-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 11 May 2021 08:03:43 +0200 Source: python-eventlet Architecture: source Version: 0.26.1-7 Distribution: unstable Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 988342 Changes: python-eventlet (0.26.1-7) unstable; urgency=medium . * CVE-2021-21419: Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. Appled upstream patch: websocket: Limit maximum uncompressed frame length to 8MiB (Closes: #988342). Checksums-Sha1: d4c1bdda21cceda95ea3ea63472a6f1d25d33899 2506 python-eventlet_0.26.1-7.dsc 1319881dd236aca875902d66c9028bc011c01b2d 24684 python-eventlet_0.26.1-7.debian.tar.xz a6d6f303d0d2fe5ae78cec3e3f1035968eaaab7b 8022 python-eventlet_0.26.1-7_amd64.buildinfo Checksums-Sha256: 30aecb6f86f056db7e5ec7afe4e66f79abf64c0569aba5ac6c9210ea5b569e7e 2506 python-eventlet_0.26.1-7.dsc 6fff73f94a36dc24ed6c98db352ebb3903ada58100ee88403cdee2d77867e693 24684 python-eventlet_0.26.1-7.debian.tar.xz 303ca596488c1df3da27ef92798ee7f3e100a45454fa78aeb499bad998ebc96f 8022 python-eventlet_0.26.1-7_amd64.buildinfo Files: 6fdca94e59e77894fc8be3fb430ef9e4 2506 python optional python-eventlet_0.26.1-7.dsc c609a24d82702766be637dd1326002ee 24684 python optional python-eventlet_0.26.1-7.debian.tar.xz 3d57c987570a6f53224bbaf05e4b3ee1 8022 python optional python-eventlet_0.26.1-7_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmCaS24ACgkQ1BatFaxr Q/6Aqg/6A3GS/l+DzR7dsT7zStwkA8r7kY1YAl2JUbJR9uo2sTuIu2IvmEiTUZkS bAUsk/+GjyXh5IcCC+O+UWeQ7K+NDXOhMzEWRHqMBwrjQP620n7cCVJTXtPR0dhX P8wE1peUj8gahHPZ0zkDYl8qJc51WiukArq3BPTgbeUvCmh2xwhP9ENTPcx7V9LQ n2YqIdysFV72AjhqTmYsEF5aN+PtR7OdsxNOfi2tQztLZVtAa+V7JdLq9oB/2v9D YReqeAxZm0XGREDWL7GW7e9psmbsTlEuXNREF/oNkWx1A6YFrMdvSK6YC83olS9B AzgqbIvQTFgY03WRdgOS2/eR28qdYJOXrxfLxxZuiTt4bcRlicr0j1ldTiM0oBns DhjA5k5D7cOovLrhK0SEpYIbR7Cq/H8JYY3CIPp1DEtU7hPNZ2et/+yS4wk9NG/m rJgQVtxBcs0olOm4wDpHFh21JgMGx+nx27Y8DpXdH2Fr71vEZq3SxXboRZHxe8DH RSINUmTCBdQb9XAqIQn1sLVxwJ8BiQtnrfSWmaLHI2bLYx8gAzoD0os50FP+aY+O UpgnManeIlghe/7089lAKLE3FUOKBLjayDdtYcNozWZbx4DEaBIvYrqlsUG5wExr 0pb3KZ+C4WXx9ChEf5829BmyVAcd5OpRdfeS9b2/B6fSvo5o9UQ= =hsU2 -----END PGP SIGNATURE-----