perl (5.44.0-1) [PTS] [DDPO]

OLD: VCS is behind the version in the archive: 5.40.1-8 < 5.44.0-1.

Git: https://salsa.debian.org/perl-team/interpreter/perl.git
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian-5.40
Path: debian/changelog
Repo size: 15171584
Browser: https://salsa.debian.org/perl-team/interpreter/perl
Last scan: 2026-09-14 02:00:03+00
Error: https://salsa.debian.org/api/v4/projects/perl-team%2Finterpreter%2Fperl API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.
Next scan: 2026-09-19 04:10:00+00

Debian changelog in Git:

perl (5.40.1-8) unstable; urgency=medium

  * [SECURITY] backport various fixes from upstream:
    + CVE-2025-15649: header parsing in IO::Uncompress::Unzip.
        (Closes: #1138863)
    + CVE-2026-7010:  CRLF-validation in HTTP::Tiny.
        (Closes: #1138858)
    + CVE-2026-8376:  Buffer overflow in Perl_study_chunk.
        (Closes: #1137345)
    + CVE-2026-48959: CPU exhaustion in IO::Uncompress::Unzip.
        (Closes: #1138856)
    + CVE-2026-48961: crash in zipdetails.
        (Closes: #1138855)
    + CVE-2026-48962: code execution in IO-Compress via output globs.
        (Closes: #1138854)
    + buffer overflows in pack().
        (Closes: #1138905)
    + buffer overflow in Storable.
        (Closes: #1138906)

 -- Niko Tyni <ntyni@debian.org>  Sat, 06 Jun 2026 17:22:29 +0300

This branch is even with tag debian/5.40.1-8