Source: libmodule-cpants-analyse-perl Version: 1.02-1 Severity: important Tags: trixie patch Control: close -1 1.03-1 Forwarded: https://github.com/Perl/perl5/issues/24452
I'm looking at pushing a trixie fix for Archive-Tar CVE-2026-42496 in src:perl via a point release. As seen in https://github.com/Perl/perl5/issues/24452 the fix makes Module-CPANTS-Analyse fail its test suite. not ok 13 - symlinks not listed in MANIFEST is not ignored for a non-local distribution # Failed test 'symlinks not listed in MANIFEST is not ignored for a non-local distribution' # at t/analyse/manifest.t line 84. An easy way to see this is just building libmodule-cpants-analyse-perl_1.02-1 in forky or sid. This has been fixed upstream in 1.03 with https://github.com/cpants/Module-CPANTS-Analyse/commit/fed1a10a9d9170bce71777745d504cd427692e2d which should works with and without the Archive-Tar fix. Please consider supplying a point release update of libmodule-cpants-analyse-perl with this patch to avoid a regression in stable. -- Niko Tyni [email protected]
