-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 16 Mar 2022 12:01:53 +0100 Source: python-scrapy Architecture: source Version: 1.0.3-2+deb9u1 Distribution: stretch-security Urgency: medium Maintainer: Debian Python Modules Team <python-modules-team@lists.alioth.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Changes: python-scrapy (1.0.3-2+deb9u1) stretch-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2021-41125: only use http basic auth on original domain. * CVE-2022-0577: only pass cookies to original domain. Checksums-Sha1: 2a9030724ee6c8533e586ed4a2db9e6d206fcbec 2302 python-scrapy_1.0.3-2+deb9u1.dsc a09b73f35f4e49c831d6fa08e47736e5bc016789 948924 python-scrapy_1.0.3.orig.tar.gz eddaeedc5fac4220d91a705d3b2d7ac58a1dc740 12188 python-scrapy_1.0.3-2+deb9u1.debian.tar.xz 3f7ebd00dfe38e58497739cfa75255a98ee6a3bf 5788 python-scrapy_1.0.3-2+deb9u1_source.buildinfo Checksums-Sha256: bc2596386873839400eefcbaef811fc7131529375a421cf10345d1d432ef28d2 2302 python-scrapy_1.0.3-2+deb9u1.dsc 05d88f608ddf956cc152cbc90f2997d4181518d15742221b72a07aa7457cfe51 948924 python-scrapy_1.0.3.orig.tar.gz 846dde3f29434e53ebcfa981276f6da3d8cc045475a2d2d619f1de9648ab4884 12188 python-scrapy_1.0.3-2+deb9u1.debian.tar.xz 4591183f576ef7e70244b064b2a5b3fa90a79c3d3bc2ce40352cdae9b4a13143 5788 python-scrapy_1.0.3-2+deb9u1_source.buildinfo Files: e7fb4c16f98f8c6bd1c56f76463083d8 2302 python optional python-scrapy_1.0.3-2+deb9u1.dsc cefb981076a26112d6f9b76cb7e5ba7d 948924 python optional python-scrapy_1.0.3.orig.tar.gz 47a19dedee139fe3abb993d2664eb858 12188 python optional python-scrapy_1.0.3-2+deb9u1.debian.tar.xz 18ab93693b47754fb08780e9dc54867b 5788 python optional python-scrapy_1.0.3-2+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmIxxbkACgkQnUbEiOQ2 gwJ6mA/9EVf4W7h04f6ECctGQA9KR22BelwiXKC0khwHbivngfhdiAs0OI1NkYyk O6v84OeC/ZEBOGqpv9hH6YYBVnSTbThgkPq6YsApzyosT44i1BXX/Yk4fz7ckaQT Lle9y3tAtF+9kP+WP6s87q7it21qaJFX6mZJCEyiev1/RrTWan7/B1VhMgivvsW1 TkKSFAZlhnMRo/WxPrv3E2e24KH/EMftk6nYzYiJy63aL/o4surLfdOQESgxnHYV pVnwbVFuPSsdUAvBsl1ztxFi8f0du/D/aZa1rYgqFUvVYPOfgvTSw5UVSIEgqzq3 U1Pr9Xh8UM9YHazrPGQ/0uppCMkdkRWDgfIHYYmO1L3BPSc7osdGGVeYBYmga2ta cMHk7X3CemPRVREumpeKHTg6hJ8Wxe+wK5ilwWBQd8rt8d0cVjI6GzS/LUocGgbi MDqCx2T2WPg28ric8q4gWmSloAyf5ufZoC2fC58Qw1ffteKVDD3QudFj18vTjd7O WNenU73aC91B7TmsKEKlYdVIrI90wmr8YK9il1rQaZwAeAb+sKTjClnAGi0ACZuj SiJiUk74+m7uLQdukUMbv3rqyV0K33+pGTXlzwPen2rYWOYwHkDuL6LjeUDUKMnj vg7ikWB1DmgGGP6esrc3MiCJZBmoadpsllv9moFTyDIKPLIF0EA= =Dmus -----END PGP SIGNATURE-----