-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 20 Jun 2026 23:58:11 -0300 Source: libhttp-daemon-perl Architecture: source Version: 6.12-1+deb11u2 Distribution: bullseye-security Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Santiago Ruano Rincón <santiagorr@riseup.net> Closes: 1138050 Changes: libhttp-daemon-perl (6.12-1+deb11u2) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * Fix CVE-2026-8450: send_file() honoured 2-arg open() shell-magic (Closes: #1138050) * Add regression test for send_file() shell-magic refusal Checksums-Sha1: 15b125ec018a57b5d1e95124635ba1e3d7f0005f 1884 libhttp-daemon-perl_6.12-1+deb11u2.dsc 4a06c2cb7a033d556fa34ea2ac88558da90a4815 47117 libhttp-daemon-perl_6.12.orig.tar.gz a0333366625e207a6fb810848f677d1f872ce055 11212 libhttp-daemon-perl_6.12-1+deb11u2.debian.tar.xz 0c8bc929d1fba77aa479cfa3ee48433f72c23957 5167 libhttp-daemon-perl_6.12-1+deb11u2_source.buildinfo Checksums-Sha256: ed2291bc7a136332bfe969f380473c767aaea8bb501baa37663881ab4750744f 1884 libhttp-daemon-perl_6.12-1+deb11u2.dsc df47bed10c38670c780fd0116867d5fd4693604acde31ba63380dce04c4e1fa6 47117 libhttp-daemon-perl_6.12.orig.tar.gz 49cec6011ad632e9986acbd380b055d3e2ee4f2db4be5b428cdc741f0d8843d5 11212 libhttp-daemon-perl_6.12-1+deb11u2.debian.tar.xz a0dd59a443519d84841ae024c66910e92ecd58f4c7d2f5dd7964f133d87da3c3 5167 libhttp-daemon-perl_6.12-1+deb11u2_source.buildinfo Files: 65c6a0523860ba4e0e955f3fc39cf779 1884 perl optional libhttp-daemon-perl_6.12-1+deb11u2.dsc 63674e3f81760a29075853413eb157d8 47117 perl optional libhttp-daemon-perl_6.12.orig.tar.gz cf1f200d2e148b165a5f13adef67460e 11212 perl optional libhttp-daemon-perl_6.12-1+deb11u2.debian.tar.xz 55e27342aa7806007e934877c9aaf50c 5167 perl optional libhttp-daemon-perl_6.12-1+deb11u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iIwEARYKADQWIQR+lHTq7mkJOyB6t2Un3j1FEEiG7wUCajga+BYcc2FudGlhZ29y ckByaXNldXAubmV0AAoJECfePUUQSIbv+EgA/RDVJU37JFCbhauJ8g6PVK5UzRo/ xFb8FEy8X2YDekVZAP9txX0EwmyBpn4SlJL2m3INOe4YOxUqoJLtCyZ+RtYFCw== =gQDw -----END PGP SIGNATURE-----