-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 08 May 2024 17:57:07 +0200 Source: python-idna Architecture: source Version: 2.6-1+deb10u1 Distribution: buster-security Urgency: high Maintainer: Debian Python Modules Team <python-modules-team@lists.alioth.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1069127 Changes: python-idna (2.6-1+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the LTS Security Team. * Fix CVE-2024-3651: Specially crafted inputs to idna.encode() can consume significant resources, which may lead to denial of service. (Closes: #1069127) Checksums-Sha1: d6af0da4367d4def659fddbe0f4bb5d1ebe78f83 2243 python-idna_2.6-1+deb10u1.dsc abf5e2e7d8f52dd00e658f1ead4eb9f4d2240bf4 135992 python-idna_2.6.orig.tar.gz 337ec85d6e9207dbac783252e32bcde673b3cad5 7532 python-idna_2.6-1+deb10u1.debian.tar.xz 9d2d9a7b6cc55a2caed6e5c976655e14271b6b03 7377 python-idna_2.6-1+deb10u1_amd64.buildinfo Checksums-Sha256: a9173579a521361fd5667ae308eab68d92b0e30804fca834cbeae08405d22d8a 2243 python-idna_2.6-1+deb10u1.dsc 2c6a5de3089009e3da7c5dde64a141dbc8551d5b7f6cf4ed7c2568d0cc520a8f 135992 python-idna_2.6.orig.tar.gz 31df1cece917291135d3f3dcdd15332ac7a783e4db4f89b57b7be561d0c4605a 7532 python-idna_2.6-1+deb10u1.debian.tar.xz cbe2907522a8ad570f58f42a2952768098e0e991a9d081408748b12a61c66ce5 7377 python-idna_2.6-1+deb10u1_amd64.buildinfo Files: c7b1294952e78673536f70b7e8942ae9 2243 python optional python-idna_2.6-1+deb10u1.dsc c706e2790b016bd0ed4edd2d4ba4d147 135992 python optional python-idna_2.6.orig.tar.gz 1b00a6d5c42b374e58023fc44c0e0a0e 7532 python optional python-idna_2.6-1+deb10u1.debian.tar.xz 14f07f605394616614b08f913372f444 7377 python optional python-idna_2.6-1+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmY7oQwACgkQ05pJnDwh pVIzCRAAoAongfv9PMgVZ7QilYetXJLqEtY1Zd6Pif8zDt5ElYRjML5vVk+JUczX Lze35hxCr46+FsxiOjRgO0TzCbm5n8FpJCJ5ngpopaE3piT2UfR9k2V7nvgO9/bs wCr5OMnJQfNYfoMz1gEFV9RInS4J1T3LeXyZNQxFBn9yUBfRUJLJ+uDlIZKHyRVe NCbsYMc4f6zi4KgoxiWtg4jFvQ6VXaCcmFFxjXRpB9vdRQkR8pRhRQV3/6LFDFkr zVnyyU4L9vVeR6kapdiEsntnr1nWchGWZNbe1qlD1y1TjWLHhyzvItdVPkSEYF0U Cjamd57gC469yHYPqwoV+nFQe+XCbkm/Bzsf9b1+ETCSot1plOANL5Y2VJEXw+cl RCKhcyFC43HXeUdfdd1HR+sQG3ax9hECI985XG8ZN6x8csNor/6S6IRttEchiUUn OFAs0AAyZWDb5zfBoW4PeaYBOrwhKH7EQ8RattItoN4dLBPDUnEUIIxslhdTWDk0 IuJv+GLio3KZ3koGmQQOZ26qT0N19mcTYj8P8xX6YEyMbMb1vfzkr03zyHJ0YlJo Ejfd4cgh8VENl64ipPds+jRNRQ/So+u/y/03zI18Aud43WLSUp4RvXXz66xflMzG GyQq97LHHZYuYbH+hu8Mytgz/+s/+wOw+D3teNMNF3ogteJ6+dM= =12Ik -----END PGP SIGNATURE-----