🚩 HIGH severity: CVE-2026-46473 in Authen::TOTP (<0.1.1, Perl) β€” secrets generated with rand are predictable, weakening TOTP security. Upgrade to 0.1.1+ when possible. More: https://radar.offseq.com/threat/cve-2026-46473-cwe-331-insufficient-entropy-in-tch-3d3628d8 #OffSeq #Vulnerability #Perl #MFA #CVE202646473
@richardjh so am i right that #perl and #php and #lua and #lisp and #forth are the only ones left without bigtech dominating and deciding where languages go.

I documented how I replaced the Debian crypttab `keyscript` with systemd socket activation:

https://anisse.astier.eu/keyscript-to-socket-activation.html

#systemd #Debian #Ubuntu #LUKS #cryptsetup #perl

Replacing Debian keyscript with systemd socket activation for encrypted volumes - Linux Engineer's random thoughts

In Debian (and Ubuntu), when using a LUKS encrypted volume with cryptsetup, there is a documented option in the manpage for /etc/crypttab called keyscript: it should allow the init system to launch a program and have its standard output used as a key to unlock a volume. But there …

This HTTP server library looks interesting, with some impressive benchmarks.

Edit: It may not be artisanal code, so beware.

https://metacpan.org/pod/Hypersonic

#perl

Hypersonic

Blazing fast HTTP server with JIT-compiled C event loop

MetaCPAN

37 Debian LTS advisories were released in February fixing 145 CVEs across various packages. These include security fixes for bind9, firefox-esr, imagemagick, libpng, mbedtls, openssh, packagekit, perl, postgresql-13, python3.9, systemd and many more.

Debian LTS contributors also prepared updates for more recent releases, Debian 12 (#bookworm), Debian 13 (#trixie) and Debian unstable.

Read the full report: https://www.freexian.com/blog/debian-lts-report-2026-04/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debian #debianlts #freexian #imagemagick #libpng #openssh #packagekit #perl #systemd

Monthly report about Debian Long Term Support, April 2026

The Debian LTS Team, funded by Freexian’s Debian LTS offering, is pleased to report its activities for April. Activity summary During the month of April, 21 contributors have been paid to work on Debian LTS (links to individual contributor reports are located below). The team released 37 DLAs fixing 145 CVEs. The team continued preparing security updates in its usual rhythm. Beyond the updates targeting Debian 11 (β€œbullseye”), which is the current release under LTS, the team also proposed updates for more recent releases (Debian 12 (β€œbookworm”) and Debian 13 (β€œtrixie”)), including Debian unstable.

Freexian

@finner Here's a solution using perl instead:

perl -wlne 'if (m{/wifi} ... m{^/}) { print $1 if /\bPowered = (\S+)/ }'

(Translation to awk is left as an exercise for the reader.)

#perl #awk

@mina @PercyButtons3 @DailyEpsilon I used #Perl, which is also a solution to everything. It's funny they used the 19th to search for 19 ;-)

perl -wE 'while (++$_) { $x = $_ + 62; $y = $_ + 81; $sx = sqrt $x; $sy = sqrt $y; say if $sx == int $sx && $sy == int $sy; }'

Also been improving spec compliance of the MCP #Perl SDK. Claude Code came up with the idea to split the HTTP transport into two modes, one for feature completeness (streaming), and one for easy scalability with prefork web servers.

The streaming mode allows us to do fun things like MCP tools with progress bars.

https://github.com/mojolicious/mojo-mcp#server-to-client-streaming

New Sticker onboard.

#Underbar #Perl #CPAN

Installing #Perl library that depends on AnyEvent. AnyEvent issues "canary" warning and snark about backwards compatibility changes since 5.22. Fails to build.

Strawberry Perl on Windows, no big surprise.

5.22 wasβ€”uhβ€”2015. If I remember right, that's when p5p was putting solid effort in replacing duct tape with working code.

I'm not saying the complaints are valid or invalid. I'm just saying this smells like a spacebar heating problem.

https://xkcd.com/1172/

https://metacpan.org/pod/AnyEvent

Workflow

xkcd