Bug#1151222: perl: CVE-2026-7017-5.diff in trixie has wrong paths

Niko Tyni ntyni at debian.org
Sun Oct 18 14:18:20 BST 2026


Package: perl
Version: 5.40.1-6+deb13u1
Tags: trixie

As noticed by Arnaud Rebillout, the test files in CVE-2026-7017-5.diff
of trixie security update 5.40.1-6+deb13u1 are installed in a wrong
directory.

  HTTP-Tiny/corpus/redirect-23.txt
  HTTP-Tiny/corpus/redirect-24.txt 

Also, new test files need to be added to MANIFEST to work.

The actual security fixes were applied correctly, so this is just a test
suite issue. It can be fixed if/when there's another trixie update.
-- 
Niko Tyni	ntyni at debian.org



More information about the Perl-maintainers mailing list