-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 Jan 2024 21:21:42 +0100 Source: libspreadsheet-parsexlsx-perl Architecture: source Version: 0.27-2.1+deb11u1 Distribution: bullseye Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Changes: libspreadsheet-parsexlsx-perl (0.27-2.1+deb11u1) bullseye; urgency=medium . * Team upload. * Add a patch to fix a possible memory bomb. [CVE-2024-22368] Patch taken from two upstream Git commits contained in the 0.28 release. Checksums-Sha1: f9ebd85576c36181c57490e2747566af53855c9d 2703 libspreadsheet-parsexlsx-perl_0.27-2.1+deb11u1.dsc a5d5120d3163e99da8c34ef6e2ad6e04bbbbd566 3820 libspreadsheet-parsexlsx-perl_0.27-2.1+deb11u1.debian.tar.xz Checksums-Sha256: d91bc4788715281d7917b0948d2d210808e992b5112b15c811b6a9cb11c816f4 2703 libspreadsheet-parsexlsx-perl_0.27-2.1+deb11u1.dsc c7e969bbcc7a95e9206b5fd80611b3ee5307f31698fea67f78ddd71dbb685c9f 3820 libspreadsheet-parsexlsx-perl_0.27-2.1+deb11u1.debian.tar.xz Files: 97debfced3850bf014c8212ade8909c6 2703 perl optional libspreadsheet-parsexlsx-perl_0.27-2.1+deb11u1.dsc 429c33e71961cc82dd87629af29c31d1 3820 perl optional libspreadsheet-parsexlsx-perl_0.27-2.1+deb11u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmWhsVZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgbJeg//VDcC0AOSB4uRRFK+gpyvufiSlmv+yt+j0hcGEDVrJwrxLlBDLB2t9P3x qZ0A5sJpP2c/aQ5ZG+Ww2ZNvPk0mQtL4rnbU95BxNCaoIlMBPbMcODfX4c61YP/2 +XNqRy4wSNSG7OicffFLzkc6DQnbrs2zLOtrYQP5gq6yVbf7kFfI/6uPXuDOaSWh 3ppiv6KvvDbrlYdt8h+f9CPrQZrmnIrvH94QcKEaakhF/UFFaU147y+97cyZucOH Xd6b4ZV/8xMyNxjfOqqRSvCSsrNRn3V5Q6UW4OAkYHXzrfJMaSoLDDxK6GES1Xr0 WOm0nupkyF69J3zA7qwdZ7AymSShxNI684mJVYoSoR3ol5vMq5AedRV6NokrgKfN 3w85r33bhARdQH5ey4EU3elLKi86djNnYvjWLT6M9EgCASrG5HNWCTmMeH99axqz A+W+KzV07UmkK72Qp+RfDE1L7H6alQ/tXZxwWoQC2LhdOa6MdrL89Xe/TIyDAx8F F5y5kQ+Cazs13AHsI8pvHJZ4lWFmcywNhxgIMvDb8RK7LnkqCYNclJ/6eDa2MQba 2K3q27p6pW30sheDbqA99H+aooXWNL15Tb1aqatHrsaq69zdokhc3Ptvsq1LBVJR c4pUlAVvFmqN83lsqP8j7bOj291E6xPZ7sPQDEYgrbezhxxl6Fg= =8DST -----END PGP SIGNATURE-----