Accepted perl 5.42.3-1 (source) into unstable

[Debian FTP Masters]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384

Format: 1.8
Date: Mon, 17 Aug 2026 22:59:18 +0300
Source: perl
Architecture: source
Version: 5.42.3-1
Distribution: unstable
Urgency: medium
Maintainer: Niko Tyni <ntyni at debian.org>
Changed-By: Niko Tyni <ntyni at debian.org>
Closes: 1138859 1138860 1138861 1140152 1141639 1142037
Changes:
 perl (5.42.3-1) unstable; urgency=medium
 .
   * Update to new upstream version 5.42.3.
   * [SECURITY] includes various upstream fixes:
     + CVE-2026-7017: HTTP::Tiny credential forwarding on redirects.
         (Closes: #1141639)
     + CVE-2026-9538: Archive::Tar memory exhaustion.
         (Closes: #1138861)
     + CVE-2026-42496: Archive::Tar symlink extraction.
         (Closes: #1138860)
     + CVE-2026-42497: Archive::Tar hardlink extraction.
         (Closes: #1138859)
     + CVE-2026-12087: Socket: pack_ip_mreq_source() out-of-bounds heap read.
         (Closes: #1140152)
     + CVE-2026-13221: silently incorrect regular expression matches.
         (Closes: #1142037)
   * Refresh cross support files for all architectures.
     + also update the architecture lists in d/cross/README
   * Disable salsa-ci.yml as nobody currently cares about the results.
   * Update debian/copyright based on DFSG team review.
Checksums-Sha1:
 a312494e84f08a1bd4a29edeae6dd7af59e06b1c 2372 perl_5.42.3-1.dsc
 1dcede801d09bd47ad351fb4d6280edd879772ed 421372 perl_5.42.3.orig-regen-configure.tar.xz
 1d878802a55eacc778bb1d84b1f1b8ab9b22cc96 14495300 perl_5.42.3.orig.tar.xz
 5d3bc13b5f9b7b0a8093a466e26f37003c922a34 168064 perl_5.42.3-1.debian.tar.xz
 c533e6406fe5a3ab42f5a5814a4f5bbe61fc0435 5338 perl_5.42.3-1_source.buildinfo
Checksums-Sha256:
 36535968b24b1f73ce1cf980208017dbe4a38bff5b501cd752e82139206282f7 2372 perl_5.42.3-1.dsc
 5ae2aea5bc800c05324e4c9b166391b17368d10300c036fbe45f8c23a799c355 421372 perl_5.42.3.orig-regen-configure.tar.xz
 c9387e1473a1866935cb047ece7c2e0a80767a3acdecb79d4a375f8a95970ddc 14495300 perl_5.42.3.orig.tar.xz
 0b5692654b3efe8be7e469be851ac8abf6a425bba7c2be5a29a0d553a450956f 168064 perl_5.42.3-1.debian.tar.xz
 71408f9f725faa3539ed2d98c1b0f269a4f4d8064daebd44cb891fa0aff2cee4 5338 perl_5.42.3-1_source.buildinfo
Files:
 20b760b76e6048cab15d794225bbb2fb 2372 perl standard perl_5.42.3-1.dsc
 78cfa5d6df88d464bb118092b5722419 421372 perl standard perl_5.42.3.orig-regen-configure.tar.xz
 fb96e6cf064bf374e84ef232b0eda5c1 14495300 perl standard perl_5.42.3.orig.tar.xz
 c03a130c2f86e55c9eb492a835f0a4cf 168064 perl standard perl_5.42.3-1.debian.tar.xz
 1ac4284e689b699f60caca7504d2e3e7 5338 perl standard perl_5.42.3-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iKcEARMJAC8WIQTuZv2Xfg2x/uVxefeK/rNkDrE5sgUCaoNvcxEcbnR5bmlAZGVi
aWFuLm9yZwAKCRCK/rNkDrE5srEgAX0RXoXPd0TqEsji+TWA40DTRHIvi9ctyYY/
QA5rNIMgACSGInRTA9LfgfGxHVz828IBgK4HCkE8j9XTfT5LwEGP2a0kwmoCEULu
U9DCNBdol5tJx8F0xbiRPCADcrM7ZZAxhg==
=GdB3
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/perl-maintainers/attachments/20260817/3a6f4b2c/attachment-0001.sig>