[From nobody Mon Jul 6 21:27:06 2026 Received: (at 1136091-close) by bugs.debian.org; 6 Jul 2026 20:24:16 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 96; hammy, 150; neutral, 177; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:60368) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wgprU-007bbU-1X for 1136091-close@bugs.debian.org; Mon, 06 Jul 2026 20:24:16 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wgprV-002IVT-02 for 1136091-close@bugs.debian.org; Mon, 06 Jul 2026 20:24:16 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=gfbPC1cCBMoC7Z/uBLUrGKt1ixxhe1pha/W1z/EJrqo=; b=W65uGNmJIfqyzwynfM26zXTZOV z1zUW6nDtcA02cZrV4+Yh+Wuvd3TmMcPvN+sLspyVak02XsYGUiCPeUg4QqgkgcsMTF1nFv3FqxV0 qT9iLQVqMKQasMkzPQODLQ4kYGv1oBWEb0be3MZSl+HgM3GWVuzUV3wP9yVr5WAwuGUQnPPDX5mDQ aLJZ3sOIjpJy4R/nBlvue+a/bhETQQ8anR8cyLFowbDb4AogKcpEpe2rcN2QUFO4QwvmbA61iX1qL fRcgRHoQBKbkDlEaJiOZURw+RRLpSroY4hDM51hV7QjUIQ0BhCEGSZkXST0zV8M0s7iVvlTZ9CueQ IvAlur7w==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wgprT-00000002hAB-0tdF; Mon, 06 Jul 2026 20:24:15 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1136091-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libcrypt-passwdmd5-perl Debian: DAK Debian-Changes: libcrypt-passwdmd5-perl_1.44-1_source.changes Debian-Source: libcrypt-passwdmd5-perl Debian-Version: 1.44-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1136091: fixed in libcrypt-passwdmd5-perl 1.44-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1432637115849609639==" Message-Id: <E1wgprT-00000002hAB-0tdF@fasolo.debian.org> Date: Mon, 06 Jul 2026 20:24:15 +0000 --===============1432637115849609639== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libcrypt-passwdmd5-perl Source-Version: 1.44-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libcrypt-passwdmd5-perl, which is due to be installed in the Debian FTP archi= ve. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1136091@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libcrypt-passwdmd5-p= erl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 06 Jul 2026 21:43:40 +0200 Source: libcrypt-passwdmd5-perl Architecture: source Version: 1.44-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1136091 Changes: libcrypt-passwdmd5-perl (1.44-1) unstable; urgency=3Dmedium . * Team upload. . * Remove libmodule-build-perl from Build-Depends. This distribution uses ExtUtils::MakeMaker. . * Import upstream version 1.44. - Accept pull request from Paul Howarth to replace use of the cryptographically weak rand() function with the much stronger Crypt::URandom::urandom(). CVE-2026-6659 Closes: #1136091 * New dependency: libcrypt-urandom-perl. * Install new upstream document. * Declare compliance with Debian Policy 4.7.4. * Remove =C2=ABRules-Requires-Root: no=C2=BB, which is the current default. * Remove =C2=ABPriority: optional=C2=BB, which is the current default. * Annotate test-only build dependencies with <!nocheck>. * Set upstream metadata fields: Security-Contact. Checksums-Sha1: 6cc7706333587a40208d993b0f5c26583641395c 2450 libcrypt-passwdmd5-perl_1.44-1= .dsc f8ce01f885df845dfb4d8c625b0edbc91f5c61c7 11819 libcrypt-passwdmd5-perl_1.44.= orig.tar.gz e4ab8f23791410590df3ff19a9b3ce66818ccc4f 3532 libcrypt-passwdmd5-perl_1.44-1= .debian.tar.xz Checksums-Sha256: 635f0cb53c72eb4a13295095e63485d9884a07c9637945770ce5d728ef82fee4 2450 libcry= pt-passwdmd5-perl_1.44-1.dsc 136e4f56d291fba61ce9857f3bab3f653106ddbb8cc930543359598d83e40ce7 11819 libcr= ypt-passwdmd5-perl_1.44.orig.tar.gz 507a55c09cd0d996ebecdfa52cc2a9d4555a8b568d62e00638d6d178b244c0d0 3532 libcry= pt-passwdmd5-perl_1.44-1.debian.tar.xz Files: 9133bc8c46139059a3ed7589b22d601a 2450 perl optional libcrypt-passwdmd5-perl_= 1.44-1.dsc 0dbac4dbb09b5f2f17dfdaa1ad2cb25f 11819 perl optional libcrypt-passwdmd5-perl= _1.44.orig.tar.gz 181247fdab13dcd1a9e7e2e6bffad037 3532 perl optional libcrypt-passwdmd5-perl_= 1.44-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmpMBkFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgaCMg/+JGW6fIxUZ9ZnLmGAMBn4KeXluvaNzTZiixYhO5LKVa34nyyhnp0ZVRSa oUYNbzQgCHNplhgxqOGH4cS6NUGA9y3SLipm96cWIU0pZkAPkbEpLlpV5ufFHr0g zeICjRmzHGFF51QHBqdKSYdqs071ijNYKI46yTn6GvDywJYNNKhrRwb0hj6KGbKW ESBkTlrum44WRYpA/FD9+mzkX+ENgxeTiGCfu9yXdUJh6N+h6zO1tjDwkkDq/DHe +mnbOrEqGt9o+MQ86SvL2aTpsU9MqM461mL9lYEysMeYrRaT9ah9B8s5mqqNkTFp oy54cRkRO1neysu9BmlcVvg+pR4gZLnuOTF22UCYu6LfLq26sofSv99QMyXWzdo/ KiqQbVMxfMz/dMOTh5O7fjFBuSsZSv1zht6DPs/lxYA+kIMgJLS0x+JOeVT8+VEE 0uXADHAGHBiEDMEhChrX3w8tSkTI9GP+S74hjUcAF+8owtGDe5qHhzg3BRtqXHjR vk3ZPtAOJ4toAjAs9qQxfKKPiX7mILShcPcfPU3Yn7U+w6V/D1AR4v8MbhNuC4VA dBExZACTSG3Bt8IkjLZg8fFhCWaJ0gk7u3HV7p+/ISpFC/e02YyJfQEfxEdNxFWH g+5RnOYqdi2g/QNaeCKnYDzvZtj4VNiY6grvpfopRFM54oUPLsU=3D =3DtPVh -----END PGP SIGNATURE----- --===============1432637115849609639== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCakwO7wAKCRCb9qggYcy5 IQ1IAQCMCsQhEUAGa9YYqGSrw4fnx2jGae3O+c1K1/cmjZhYYAD/ZIKBabubBQMD gvHykBq1ytX41+TqekgsJWGQfUlcHw0= =gGcE -----END PGP SIGNATURE----- --===============1432637115849609639==-- ]