-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 13 Dec 2023 10:32:49 +0800 Source: python-aiohttp Architecture: source Version: 3.9.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Bo YU <tsu.yubo@gmail.com> Closes: 1047256 1056036 1057163 1057164 Changes: python-aiohttp (3.9.1-1) unstable; urgency=medium . * Team upload * New upstream version 3.9.1 - CVE-2023-49081 (aiohttp's ClientSession is vulnerable to CRLF injection via version) (Closes: #1057163) - CVE-2023-49082 (aiohttp's ClientSession is vulnerable to CRLF injection via method) (Closes: #1057164) - Fix ftbfs on python3.12 (Closes: #1056036) * Update debian/patches * Update debian/copyright * Clean built docs (Closes: #1047256) Checksums-Sha1: a594b2cef39298f49e9c589a986e3add989af4de 2383 python-aiohttp_3.9.1-1.dsc 10e8907e412a2b589026ec268af8a4342b092728 7482118 python-aiohttp_3.9.1.orig.tar.gz 902f9976f38aa4553d26cc55e16762c0911fa024 7444 python-aiohttp_3.9.1-1.debian.tar.xz 00e7486ee197733a7246b383e2725fbd99dad951 7909 python-aiohttp_3.9.1-1_source.buildinfo Checksums-Sha256: 0b12ff10d79180721d690a0785992c6b1966a09c88140f9f56f7819f66a21e36 2383 python-aiohttp_3.9.1-1.dsc 8fc49a87ac269d4529da45871e2ffb6874e87779c3d0e2ccd813c0899221239d 7482118 python-aiohttp_3.9.1.orig.tar.gz 23b81f8a72bb19fec70d47807d175c7fd57cad4a46822620a8ca7ef8d48d866d 7444 python-aiohttp_3.9.1-1.debian.tar.xz 13915dc30b42b5ece3f13e00360d053c7372fbf67ce27d4b1e311e106024d511 7909 python-aiohttp_3.9.1-1_source.buildinfo Files: 3dce80aec6d0471db578de1635cf94ea 2383 python optional python-aiohttp_3.9.1-1.dsc 264e1b4fbe9f09050523c03f4d9b5ee2 7482118 python optional python-aiohttp_3.9.1.orig.tar.gz 2c98cd2e469d80d097a27a3f4f6b7b28 7444 python optional python-aiohttp_3.9.1-1.debian.tar.xz 7cb82281f905e31d9b52d55fa341dd98 7909 python optional python-aiohttp_3.9.1-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQHEBAEBCgAuFiEEQGIgyLhVKAI3jM5BH1x6i0VWQxQFAmV7i7gQHGJhZ2VAZGVi aWFuLm9yZwAKCRAfXHqLRVZDFLKBDADGz0Gk5/OnyHZCOTPVes2sgykgciOxcgOh Z6DgnOkdtn5SEF70bgqquYi6EnwsrkX5Rsg64v+UB9BivxgbMsuLNkfyjXZIePSU SrMLGwaHO/FdT6aDdL3cw6GlVqGxwx3xJenyVQivhc6muAQB/+vll7AkIfiPD6t/ C2tRxo/p/YnPMlD6YtfVCn/DKsTwBHlD3FCtPCwnhqUSP2nV4WnSR/YIuzq/5fig ab94dIQ7bj1mOIg2kzcVp0hVSdxuUyW9qimORlBPkO9zUbZRAWOIP6gYZi9jD64T SDqsXP+2w1EmlbkXUvGA/tHHqStlNQTQtyu6L3QYt9izIDZCPpUF5VhhbckXHZpH Mg5GiJWwZhCkEYAvgHsvU9Ct5yhRNuiZqvM1vnkyF5mn3TjsDT59gWwHRn5Ggild I6w1TuR4qa5X4wvKMc9n4rNVO0bMo5jwMIK7XO5hoXm/9VVyGCOvPJOAckibzYXH u53IlYoh2d4KdT0tmWQYWmIm0qDwnNs= =gDxv -----END PGP SIGNATURE-----
