[From nobody Fri Oct 30 22:39:06 2026 Received: (at 1152633-close) by bugs.debian.org; 30 Oct 2026 22:36:12 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 107; hammy, 150; neutral, 166; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:60338) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xMvCm-005pab-0n for 1152633-close@bugs.debian.org; Fri, 30 Oct 2026 22:36:12 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xMvCm-000zTb-2t for 1152633-close@bugs.debian.org; Fri, 30 Oct 2026 22:36:11 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=6muU1HFrQ/stdRt+zk/ImeMmoEhGUaxZZpVm/QmpGiw=; b=QlqDf9bPP4CeaDA1JDtfeDwMLs KK44aSduBpyC3neWOUuRoVQNMZ4XPYmTUElZRbosup7jHKrhHwNStgUlJ5vKBtalSCWWYmaXFZABD F/ph8NsLEm5clfxG9x5D4gcv+48DLkIqvVLQCx25SkImAqScSUs9uAkKU3DGE0oPGnK9xAFBFZGQd OCrFuP93DStz3+a2sd7jocN2hnI+7JNfvrxDEL54vQuKmq6OXeM6h573PmYy+nmG5q3TRo08V9WE2 g+hTAR5D2GkGLggKcISi446yyA4g2lwGwnp81G1JDv+ta0uBCYusBvP4hDTEECPsyMJgCkLHZTtQe wETFTTNA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xMvCl-0000000Fmts-0pDt; Fri, 30 Oct 2026 22:36:11 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1152633-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libhttp-parser-xs-perl Debian: DAK Debian-Changes: libhttp-parser-xs-perl_0.18-1_source.changes Debian-Source: libhttp-parser-xs-perl Debian-Version: 0.18-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1152633: fixed in libhttp-parser-xs-perl 0.18-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1199302119862454235==" Message-Id: <E1xMvCl-0000000Fmts-0pDt@fasolo.debian.org> Date: Fri, 30 Oct 2026 22:36:11 +0000 --===============1199302119862454235== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libhttp-parser-xs-perl Source-Version: 0.18-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libhttp-parser-xs-perl, which is due to be installed in the Debian FTP archiv= e. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1152633@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libhttp-parser-xs-pe= rl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 30 Oct 2026 23:06:48 +0100 Source: libhttp-parser-xs-perl Architecture: source Version: 0.18-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1152633 Changes: libhttp-parser-xs-perl (0.18-1) unstable; urgency=3Dmedium . [ Debian Janitor ] * Update standards version to 4.6.1, no changes needed. . [ gregor herrmann ] * Import upstream version 0.18. - preserve the full URL-decoded PATH_INFO when it contains NUL bytes A.k.a. CVE-2026-116130 (closes: #1152633) * Update years of packaging copyright. * Declare compliance with Debian Policy 4.7.4. * Remove =C2=ABRules-Requires-Root: no=C2=BB, which is the current default. * Remove =C2=ABPriority: optional=C2=BB, which is the current default. * Convert debian/watch to version 5. Checksums-Sha1: 87b728b99f38f23c4b2a0b75c0d055a09d85ac58 2522 libhttp-parser-xs-perl_0.18-1.