[From nobody Thu May 21 21:53:07 2026 Received: (at 1137253-close) by bugs.debian.org; 21 May 2026 20:50:35 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 89; hammy, 150; neutral, 165; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:46916) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wQALi-00Dq54-3D for 1137253-close@bugs.debian.org; Thu, 21 May 2026 20:50:35 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wQALh-005VPc-0e for 1137253-close@bugs.debian.org; Thu, 21 May 2026 20:50:33 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=clpmfsWdNS8HIk7wjYXu7v6Ft4VQNwFwHayzIq86WGg=; b=QEfwpB5EB4kLNReWY+wG6weNbC 09bLcgoUS5vTuX/W9bTTp3FDZKIkEldLfpTRgdkkSVYkt35r2ZhNzxjFRwTBekMMTmR+lCzvm2EkM rR8/iVLf9D/GkPb+kVBqQgYN3QIS0j+Ofi2byTD1TwBnz9+AyQfVRJQz3XvfehKqzEKhwdNy0Pnxx jp7px0acaLYWZ3UJqRy8uplSLPCrzYtB1LyOW1YUOfY1kI3mhQJ97tA9P0vyYB5+0nvKDfALilZWY 11fguUVfflwKOePoVHseI3IxX7IE8IOJVXGxvKhb+dZyENNLyyYAaRXQYqQyDnhPDI9rlhN6OwWXR ynpb4s/Q==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wQALg-00000004DCh-07Of; Thu, 21 May 2026 20:50:32 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1137253-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libcrypt-saltedhash-perl Debian: DAK Debian-Changes: libcrypt-saltedhash-perl_0.11-1_source.changes Debian-Source: libcrypt-saltedhash-perl Debian-Version: 0.11-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1137253: fixed in libcrypt-saltedhash-perl 0.11-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============6920068559361310561==" Message-Id: <E1wQALg-00000004DCh-07Of@fasolo.debian.org> Date: Thu, 21 May 2026 20:50:32 +0000 --===============6920068559361310561== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libcrypt-saltedhash-perl Source-Version: 0.11-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libcrypt-saltedhash-perl, which is due to be installed in the Debian FTP arch= ive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1137253@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libcrypt-saltedhash-= perl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 21 May 2026 22:29:31 +0200 Source: libcrypt-saltedhash-perl Architecture: source Version: 0.11-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1137253 Changes: libcrypt-saltedhash-perl (0.11-1) unstable; urgency=3Dmedium . * Import upstream version 0.11. - Security: Use system randomness source to generate the salt CVE-2026-4= 7372 - Security: Use constant-time comparison of hashes CVE-2026-47373 Closes: #1137253 * Add test and runtime dependency on libcrypt-sysrandom-perl. * Update years of upstream copyright. * debian/copyright: update Upstream-Contact. * Add deprecation notice to long description. * Update debian/upstream/metadata. * Update test dependencies. * Declare compliance with Debian Policy 4.7.4. * Remove =C2=ABPriority: optional=C2=BB, which is the current default. * Annotate test-only build dependencies with <!nocheck>. * Add /me to Uploaders. Checksums-Sha1: b0fc4e6facbf354bfab7ecf3056973169f4d632c 2500 libcrypt-saltedhash-perl_0.11-= 1.dsc ca51c70c8ec41079b1c90bf93d922196ca2fb17d 20179 libcrypt-saltedhash-perl_0.11= .orig.tar.gz 70178c985442b4754120c0679c03dc5b316d0af8 2752 libcrypt-saltedhash-perl_0.11-= 1.debian.tar.xz Checksums-Sha256: 1e18dcd6a04a28442afb5f1609322db76da93e2ec582a7affacbe86be5b9f3f6 2500 libcry= pt-saltedhash-perl_0.11-1.dsc 7b596ebf3f554c816b55aafdead87cf72db1b0403de7db5153be23cef9501941 20179 libcr= ypt-saltedhash-perl_0.11.orig.tar.gz 383d8f7208b7c4ce394d4c13ed854e3e6f93fe672b70b2ae35eb0b8983c9911c 2752 libcry= pt-saltedhash-perl_0.11-1.debian.tar.xz Files: 50f485cf5be5499a773450a70ae8943a 2500 perl optional libcrypt-saltedhash-perl= _0.11-1.dsc aa3051deb52f8ea1b9c3f47042203e03 20179 perl optional libcrypt-saltedhash-per= l_0.11.orig.tar.gz 237ac55be264189cb06b4db57a0a880f 2752 perl optional libcrypt-saltedhash-perl= _0.11-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmoPa8FfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgaHJw//Rf7TbYuAVLCqpxEOFL1SZ0/Fdtg9OO6G2dIIrUZ/hS5wFs81XO6OZKVU iV/ksQUsvRSrV+R8qvJe2TkRVTKbQbtcsbz5mVITBeUN6kezyeeTgeLbwJOsKNBP KyLJrg+M4ERnxdr3Cjg7QLe2cnbRHDSA4P6X863/uMvidP3L9l1QM6skuxrX0wHg tnZpIwPt0ltg1P2oZ+fflNa1DFAfN9OGV00HutJn+tLAYP+SKfm7U4Jk21CqZSli BEaFYLnJnJIyUS4bZe+029ns3DrXEy7xfmZhgcKXxuHeq7qbHOTXhRf+sFiAidVs AF9YC/1l9Jau2l14F4IS7AlsVxrQHqvPQLpaLFMMYBvjqXwWpwa1BUkTP1RXLpGh 4D+0dA0aNSccJln8lyqDKhWavCGU1LQMDpImQHIEN8eSv2R98mWkig3QxolreP0h DmLMUKVKHLpJceYOif2joLrYTIpm5MFObTWr7vF29D/RWSYcb7vDm5rmwloDjnax 03M1YmU4tyyVmIvFogiGKxuaTVtnKyWm44lZJhnhN730sq9VgwkkWganzVPukCZu MBmpZK4dyUEWuOG325gD5QjNx7Zx1MVRNl5WA4PxCvRCFKki51TcfJuD+KAckzSH LAHmoreyf75J15T5SgrFgnBixXLuhMKpBkgoOxW/oMHjWdLJ9AQ=3D =3DkNu3 -----END PGP SIGNATURE----- --===============6920068559361310561== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCag9wGAAKCRCb9qggYcy5 IaPpAP44M45l093yZlaazlr8hoHCEvVmdfHlTrrPXbpR72jqrAD/UZCH4WMtgsyi cYB0cTkcGSrPb5fuYHiA5Ok2pSwdLQc= =v/te -----END PGP SIGNATURE----- --===============6920068559361310561==-- ]