz 6420d1bfa8981e8371fb43d4352ebcc8d27de73a 1255748 libtemplate-perl_3.102-3.gi= t.tar.xz 9ff3147077e13a8402d6bbd0867c6763b5695d43 17384 libtemplate-perl_3.102-3_sour= ce.buildinfo Checksums-Sha256: eeeb01a94fc734e101439d9b830e0a725cb95761da209f9b8c4397cddc574c8a 2527 libtem= plate-perl_3.102-3.dsc e586bc5504b8167735683a750802098a9e51e930a48397bffc4bff05eb0aa788 6252 libtem= plate-perl_3.102-3.debian.tar.xz 2ebf2f151bc2149010b6cd31116f3f7d09d2e20ab277b465a9d3bc663e39f9a0 1255748 lib= template-perl_3.102-3.git.tar.xz 1f6d6ad0f84348ad3bf358cc254f8f9175b89754bbd014f5ab9d777812ef561e 17384 libte= mplate-perl_3.102-3_source.buildinfo Files: b10c352d25d4a5d5bd26f8ce6e8e969c 2527 perl optional libtemplate-perl_3.102-3= .dsc e3d7012b3384d0765e758ef44ae1a6ed 6252 perl optional libtemplate-perl_3.102-3= .debian.tar.xz 0bfacd30298c4c9ac18d001f68101369 1255748 perl None libtemplate-perl_3.102-3.= git.tar.xz fd987ae936bd0a201989cdb15d75087e 17384 perl optional libtemplate-perl_3.102-= 3_source.buildinfo Git-Tag-Info: tag=3De6d12d8b53ae5957a7de0865cbd3359b226a7475 fp=3Dd1e1316e93a= 760a8104d85fabb3a68018649aa06 Git-Tag-Tagger: gregor herrmann <gregoa@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmoNyhoACgkQYG0ITkaD wHk1BRAAjk8ZOKAdZnzaGRD35b73VUoH268b3iWAqx3wBRFijifkDO4shyQP+2fD grC9IDpW5AEx9r+l00iOhm/2NpLjQhfCnMposMu0gi//foQfk3sYxR3jDgjFEc+F IJwMhq1vh9rYio36w9N5DKKveoXtU2IT4DoM5bNXyJpNlIkUlPNOJGCaWhpMWPP+ MS52dqxnnCrpWVHq3oSQ1+zFD25JcZ3TQYqwJz3JcYa+dPHfBB2th+VMaIywfDlb 0dmU2kZj2xIffuwL1ieuW5xR98/DysZve/6xZB+VGRiofht3efp2ME3Ni7R3Z1HT JkLkgIMoh83x29Glqrq88aCyLyzmUoVBt88JYAygn5I/gQYvr05C6pFWrDbt18vM khb5e+Y6T3eG3tzWbw7Lwahx79kGekBiZ82LkuRCB/aOCAU9cUqgjINVIHvbMSK2 I/JSaTEE9slfAcUAuK0N2vtxzus8EDFbt4NguEeE823Pooh5xk/knD+XzDBgwj8w Z1Ojx1TNuKGdp6gBsaf3DrAWwx5GZ1a2NMGonk6rF3o2uehJgqluIPpY7xFmkEN8 gIhXkr0IYixQhfXc2oeNeLMVpY/7KI81G7wGcbKhOD4fWm9tqJCk2WYjgGMxgyY0 7tdOQB/OyZz3YS10iDAroGvo8Km/wbla2wdVenUVjvhi7GAZ2aE=3D =3DSNYP -----END PGP SIGNATURE----- --===============3468685534439782059== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCag3NZgAKCRCb9qggYcy5 IcftAQDM5/EwJeNo+Gws13Grfy5xafLGjvUJYS5WPxczWT+6rQEAkPecmvpxmEgo Wq6y0G8LM+pOP7jJVnFc73Er/e4W4Q4= =J8Ud -----END PGP SIGNATURE----- --===============3468685534439782059==-- ]