= dsc cba31bfc98418ffe0482af60dff694fbcbe15854 80192 libhttp-parser-xs-perl_0.18.o= rig.tar.gz 2f0c5ead78ddc136dedc3f939517dc182584b9d8 3596 libhttp-parser-xs-perl_0.18-1.= debian.tar.xz 9122db2e34af3827db3f86230e22229a27e07743 166204 libhttp-parser-xs-perl_0.18-= 1.git.tar.xz aa57413a9868755007e3278e5c65a049f36ab1f6 17793 libhttp-parser-xs-perl_0.18-1= _source.buildinfo Checksums-Sha256: fd3365e404df616250ef18a6df6bd93ff80630b761fe0b230d0953beed642a31 2522 libhtt= p-parser-xs-perl_0.18-1.dsc 4a3c409b40ec56b18e23c302339bff2411a66e1ed6a822412f268eb698600afd 80192 libht= tp-parser-xs-perl_0.18.orig.tar.gz eb23d04a09817dd9c9a40197bc3ce5220b0c7d07b9f9b014bbf872782dceb6b8 3596 libhtt= p-parser-xs-perl_0.18-1.debian.tar.xz 3103b2a0b0b81269b37cb56600d10f434198bfb22b5e7fdb215800645e47642b 166204 libh= ttp-parser-xs-perl_0.18-1.git.tar.xz cb4029b398874083ad3f5130b091907b61bf0c2675e1f9177868e4965349c422 17793 libht= tp-parser-xs-perl_0.18-1_source.buildinfo Files: 66fc203882545db9757d25eac5d2af79 2522 perl optional libhttp-parser-xs-perl_0= .18-1.dsc 2ed0b171dfafdfaea247c588a26611e2 80192 perl optional libhttp-parser-xs-perl_= 0.18.orig.tar.gz 78ee1faad09937c8da0d4bc1af201d65 3596 perl optional libhttp-parser-xs-perl_0= .18-1.debian.tar.xz e5148616882f3b90ed7f8badeef99f23 166204 perl None libhttp-parser-xs-perl_0.1= 8-1.git.tar.xz c46e8186bcf6cb282c2aebbb03db8874 17793 perl optional libhttp-parser-xs-perl_= 0.18-1_source.buildinfo Git-Tag-Info: tag=3D5a0e00870f00ad955ff5abadc49f87f5ea978a14 fp=3Dd1e1316e93a= 760a8104d85fabb3a68018649aa06 Git-Tag-Tagger: gregor herrmann <gregoa@debian.org> -----BEGIN PGP SIGNATURE----- iQIyBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmrlFbYACgkQYG0ITkaD wHkhMA/4xN5vXjWe+vu3gpmp04RgtZ38zRyLAi8CWMgeU9fRjj27yHjM8DE4+j9S yJ1VYF2boyNtbDruvU8V7yJApI7uoIe0yr5ym56NgPH1RcSXSbKMDfxP26U8wTSM mO2OGbgtCtrKoBiVQlFbUBn1hV6zprGtihhSRhgyEFKaOlpOf0OEVeomq1nsCz4s TfGiU7TLBWydzOyhcxVtGYPfbw7DKY+um3ZEts2LOMIjhSTzWndFLoE4LrrStoF9 lxKVxsF0GXSWfgcz4+9O66s6MjgaYaJ+iEMMGnuHrNDZ7m2Did/WMn6ZrA3HllOm IK+p/GwlVU3GHqFL5Lon42V+Ymq3mS5970WErcKmP/gvWJDW5B2mv8h6OvNOlaah 6821NR2dbBOwLv2ypu9loBUGE7zBj9Ct/MI7j1VEEOUSm8Brj27wrLBzLLNybanb PBeFd+6uKedLx8qayCkYpp1uHwDxb9LbHu2QqfPyOfveEn0znMJKd/YyReZ8ZovD EpCxD1ReAxhBHCet7bVY9mpLiWGVSFsD26kDIACKcl/jN5Vd37wvDVgJ94WaZxJd hAsKMHICx3GtwP1LfleqhFi36ci6tXIuHbKVurqHsxcwH4Z7riI4t1Xo07evbmvA k90XmdIRIB/z4amB/CY/IXj/jnrlaNnbX+VezMjthFj+VQCNiw=3D=3D =3DIehr -----END PGP SIGNATURE----- --===============1199302119862454235== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCauUb2wAKCRCb9qggYcy5 IToPAQD45yb7wyQVKvq3qdttu5yvtViCZ8H0JyU/aXzQ6lL8tAD9GD01P0bRQKE7 bqFE7Bld2RJnAO/lq+6zQwLhF2NzZwI= =Z0EU -----END PGP SIGNATURE----- --===============1199302119862454235==-- ]