-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 29 Jun 2026 22:40:15 +0200 Source: libjavascript-minifier-xs-perl Architecture: source Version: 0.16-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <[email protected]> Changed-By: gregor herrmann <[email protected]> Changes: libjavascript-minifier-xs-perl (0.16-1) unstable; urgency=medium . [ Debian Janitor ] * Update standards version to 4.6.1, no changes needed. . [ gregor herrmann ] * Import upstream version 0.16. - Fixes CVE-2026-56017, which caused Perl to SEGFAULT when calling minify(). Thanks to CPANSec for raising the issue, and providing a prototype fix. - Fixes CVE-2026-56018, caused by a memory leak in minify() where each tokenized Node's "contents" buffer were not properly freed, resulting in a memory leak on every call. * Update years of upstream and packaging copyright. * Declare compliance with Debian Policy 4.7.4. * Remove «Rules-Requires-Root: no», which is the current default. * Remove «Priority: optional», which is the current default. Checksums-Sha1: 5fff742c96be33c01efdfdbcc3a5855c65ca6424 2544 libjavascript-minifier-xs-perl_0.16-1.dsc b1dec74d3c9178577c6d257ed066fc8b585b27b4 27635 libjavascript-minifier-xs-perl_0.16.orig.tar.gz d8505b8506029ee6767567fdd0af4b27802bc74d 3100 libjavascript-minifier-xs-perl_0.16-1.debian.tar.xz Checksums-Sha256: f22f146cdae96c1de1e6687b7acb0c7dec76c2e15b780fdc28bf561c827207c7 2544 libjavascript-minifier-xs-perl_0.16-1.dsc 75034e876939ebc3dd48ce2ebaf06044b06ed57ab3a1863f053f950e984d9954 27635 libjavascript-minifier-xs-perl_0.16.orig.tar.gz 85c93d65a56c6b8e05ec5e6508c4c54ac1e8045344ce8c6507ac82bbe789614e 3100 libjavascript-minifier-xs-perl_0.16-1.debian.tar.xz Files: 0559203b40e2b7c88b95f739d2b9b244 2544 perl optional libjavascript-minifier-xs-perl_0.16-1.dsc 91fb711dfc5d70cb616b6fc8ca66ff9d 27635 perl optional libjavascript-minifier-xs-perl_0.16.orig.tar.gz 6d499a8b1514fb22641dfaa6a3135333 3100 perl optional libjavascript-minifier-xs-perl_0.16-1.debian.tar.xz
-----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmpC2KNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgYSAw//dYg2cfI0uQhZa/zoCa7X1r9TwjKAIvTtWvXAUG6dO096FYZVGp+fe8ex W3xhhGuDNWCb9SmnSjUJ/FGwYs8jux4g3LqWuqyaNksiVkUtCsAwxAQsXPGcCsTb 5t7uY05ZIcCNuI82y5lfGqd/4Tz1lL7/B208YiaCCCfL/diCU+ayR4i9BF1+MHYa Wq4Mv68iPGqerJ5CFj3hYxYdL2GTExUyLH1hleWfQmnoYxKoJyPKsHlHb6siOrHe Vv59CkzkBRn1OEeSt4ggXho+wiRggt5e6XQNCbihYdiVP172Icfq6gy0/mIsHwbs 84T7eQQR+0PpOxfRxCStMO0HXPcMequCtzKa6RQ92GqpzjnXeZ2mI9OkecKxVZNB oxQEcQEe0up/nkAYRUs+P/qRFNPk1vogAO9P4n3aFgYaOZ+4EfxaBirtYxTUH6sX rgqYk7ukNrYnW+0LJ+8o5GcsYe0uKzhk3sZRVwxhV6womrXeJ5SVlK5YvKiFS/lT BBbI0G8d/47i48mGTJeGRirTakms4FYIsxyYfHD7Wyymuh6+DtcwPvTt60iL9vBP n7rYeLGvVDrQUT9Y8MYKezglG3XbMTqxB5OrGCH2Sl1d4fTgbWvv0TeBrSftNpUj 0Xw76c7VkcyHDGemPag4OPD9Ci6YRtJSGFaUxeiDmISFFj8tugo= =CyL8 -----END PGP SIGNATURE-----
pgpSI7Q83LEtM.pgp
Description: PGP signature
