-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 22 Mar 2023 18:48:52 +0100 Source: flask-security Architecture: source Version: 4.0.0-1+deb11u1 Distribution: bullseye Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Changes: flask-security (4.0.0-1+deb11u1) bullseye; urgency=medium . * d/gbp.conf: Add/adjust data to branch debian/bullseye * Fix for CVE-2021-23385 Cherry pick partially PR #489 from the upstream project (https://github.com/Flask-Middleware/flask-security/pull/489) to fix Open Redirect Vulnerability aka CVE-2021-23385. Checksums-Sha1: 5a5d1c5eed03305f7f3b0e36112d3ec0dcb4bc59 2485 flask-security_4.0.0-1+deb11u1.dsc 439c7534ca87e556453e5f9760ac49f554d8068e 7516 flask-security_4.0.0-1+deb11u1.debian.tar.xz e2f6f3776cbb2ff9e5916136e90b8e7aa1540d03 10025 flask-security_4.0.0-1+deb11u1_amd64.buildinfo Checksums-Sha256: 57dc0142b7874d4847acce3916130add7f75029239521808991027fd502fa48a 2485 flask-security_4.0.0-1+deb11u1.dsc 397e2ba25113f0eae687790e17e3fe58128ea31aba0f1a8fa93b73c9f3f3b0cc 7516 flask-security_4.0.0-1+deb11u1.debian.tar.xz 88bb074c0b397df05744a94f3ea1d8205516784732e263a8dce5f5c408f1c066 10025 flask-security_4.0.0-1+deb11u1_amd64.buildinfo Files: 6790b6d2cbf6d5bb8692bad6c11a3377 2485 python optional flask-security_4.0.0-1+deb11u1.dsc b4760b2189e9dafe7cdade37ecd253be 7516 python optional flask-security_4.0.0-1+deb11u1.debian.tar.xz 5bdda0ab9b7fab900fadcd8439d544a5 10025 python optional flask-security_4.0.0-1+deb11u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJMBAEBCgA2FiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmQbQMEYHGMuc2Nob2Vu ZXJ0QHQtb25saW5lLmRlAAoJEIMBYBQlHR2w6Z8P+wXmCb7wrZHgA5jN6jLlbKGy wuRObhty7ScWupHv6rdemc0hYoErR88DF9yje5wBXuJ6Z3VnERL1xlBwPHcDfG9w TaameNLBScCietV5hhgyjsO4L0YblSqg4jkCvztAllLYPcTEYXbeNQqz1qAivAaI rnkduGP6rtYZ7zaEuy29Qb5oI+w9BS2KL0Dcb+46lxlfSeeuGC7PgKBfgnl2flqW o0fFcM4HSwzq1z+7cBGBg0NqHHARBV6oVXviX2G7CaO5MmjcTaSraD8XgGkAbEb3 juVjLXbelsqVO1dv0yFEVANwsJWzWJJEn6EMwXigHDZaZXYHy3fSE5J+XvIv0cKW yt1XSsO1GperktZBTDKVThL0P+hL1eaMzsIC2cZ+fxU36eMxaVUGlPm8cvRoONnr 6sTk0lPIziQfbOQF/FaDCcDMCKxPTA8IbLveuCEolf/jK/8kkT29zI4sxIDIsi8a fpSiOq0NWSbyeijNHh/dJqh8wbmqHFM8qdSPSR7qupBnXzYNjsDk2j5ILKrySR4x Q2GC2UgM1fdks3O9kaLDrJmX7cxRp80uB/rdPUHM4nePLkM+CbTUCvQUt4zLMT5x od8PA8nXfuoKvli3JuAaRhcKAt7b34TVvQ8aVEYPc+MuQQi2Hd7BHEggRxA/yVTI Bi702oOw+pHeSRQsEi3m =Kk3X -----END PGP SIGNATURE-----