libcatalyst-plugin-session-perl - Debian Package Tracker

general

source: libcatalyst-plugin-session-perl (main)
version: 0.44-1
maintainer: Debian Perl Group (archive) (DMD) (LowNMU)
uploaders: Damyan Ivanov (DMD)
arch: all
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.41-1
oldstable: 0.43-1
stable: 0.43-1
testing: 0.44-1
unstable: 0.44-1

versioned links

0.41-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.43-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.44-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libcatalyst-plugin-session-perl (1 bugs: 0, 0, 1, 0)

action needed

source package has 1 unsatisfiable build dependency high

Build dependencies in unstable cannot be satisfied on amd64 because: unsatisfied dependency on perlapi-5.42.2

Created: 2026-11-12 Last update: 2026-11-13 03:33

1 binary package has unsatisfiable dependencies high

The dependencies of libcatalyst-plugin-session-perl=0.44-1 cannot be satisfied in unstable on amd64 because: unsatisfied dependency on perlapi-5.42.3

Created: 2026-11-12 Last update: 2026-11-13 03:32

1 bug with a patch to review in the bug tracker normal

The bug tracker contains patches fixing 1 bug to review: include them, or remove the patch tag.

Created: 2026-09-02 Last update: 2026-11-13 03:30

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 0.44-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit a2d07ac2ec364a0c4d8343e612f7f1d70583e34c
Author: gregor herrmann <gregoa@debian.org>
Date:   Sat Nov 7 20:50:53 2026 +0100

    update changelog
    
    Gbp-Dch: Ignore

commit 30de2df3a1babaefae8c70f28aca66c4891a1769
Author: gregor herrmann <gregoa@debian.org>
Date:   Sat Nov 7 20:50:53 2026 +0100

    Convert debian/watch to version 5.

Created: 2026-11-07 Last update: 2026-11-07 20:34

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2025-40924: (needs triaging) Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated from a (usually SHA-1) hash of a simple counter, the epoch time, the built-in rand function, the PID and the current Catalyst context. This information is of low entropy. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. Predicable session ids could allow an attacker to gain access to systems.

You can find information about how to handle this issue in the security team's documentation.

Created: 2025-07-17 Last update: 2026-09-01 22:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.2).

Created: 2025-12-23 Last update: 2026-03-31 15:01

news

[rss feed]

[2025-08-18] libcatalyst-plugin-session-perl 0.44-1 MIGRATED to testing (Debian testing watch)
[2025-08-10] Accepted libcatalyst-plugin-session-perl 0.44-1 (source) into unstable (gregor herrmann)
[2022-06-06] libcatalyst-plugin-session-perl 0.43-1 MIGRATED to testing (Debian testing watch)
[2022-06-03] Accepted libcatalyst-plugin-session-perl 0.43-1 (source) into unstable (gregor herrmann)
[2018-12-25] libcatalyst-plugin-session-perl 0.41-1 MIGRATED to testing (Debian testing watch)
[2018-12-22] Accepted libcatalyst-plugin-session-perl 0.41-1 (source) into unstable (gregor herrmann)
[2015-08-18] libcatalyst-plugin-session-perl 0.40-1 MIGRATED to testing (Britney)
[2015-08-12] Accepted libcatalyst-plugin-session-perl 0.40-1 (source all) into unstable (Lucas Kanashiro) (signed by: gregor herrmann)
[2014-05-22] libcatalyst-plugin-session-perl 0.39-2 MIGRATED to testing (Debian testing watch)
[2014-05-16] Accepted libcatalyst-plugin-session-perl 0.39-1 (source all) (Damyan Ivanov)
[2014-05-16] Accepted libcatalyst-plugin-session-perl 0.39-2 (source all) (Damyan Ivanov)

bugs [bug history graph]

all: 1
RC: 0
I&N: 0
M&W: 1
F&P: 0
patch: 1

links

homepage
lintian
buildd: logs, reproducibility, debcheck
popcon
browse source code
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.44-1