[From nobody Wed Jul 1 16:21:06 2026 Received: (at 1141197-close) by bugs.debian.org; 1 Jul 2026 15:19:22 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 103; hammy, 150; neutral, 153; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:35596) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wewig-00AFGe-0a for 1141197-close@bugs.debian.org; Wed, 01 Jul 2026 15:19:22 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wewig-00HKFT-0L for 1141197-close@bugs.debian.org; Wed, 01 Jul 2026 15:19:22 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=4p3Kw1S4fFXdPy/7xr2412Occb3nqaWCU3v/BrEFCmo=; b=i+81YiQ2nQ+iH6kIavuTUYJ+v1 BwwKb5u9w1jg6ATdaWEJBkUbOLOAb+e0bHlhfQ2bNMLmpHRVDnyDZJlxDb0AfmNzNd9b7KP2BO21c Uw1DSomcvBBljm3orPHUHXEz4Jim7gKMOICPa6o58Lr22nvcqoCXSPU2m20xxGQ63FfReqlIY2M++ /mGgGck1dK/E0jrDki7pj9002XfyZNm2p9f2AVyhC0eMggjf7jp5/6GrCEn+icvehs6pRE7LfTPYR S1dkEM34wlWXnrcFakoVCoj+nukN2+8RX/9uP7Y1/TkXEGyMd3bHdgeUroC5vt5plDTydt5K2Gr+l srXEPYcQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wewif-0000000Dhfp-18Ks; Wed, 01 Jul 2026 15:19:21 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1141197-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libcgi-session-perl Debian: DAK Debian-Changes: libcgi-session-perl_4.49-1_source.changes Debian-Source: libcgi-session-perl Debian-Version: 4.49-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1141197: fixed in libcgi-session-perl 4.49-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5250125282694005876==" Message-Id: <E1wewif-0000000Dhfp-18Ks@fasolo.debian.org> Date: Wed, 01 Jul 2026 15:19:21 +0000 --===============5250125282694005876== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libcgi-session-perl Source-Version: 4.49-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libcgi-session-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1141197@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libcgi-session-perl = package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 01 Jul 2026 16:50:56 +0200 Source: libcgi-session-perl Architecture: source Version: 4.49-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1141197 Changes: libcgi-session-perl (4.49-1) unstable; urgency=3Dmedium . * Import upstream version 4.49. - SECURITY: Strengthen cryptographic randomness of MD5 driver, CVE-2026-56016 Closes: #1141197 * Add test and runtime dependency on libcrypt-sysrandom-perl for the new randomness generation. * Remove test data only via dh_clean. * Update years of packaging copyright. * Declare compliance with Debian Policy 4.7.4. * Remove =C2=ABPriority: optional=C2=BB, which is the current default. * Drop outdated alternative dependencies. * Annotate test-only build dependencies with <!nocheck>. Checksums-Sha1: 7c2bd8bd9016e646ad7b182bd50e131030a804c1 2609 libcgi-session-perl_4.49-1.dsc 7a2aeea23905c8593daf89d2364044bbb3364a1b 92674 libcgi-session-perl_4.49.orig= .tar.gz 08c8d1a03e184bc62242e6cd7ec9b823775e750e 5904 libcgi-session-perl_4.49-1.deb= ian.tar.xz Checksums-Sha256: a4b810092721c1dab9b16d05ace7326c7e6bf395083627f38923d4634add0a67 2609 libcgi= -session-perl_4.49-1.dsc 5fd88a830a35f54526787f036ae5e4a7d14b61c414cd29ad8631bf46e6971207 92674 libcg= i-session-perl_4.49.orig.tar.gz 48be4cc4213854e52e4ce984d5ca177154b8d419acb0775237330465b421270a 5904 libcgi= -session-perl_4.49-1.debian.tar.xz Files: 6dbcc9ca6c8759acbba09ce0d343a380 2609 perl optional libcgi-session-perl_4.49= -1.dsc 9c2613f4066495195ee16cdaa9e08166 92674 perl optional libcgi-session-perl_4.4= 9.orig.tar.gz 3be59525eb79bed3ed7109a5355be15b 5904 perl optional libcgi-session-perl_4.49= -1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmpFKnlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgavHQ/9HmWXv0k7QTLecXWYzjPe3hZvMIsPNTu5ibgjrS/Op4cIcTGW8kW55uQH 8RmUpGxEdmL+BafYdRjGAekb/hHjPYUa0BV8ZDRDwipHNF04bbKQIaNlc2No3D7E vqZNzSGqNHTs5BENMukrPUUkcXk+86YG24uQ0PQldqepYGfvSOsTCHhmkQBkbSU9 doFMjR9eKow0yscjt+yvyc7Usj5ZKwzMbMXVfg/J7HmrDtOzb04/53BHifUqWIMf JJTS+qV8z4sPUYqV+t8huy3AzCZSh7HsRW8GHyk/YzgPc+6tg/LS0XY16uPQtNqu CVLaNSTYOQesHNQY2yJyNvzPBKPmz/Lh/pJYJktUnwLt1sXD4qgnf6fG98e2HX48 tMvHTWOtkg8tli93eLZllfB+URXtJ+i/hWYeyXlnleYJJbewqnJw80cVW8gC40es AlaBloH60TZVTdV/X0NxE2ZEQXISMe2nJbxof2NVsnr5cEVapr+bst5GgaXQX1xr 8iTBwjqj6ncJE+DR6Ru7fpiGfZRKmE9GkDTqpn53530cxCzBziuwnoRINR6NoAXu kxaWiOcaw+HwlpHZYrlJaag3hWupKAFGmb6yGtyLVBGRe+15o3KLpgmYA4yi5qmt 2BhSXAVaZNhumx9+HeiDXcHjGS4MCj8wkYiRQ6C2xl2ph0RpXQ0=3D =3DeSVz -----END PGP SIGNATURE----- --===============5250125282694005876== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCakUv+QAKCRCb9qggYcy5 IeQ9AQDliah3mCvv5bGTvpdMvTvnjqeT1DCNTZA06M4BOqFq7wD/YB1L5+TZ7BDH SSTmg+iX0mzmyOg+ukLRLw5MVeYD5AE= =ScmL -----END PGP SIGNATURE----- --===============5250125282694005876==-- ]