Accepted libio-compress-perl 2.204-1+deb12u1 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Oct 2026 08:31:31 +0700
Source: libio-compress-perl
Architecture: source
Version: 2.204-1+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Arnaud Rebillout <arnaudr@debian.org>
Closes: 1138051 1138055 1146065
Changes:
 libio-compress-perl (2.204-1+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * [Security] CVE-2025-15649: header parsing in IO::Uncompress::Unzip.
     (Closes: #1146065)
   * [Security] CVE-2026-48959: CPU exhaustion in IO::Uncompress::Unzip.
     (Closes: #1138051)
   * [Security] CVE-2026-48962: code execution in IO-Compress via output
     globs.
     (Closes: #1138055)
   * Add debian/source/include-binaries for CVE-2025-15649 test case.
Checksums-Sha1:
 c2d152b5c4c313020355f63fa53e45abbf071395 2382 libio-compress-perl_2.204-1+deb12u1.dsc
 64de1f53fc2e213a3e58c863bf75f4a11c43804f 298839 libio-compress-perl_2.204.orig.tar.gz
 b92ca8f6d2ff03c593a03243b99a92987ac0577b 10092 libio-compress-perl_2.204-1+deb12u1.debian.tar.xz
 6d9021fa45dd91361409e94701e0e127b1e39f4f 6278 libio-compress-perl_2.204-1+deb12u1_source.buildinfo
Checksums-Sha256:
 2af424a839eaeaf44b49b3890c5b9e4afd8c43f5762348d581811c57cd8edb34 2382 libio-compress-perl_2.204-1+deb12u1.dsc
 617784cb8543778681341b18fc67b74735e8b494f32f00814dd22f68ac6af018 298839 libio-compress-perl_2.204.orig.tar.gz
 ef6d13300d0407ee0608ef9baf6c4680bf4c1b65128b0eacb3ada8e85dbccfa3 10092 libio-compress-perl_2.204-1+deb12u1.debian.tar.xz
 81294cca3513507e7451447269d2d11a4610d002ee352f3bec8ef28e76bd475c 6278 libio-compress-perl_2.204-1+deb12u1_source.buildinfo
Files:
 e66aede7aaf28afcb0a5606b40db0190 2382 perl optional libio-compress-perl_2.204-1+deb12u1.dsc
 64c836b6c55efcbd4d9177b2dea3e059 298839 perl optional libio-compress-perl_2.204.orig.tar.gz
 253e79ecc7a3e9a04519f247870f6048 10092 perl optional libio-compress-perl_2.204-1+deb12u1.debian.tar.xz
 f76252bc1e582a5af25f7123f2d41f34 6278 perl optional libio-compress-perl_2.204-1+deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=bGqq
-----END PGP SIGNATURE-----