-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 06 Jul 2026 20:57:50 +0200 Source: libmojolicious-perl Architecture: source Version: 9.47+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1141586 Changes: libmojolicious-perl (9.47+dfsg-1) unstable; urgency=medium . * Import upstream version 9.47+dfsg. - Fixed a security issue where the pure-Perl implementation of Mojo::JSON could exhaust all available memory when decoding deeply nested data. Decoding is now limited to 512 levels of nesting, to match the default of Cpanel::JSON::XS. CVE-2026-14803 Closes: #1141586 * Update years of upstream copyright. Checksums-Sha1: cff022e9ce1afefe1c27c16f159356d1aae9ec2a 2884 libmojolicious-perl_9.47+dfsg-1.dsc 1c716274e6c08a68ddfbf4beeb1e6a1ced1e5215 621588 libmojolicious-perl_9.47+dfsg.orig.tar.xz 90b735216b00c60bcc6c1326a63028b294550502 18504 libmojolicious-perl_9.47+dfsg-1.debian.tar.xz Checksums-Sha256: 48551b31d447093e742be25bdab89975efec76320999dd253f2d186cd38d377c 2884 libmojolicious-perl_9.47+dfsg-1.dsc dc9980820fb676f3b81a1a0ab143e280ee5efd7a129a62f8927c97e446cb724d 621588 libmojolicious-perl_9.47+dfsg.orig.tar.xz 4618ad0d4a32b86d57342611881afa85dbc39e4347c207348c87aebcefc909f5 18504 libmojolicious-perl_9.47+dfsg-1.debian.tar.xz Files: e80edaad4c328929ef82f0fa1a797aab 2884 perl optional libmojolicious-perl_9.47+dfsg-1.dsc 24dca4e8e909b34831bd82ca28731b12 621588 perl optional libmojolicious-perl_9.47+dfsg.orig.tar.xz 2f23328c1d633552007b22d48915763f 18504 perl optional libmojolicious-perl_9.47+dfsg-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmpL+9xfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgaBdw//b7DftdxHIt6BmxR8bLaOSZSlaWIR5ZfVKcTtSc/qztQjLaFN/hyeGU3P ov7q+e5fXlFRzlHxdXp/gWrFinoHGgienIZcMMbf22SYY1Bw2QKb7JBlQtc2Ecwf zMxAelKoV9DhiIYMGDR2hlFo5nzevVYjJWLW/XlS0ng5OvoAxlJJk1TE2dubm1Tv g9Iq0VvLnnjTZ0TvDhjslk8FhJWD86bQ9idvWkO25BVsZ0zoc7/4Mi/6L4vUf0wE W0JdgpzHl5gqkBeFH7sQIX4YeUH+34Z5e0QNyxselsiQmZGfF2q/GYs26pF/Ga5D qrim4hsKbrzaTkOeLOc5MiP/Q4ZBRDD/cjMhQ1joVvUhBesV4yB6XOscmy5KpAPY bmp0z2qBo8RYqmUX1ZsCJVvQ57Hs8HvDLrFHIU1Z916beQqrLMkQJVKAsq3H2xhK rJFO2RzQMIaYb+Ofnn8A4Y4XRoxNfm8xL3HboN+aMOPlE91+OgUnWBaZh4ZdHn2M 03v0HshzhudHpz88TDkKu8fqY1QQ5XX9R+QJduSZbaThyrN9HeQULcS3oFDbNla9 Iec7CBgOn45oA9EyjrtDU7YyYOIBRvjksANOnIuNUZ44IqoeDCBlPDdYPIg7RzcP ca87uYKQlrf0iUxocer35YTswJGsOS2Ec1jfNSsam0OJlBcRYWc= =kGWp -----END PGP SIGNATURE-----
