libcgi-pm-perl_5.02-1_sourceonly.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 04 Nov 2026 06:53:57 +0100
Source: libcgi-pm-perl
Architecture: source
Version: 5.02-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers at lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil at debian.org>
Changes:
 libcgi-pm-perl (5.02-1) unstable; urgency=medium
 .
   * Team upload.
   * Import upstream version 5.02.
     - denial of service: CVE-2026-120631, CVE-2026-120632, CVE-2026-120650,
       CVE-2026-120651, CVE-2026-120645, CVE-2026-120646
     - header injection / response splitting: CVE-2026-120639, CVE-2026-120644,
       CVE-2026-120647
     - open redirects, and URLs/forms pointing at other hosts: CVE-2026-120633,
       CVE-2026-120638, CVE-2026-120636
     - cross site scripting: CVE-2026-120643, CVE-2026-120648
     - information disclosure: CVE-2026-120634
     - multipart parsing differentials (fields smuggled past a filtering proxy
       or WAF that parses per the RFCs): CVE-2026-120635
     - other: CVE-2026-120641, CVE-2026-120640, CVE-2026-120642,
       CVE-2026-120637
Checksums-Sha1: 
 831bf658d9d00ff2ace29626a3e928777e14bb05 2368 libcgi-pm-perl_5.02-1.dsc
 7835a3890fd72c937550c326c2dd24afea6b1289 240753 libcgi-pm-perl_5.02.orig.tar.gz
 6380f01233f9406cbf5fe5094c722151c22a4232 10924 libcgi-pm-perl_5.02-1.debian.tar.xz
Checksums-Sha256: 
 cd54b9ba5bed9eb5df035210eaa80ccfc930e63dc8002a6d7d0008135339d95f 2368 libcgi-pm-perl_5.02-1.dsc
 47637ad0413c527e00e1249d14dba0c234073ad4bef09746fafd73dd85ded665 240753 libcgi-pm-perl_5.02.orig.tar.gz
 3d2dba31405c90d0a85dd6754cac3387f48a0f13cd1e141973661274dd895cf0 10924 libcgi-pm-perl_5.02-1.debian.tar.xz
Files: 
 a8c8d04ae222bf60a239b1c729ad1cc4 2368 perl optional libcgi-pm-perl_5.02-1.dsc
 4646759262a5b2b778406e51e69b45fb 240753 perl optional libcgi-pm-perl_5.02.orig.tar.gz
 5fbd038649cb8a0dfe70c193a0c6226a 10924 perl optional libcgi-pm-perl_5.02-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=BCeG
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20261104/0eeccdf6/attachment.sig>