-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 20 Jun 2026 23:14:47 +0200
Source: libhttp-daemon-perl
Architecture: source
Version: 6.16-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1138050
Changes:
 libhttp-daemon-perl (6.16-1+deb13u1) trixie-security; urgency=high
 .
   * Team upload.
   * Fix CVE-2026-8450: send_file() honoured 2-arg open() shell-magic
     (Closes: #1138050)
   * Add regression test for send_file() shell-magic refusal
Checksums-Sha1: 
 2988076bfca1f8e9c82118874335aab3b43288f0 2609 libhttp-daemon-perl_6.16-1+deb13u1.dsc
 cf817337ec9f4bb2c7f2e46b9762b3d8234f68a0 45830 libhttp-daemon-perl_6.16.orig.tar.gz
 33e9ef6c87d48d84af5323ad3710eb42862af693 7840 libhttp-daemon-perl_6.16-1+deb13u1.debian.tar.xz
Checksums-Sha256: 
 b899360a4ac3e26d39859fbc6b983953f4394da4b41b9f28823371eb12d32b77 2609 libhttp-daemon-perl_6.16-1+deb13u1.dsc
 b38d092725e6fa4e0c4dc2a47e157070491bafa0dbe16c78a358e806aa7e173d 45830 libhttp-daemon-perl_6.16.orig.tar.gz
 6b6ec08c19e4a27f863165928dfd17fe02306c328929481bfdb72e4cb9e02922 7840 libhttp-daemon-perl_6.16-1+deb13u1.debian.tar.xz
Files: 
 08394088eb1492889422d136fd983d02 2609 perl optional libhttp-daemon-perl_6.16-1+deb13u1.dsc
 51425462790165aeafc2819a7359706f 45830 perl optional libhttp-daemon-perl_6.16.orig.tar.gz
 6c3789c087d35fb25b59b6ce92b3ce33 7840 perl optional libhttp-daemon-perl_6.16-1+deb13u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=qtYP
-----END PGP SIGNATURE-----