[From nobody Mon Jul 6 20:21:07 2026 Received: (at 1141586-close) by bugs.debian.org; 6 Jul 2026 19:18:42 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 87; hammy, 150; neutral, 142; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:59876) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wgoq2-007QbP-1x for 1141586-close@bugs.debian.org; Mon, 06 Jul 2026 19:18:42 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wgoq2-002F2T-10 for 1141586-close@bugs.debian.org; Mon, 06 Jul 2026 19:18:42 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=f8YfKXzCMBlLt9TTDVxQgYfqu6RrBhXfazBYBYQQOHA=; b=XWiFVgC0hT7hPBu+kquTjyse3V CgylTZCNY9UdoY3LHjENBbYxbZ1kAX2eDDzC5hlATI4euDHTIcWzEFt4RV+sf3B9kHQLlxsfpHUnc Fiffv0wPaaPNN41eAizPTEkElgBS1ICjgcd3Vs2/x0vLtSzSn4oio0+k/CDwY7CC4dbFbA69s+2/q iUOnrpxlpXMmV1HfHmwmNd7S2nBD3JWKnJZap82JKwdYUHbV1NyeMNq7tnBI3OECEHEyX5vcBN3cK mOdxALenUVhybtn72XveS+b+d6UA4H9OwnXT8Ts9CEO43qRwkl/HhHWyi2pDjuJeuuZqv1Act27Kh Fsf8O83Q==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wgoq0-00000002KId-0Uhe; Mon, 06 Jul 2026 19:18:40 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1141586-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libmojolicious-perl Debian: DAK Debian-Changes: libmojolicious-perl_9.47+dfsg-1_source.changes Debian-Source: libmojolicious-perl Debian-Version: 9.47+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1141586: fixed in libmojolicious-perl 9.47+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============4053786196377065879==" Message-Id: <E1wgoq0-00000002KId-0Uhe@fasolo.debian.org> Date: Mon, 06 Jul 2026 19:18:40 +0000 --===============4053786196377065879== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libmojolicious-perl Source-Version: 9.47+dfsg-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libmojolicious-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1141586@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libmojolicious-perl = package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 06 Jul 2026 20:57:50 +0200 Source: libmojolicious-perl Architecture: source Version: 9.47+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1141586 Changes: libmojolicious-perl (9.47+dfsg-1) unstable; urgency=3Dmedium . * Import upstream version 9.47+dfsg. - Fixed a security issue where the pure-Perl implementation of Mojo::JSON could exhaust all available memory when decoding deeply nested data. Decoding is now limited to 512 levels of nesting, to match the default of Cpanel::JSON::XS. CVE-2026-14803 Closes: #1141586 * Update years of upstream copyright. Checksums-Sha1: cff022e9ce1afefe1c27c16f159356d1aae9ec2a 2884 libmojolicious-perl_9.47+dfsg-= 1.dsc 1c716274e6c08a68ddfbf4beeb1e6a1ced1e5215 621588 libmojolicious-perl_9.47+dfs= g.orig.tar.xz 90b735216b00c60bcc6c1326a63028b294550502 18504 libmojolicious-perl_9.47+dfsg= -1.debian.tar.xz Checksums-Sha256: 48551b31d447093e742be25bdab89975efec76320999dd253f2d186cd38d377c 2884 libmoj= olicious-perl_9.47+dfsg-1.dsc dc9980820fb676f3b81a1a0ab143e280ee5efd7a129a62f8927c97e446cb724d 621588 libm= ojolicious-perl_9.47+dfsg.orig.tar.xz 4618ad0d4a32b86d57342611881afa85dbc39e4347c207348c87aebcefc909f5 18504 libmo= jolicious-perl_9.47+dfsg-1.debian.tar.xz Files: e80edaad4c328929ef82f0fa1a797aab 2884 perl optional libmojolicious-perl_9.47= +dfsg-1.dsc 24dca4e8e909b34831bd82ca28731b12 621588 perl optional libmojolicious-perl_9.= 47+dfsg.orig.tar.xz 2f23328c1d633552007b22d48915763f 18504 perl optional libmojolicious-perl_9.4= 7+dfsg-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmpL+9xfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgaBdw//b7DftdxHIt6BmxR8bLaOSZSlaWIR5ZfVKcTtSc/qztQjLaFN/hyeGU3P ov7q+e5fXlFRzlHxdXp/gWrFinoHGgienIZcMMbf22SYY1Bw2QKb7JBlQtc2Ecwf zMxAelKoV9DhiIYMGDR2hlFo5nzevVYjJWLW/XlS0ng5OvoAxlJJk1TE2dubm1Tv g9Iq0VvLnnjTZ0TvDhjslk8FhJWD86bQ9idvWkO25BVsZ0zoc7/4Mi/6L4vUf0wE W0JdgpzHl5gqkBeFH7sQIX4YeUH+34Z5e0QNyxselsiQmZGfF2q/GYs26pF/Ga5D qrim4hsKbrzaTkOeLOc5MiP/Q4ZBRDD/cjMhQ1joVvUhBesV4yB6XOscmy5KpAPY bmp0z2qBo8RYqmUX1ZsCJVvQ57Hs8HvDLrFHIU1Z916beQqrLMkQJVKAsq3H2xhK rJFO2RzQMIaYb+Ofnn8A4Y4XRoxNfm8xL3HboN+aMOPlE91+OgUnWBaZh4ZdHn2M 03v0HshzhudHpz88TDkKu8fqY1QQ5XX9R+QJduSZbaThyrN9HeQULcS3oFDbNla9 Iec7CBgOn45oA9EyjrtDU7YyYOIBRvjksANOnIuNUZ44IqoeDCBlPDdYPIg7RzcP ca87uYKQlrf0iUxocer35YTswJGsOS2Ec1jfNSsam0OJlBcRYWc=3D =3DkGWp -----END PGP SIGNATURE----- --===============4053786196377065879== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCakv/kAAKCRCb9qggYcy5 IYcHAP0cWMOq9hiYeTd7jhBedApE1mogiwDViOXjKgpaQpJSRgEAhQtvU+te9mD4 Sez5FSQGjXWDBemaStw6SM34j31iUwo= =gJ8L -----END PGP SIGNATURE----- --===============4053786196377065879==-- ]