-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 Jan 2024 21:25:50 +0100 Source: libspreadsheet-parsexlsx-perl Architecture: source Version: 0.27-3+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Changes: libspreadsheet-parsexlsx-perl (0.27-3+deb12u1) bookworm; urgency=medium . * Team upload. * Add a patch to fix a possible memory bomb. [CVE-2024-22368] Patch taken from two upstream Git commits contained in the 0.28 release. Checksums-Sha1: 4181c1161ce8522c37a00771ac97b75012883a98 2689 libspreadsheet-parsexlsx-perl_0.27-3+deb12u1.dsc bb64306843b779a9da2dbdde96942c29349839bb 4028 libspreadsheet-parsexlsx-perl_0.27-3+deb12u1.debian.tar.xz Checksums-Sha256: 51b955434fa6c4cf19d66772f0101e5d92ee4f4e1ec40f4d2fd21e66bb20b32c 2689 libspreadsheet-parsexlsx-perl_0.27-3+deb12u1.dsc 012db42fc3210b29e6d3d8cb460ed530f6e7e97d961d94752bb8f944f38dbf1d 4028 libspreadsheet-parsexlsx-perl_0.27-3+deb12u1.debian.tar.xz Files: fbbc68a5f4c2242fa39239b59ca7575f 2689 perl optional libspreadsheet-parsexlsx-perl_0.27-3+deb12u1.dsc 3243cffff6f95e50894aca312b5bbd81 4028 perl optional libspreadsheet-parsexlsx-perl_0.27-3+deb12u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmWhsztfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgaInBAAvSJrbEoRKtKFhS6NoejkESMU3vzqFyXz24sDn16+BzyOT3XRvz/G+JZ7 7g8mCiTFZiA1esipBzk3o/g0RaMHExRHotXUUzcFys8OIgQRQV9gBRhK0AWwy3Ut D8tbApQAXPuXH6ncnCKOEbfy/VCHujkcHOtUD+W1EMEEZJwqYsWdnUgbhn2X++HX 96HIxziWqRYZAF/fz2QQfhOG/QDZNbWbT7lxkUEBKe939GPIL7ViLWXHYDIwGUIU OWmkmcH53a+Zhhl+e8ox6CRDgp80F369jXEWltA/CVhjSq1asUuIaDMC2vnNegJv uHr8cLxhjaq/vtDYopy979nFoR2Ny8QVo3k3jWVWeUAQ0pgJl+FsJurZCFzLqA1n s+lyccyTx8rK5x/7V3v3AcRqJiw4ZWszzCyrgAhJOW5KHCOiB9IwPNWbcQIgdWsn 0URFybmGt6M/wsKgVA0bNIoDm6y9XxtZv4IdIzpH2vlWOfQY5K+jZXl6KR4lX0mN AfkhoaoC0ZRXjwRcE2oYG45ZBk5ho1Gt/1PBKsrJmiQEUwqXmhBIEuOiBqjcUzsZ xyCh9/qW7usHB4r09GAZFZZaL2yQdmaDvIWQ4ExFspk84WsgKD1R4XaSBvutVJZu KZhL24ZPrRomymFvan9+sYBF8XGIQlxyOKttazXNn9tbJGWSjcM= =Njs0 -----END PGP SIGNATURE-----