[From nobody Sun Jun 21 20:23:04 2026 Received: (at 1138050-close) by bugs.debian.org; 21 Jun 2026 19:20:05 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 68; hammy, 150; neutral, 147; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:53528) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wbNi9-00DD6m-0F for 1138050-close@bugs.debian.org; Sun, 21 Jun 2026 19:20:05 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wbNi7-006gWi-2a for 1138050-close@bugs.debian.org; Sun, 21 Jun 2026 19:20:03 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=htB6qcBl0OIW/oUQmn6VH0bA+12E5rsI6+A4H/LkeYA=; b=X6hkLVr1C4QowryuW9Hgg/wyGR AeOJC2FhQ2zh6hp7m+d1pG4kgoOxHTGdE8cQQmtUhAj06EzGC/RdMI1zr4eZuMHStm+Rxbs3hHsDh XxSkOT4YaViGz5baT+Y++JB92tfWKND75gU1iTu+W6g+up5UKpLbZKn1jAzUajddg4J6iiHIB87FP MB8vrkjoqnBjF9GpY3dQlvtzll9bjM6/j6T6dHoj+mdog8hlTRIPMyhORiX4vC6/z136adUCIAz35 Pjtq6h904D1Xt6egDxtw6gm55/BMzxTIk8juK5a0GLNB+eDPGVcn45w/GPdqxnTFxq7MJcnwB9oPT mCzrG0pQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wbNi6-00000004rY1-3eYp; Sun, 21 Jun 2026 19:20:02 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Salvatore Bonaccorso <carnil@debian.org> To: 1138050-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: libhttp-daemon-perl Debian: DAK Debian-Changes: libhttp-daemon-perl_6.16-1+deb13u1~deb12u1_sourceonly.changes Debian-Source: libhttp-daemon-perl Debian-Version: 6.16-1+deb13u1~deb12u1 Debian-Architecture: source Debian-Suite: oldstable-proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1138050: fixed in libhttp-daemon-perl 6.16-1+deb13u1~deb12u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8364940384173305790==" Message-Id: <E1wbNi6-00000004rY1-3eYp@fasolo.debian.org> Date: Sun, 21 Jun 2026 19:20:02 +0000 --===============8364940384173305790== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libhttp-daemon-perl Source-Version: 6.16-1+deb13u1~deb12u1 Done: Salvatore Bonaccorso <carnil@debian.org> We believe that the bug you reported is fixed in the latest version of libhttp-daemon-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1138050@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated libhttp-daemon-= perl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 20 Jun 2026 23:18:21 +0200 Source: libhttp-daemon-perl Architecture: source Version: 6.16-1+deb13u1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1138050 Changes: libhttp-daemon-perl (6.16-1+deb13u1~deb12u1) bookworm-security; urgency=3Dhi= gh . * Team upload. * Rebuild for bookworm-security . libhttp-daemon-perl (6.16-1+deb13u1) trixie-security; urgency=3Dhigh . * Team upload. * Fix CVE-2026-8450: send_file() honoured 2-arg open() shell-magic (Closes: #1138050) * Add regression test for send_file() shell-magic refusal Checksums-Sha1:=20 8f47d4cd1e189601e9fa9a99070afd018e232bd3 2641 libhttp-daemon-perl_6.16-1+deb= 13u1~deb12u1.dsc da0ccc30d999f2fb30f9921226a8d0fdf03476d3 7864 libhttp-daemon-perl_6.16-1+deb= 13u1~deb12u1.debian.tar.xz Checksums-Sha256:=20 a4f7593fa91003d6aa93be8123c9c26ca874237fd037279ad34e262a0faaf838 2641 libhtt= p-daemon-perl_6.16-1+deb13u1~deb12u1.dsc 77e8a57a8e6321b2602d69e056944126ffaeebf955cdb2254a86c316a2b4623e 7864 libhtt= p-daemon-perl_6.16-1+deb13u1~deb12u1.debian.tar.xz Files:=20 c81c116bd397cdce197d06c5ec3999f7 2641 perl optional libhttp-daemon-perl_6.16= -1+deb13u1~deb12u1.dsc 9512ee46c1cc20cdc38012b18752c620 7864 perl optional libhttp-daemon-perl_6.16= -1+deb13u1~deb12u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmo3dw5fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89E0kMQAJCOhXPom8hfUCEHFHfz17ScF26285tj Kwk9Ic/+HSH984OwvEdW+6QhTIIvwBO3X6Uk/P1ujIZJ6FLevADuKKva98O1Xmyb +FpPs/qUUiZitIprLOzp8BpRDdEgQ0EOYmup5TEPHTU67OzwP6dH6TihORI4CgpW bU162iEYiGmayGw5n2HuRE5vlNAFvVApgu/JlWPgHRWL8+QRmGhvaChOiJ15v6iF hFX5eTZzdyObZDAwcRSEKyZrHhYmHVzsrn8The56NQHc79wYCnOm8YtEtu1+PqD/ vn8VkwTenr7wO3jYny3QkWQI8rlqpEjzuLQADb0Bj6vB6WXZAewYddAE+XM7aKIf DHfku5rvLRnbjqbWzWOZXhdkXLdCSrrmTqTnG5eMXlW64jQGXhduZPmRCfufow0Z oYvIIk8/PdlSWcf6cNE9klV5zxKgp4milM/2llg553ADwki4dMVsx7AH1GsFV13D pPNl+XTYq4R+S0tuZkSKHADDRCBous5mpcz9pxwFLQp2t6D17Xja8SsQqGYTqBR5 w8fNqg8FV0zTPsKE935M0+DDYEuGMQkSpyH9K8WQyaIZJ5nNfPVuAko+CG5mkRSt R+golI1WuwOIUYhkn4p+WYHvvUMWneA3T13S0OS1jm6EPUyutmkejdcjKJcGbVC0 vF5FlL2L0eby =3DfNf9 -----END PGP SIGNATURE----- --===============8364940384173305790== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCajg5YgAKCRCb9qggYcy5 IYhsAP0RWwcNKGwG7jC7JgELgblN/JNCFIR+fVlNTNDRkucLuQD/Uq9sJ3Q14FKe yQBesAqeeaXQhiOBBIf+s203oCQ6Zw4= =5S7I -----END PGP SIGNATURE----- --===============8364940384173305790==-- ]