[From nobody Sat May 23 00:10:04 2026 Received: (at 1137325-close) by bugs.debian.org; 22 May 2026 23:09:20 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 99; hammy, 150; neutral, 146; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:38656) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wQYzY-00GhtA-21 for 1137325-close@bugs.debian.org; Fri, 22 May 2026 23:09:20 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wQYzX-006fzf-03 for 1137325-close@bugs.debian.org; Fri, 22 May 2026 23:09:19 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=L6HTV/Lhxvrs4tWw4BRsCm0cCWtGkLeyldoxKdzVXoQ=; b=VhglySa0NrS1nNJqpTYcfUVhhb qi68uH9ieNUKQ8LIZ/9XBk9ZYMb6S2ylzzoDd3YUP9XV0KXLwdZoK0YLfjWF4atXFmeat///6YKeW H/ne3dBe/BM7YmDe4CTOu+yS/bs+8+3rZrzLtFQrkEU152n/EilQ7i7IX9B3YGwLV0HzJcPK+chWC b05LyibhEJXkwa9F1D+vuEx0/2NCqb0h6K+qFeLW6kl17RroM5NC66OQ+q4wNvxN/lbGcuEaWYlcR qcnlQzN0PEoMSXOV3Kxim8TfbLZuI1MYrJOEs+q45FfVW6LJetxAoqAn4UIImNIrBwU8GRADpRhiw bV+P9Ygg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wQYzV-00000008w64-3Wjt; Fri, 22 May 2026 23:09:17 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1137325-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libcatalyst-plugin-authentication-perl Debian: DAK Debian-Changes: libcatalyst-plugin-authentication-perl_0.10026-1_source.changes Debian-Source: libcatalyst-plugin-authentication-perl Debian-Version: 0.10026-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1137325: fixed in libcatalyst-plugin-authentication-perl 0.10026-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3842878732266511735==" Message-Id: <E1wQYzV-00000008w64-3Wjt@fasolo.debian.org> Date: Fri, 22 May 2026 23:09:17 +0000 --===============3842878732266511735== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libcatalyst-plugin-authentication-perl Source-Version: 0.10026-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libcatalyst-plugin-authentication-perl, which is due to be installed in the D= ebian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1137325@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libcatalyst-plugin-a= uthentication-perl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 23 May 2026 00:50:21 +0200 Source: libcatalyst-plugin-authentication-perl Architecture: source Version: 0.10026-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1137325 Changes: libcatalyst-plugin-authentication-perl (0.10026-1) unstable; urgency=3Dmedium . * Team upload. * Import upstream version 0.10026. - fix password comparison to avoid timing attacks (CVE-2026-5091) Closes: #1137325 * Update years of upstream copyright. * Refresh pod-spelling.patch (offset). * Declare compliance with Debian Policy 4.7.4. * Remove =C2=ABRules-Requires-Root: no=C2=BB, which is the current default. * Remove =C2=ABPriority: optional=C2=BB, which is the current default. Checksums-Sha1: eb0c72ae13a009a903c95c297fc478f344502d19 2960 libcatalyst-plugin-authenticat= ion-perl_0.10026-1.dsc a1e4eb0d31ed653f85db99965f05c79910947be1 62772 libcatalyst-plugin-authentica= tion-perl_0.10026.orig.tar.gz 0d6543b5eda7459969e6e2e44d6cdb80053dfbb0 3636 libcatalyst-plugin-authenticat= ion-perl_0.10026-1.debian.tar.xz Checksums-Sha256: 9eaea815dcf8e3347b3d1079f735e4abd3cc915d3e0ddbbee90d3bba3ce75b44 2960 libcat= alyst-plugin-authentication-perl_0.10026-1.dsc fed60a17b3ad3e7a5a65284a1444ecc33d9aacb94f7cd740a166fc9a236b625d 62772 libca= talyst-plugin-authentication-perl_0.10026.orig.tar.gz c572ec2e47f761dbd02477d14b131b4253861b2e931127de335b39b5eb0da3f0 3636 libcat= alyst-plugin-authentication-perl_0.10026-1.debian.tar.xz Files: 9e8396e73cf062628a331a6e925e7c35 2960 perl optional libcatalyst-plugin-authe= ntication-perl_0.10026-1.dsc 1f57ac3f5b7b7fd7d03165ba4cf243c0 62772 perl optional libcatalyst-plugin-auth= entication-perl_0.10026.orig.tar.gz 73e98e49c19ca041ca0c708fe203ed6d 3636 perl optional libcatalyst-plugin-authe= ntication-perl_0.10026-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmoQ3mNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgbPvg//R3zY1Y395XkppSJP+k90HKsDzBztG33KLl4l/AZTZXPjNNqHuTOA4Xxh S1oJXKmfwkP1LzN+7sTU3xf3T9O/2A/TR8yz0dA8qPOq4qPbeWvVSSgR9qtsl7dT VgoFj9WR5/xtLCL33CaSohjV+VruE64LHRbI/4eEyAFmXgvtJggXOglS8F8bBhhm 3KLrGmmmS1u0KYNHrswr2RIskeECqwQHApMcQcZrGkZGmsOtpF10KMb0ub+vhEgZ FCmn3JAejjJukHGMkXJM9EJQy3/cNSM4aqlK2FHGIPhygogLoP63K4AgHVWCCfJU ylBoUNomWGAOGwVFb8mo3XQSzqqRxSfWJATf5TLVKGVXoImZ9zq3XTZ3AHKuWn6u meAtkpNVfcE/v9SqkGWimsutxJ6kfLA2fwC8z1z1bHIOmnIJh44+GNXXlkFrMTFM iE0QNinRMSw8WaNOlFM1QJIWHijbU2unIC+mCQMyGVLZ0uXz+XqU4qTiLh2Z4D2Q 1j1lMEj9iftAjBcJIWmmpQdi4lJEm5TSKZaM5CJ0BF2Rftu8ca5wPQG2Z05WHtCM xPjU90DHeasG23Mrt9F+DKXu8Uwxnr1VH/3WrDqV7Lmz3YQraq4rJG5ZozNXac/U iKhwjW0JWftdbumhIxer9/F15hbu6UzxRVD0FFJbsInu3J/7lPM=3D =3DcmJp -----END PGP SIGNATURE----- --===============3842878732266511735== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCahDiHQAKCRCb9qggYcy5 IVO+AP4sVAzMSdigylj1FhiEAheyWjx/Lmt/JRgr7YRC4BAinAEAlxfB8SeyvueY W3XQdyZ46AOfeJUOEaRsDUd/gSNPKAM= =TWI3 -----END PGP SIGNATURE----- --===============3842878732266511735==-- ]