-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 15 Jul 2026 17:37:10 +0200
Source: libmojolicious-perl
Architecture: source
Version: 9.48+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa@debian.org>
Changes:
libmojolicious-perl (9.48+dfsg-1) unstable; urgency=medium
.
* Import upstream version 9.48+dfsg.
- Fixed a security issue where CSRF tokens were vulnerable to BREACH
attacks. Tokens are now masked with a fresh random value on every
request, instead of being reused for the whole lifetime of a session.
(CVE-2026-15747)
Checksums-Sha1:
217a9ad2296b70598ae2d399163950e1e7a04a64 2884 libmojolicious-perl_9.48+dfsg-1.dsc
7fccdf88ad0f5e4bbb1c679abd5d682454563068 622104 libmojolicious-perl_9.48+dfsg.orig.tar.xz
72a282d1a8f131fc92c049bdb7e7e2e29f0331f5 18608 libmojolicious-perl_9.48+dfsg-1.debian.tar.xz
Checksums-Sha256:
504c3fdd52ac3093e4121d5454fe5aa15d843aa4ac12eb9f5a6c2ff3747e85b4 2884 libmojolicious-perl_9.48+dfsg-1.dsc
313ce31ce4ac1b447dbd84c7e0009719ed3365a9d10eab15be3b9e338879f73b 622104 libmojolicious-perl_9.48+dfsg.orig.tar.xz
86b162cbbb50d6c755a5c7d926e5e433a869173130270422719159d3ecbb149a 18608 libmojolicious-perl_9.48+dfsg-1.debian.tar.xz
Files:
8abfe4c180d25a90bac1f6b374f60a9e 2884 perl optional libmojolicious-perl_9.48+dfsg-1.dsc
959dcf4ea1dcd24e900c68c89c8b2e97 622104 perl optional libmojolicious-perl_9.48+dfsg.orig.tar.xz
295918bb741e6c3d29474593e3b8ce9b 18608 perl optional libmojolicious-perl_9.48+dfsg-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=p5bw
-----END PGP SIGNATURE-----
