-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 03 Nov 2024 13:01:39 +0000 Source: rust-pyo3 Architecture: source Version: 0.22.5-1 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net> Changed-By: Colin Watson <cjwatson@debian.org> Closes: 1085296 Changes: rust-pyo3 (0.22.5-1) unstable; urgency=medium . * Team upload. * Package pyo3 0.22.5 from crates.io using debcargo 2.7.2 - CVE-2024-9979: Workaround possible use-after-free in _borrowed methods on PyWeakRef and PyWeakrefProxy by leaking their contents (closes: #1085296). Checksums-Sha1: aeecb0697b64d93f333374433d71a0e56111e9ef 3239 rust-pyo3_0.22.5-1.dsc 73b08c9f37ee206d6e75e5b704ae87e6bd6d7bc4 546700 rust-pyo3_0.22.5.orig.tar.gz a72245a30b986ff05c1a730838b75df4667c4bf7 5896 rust-pyo3_0.22.5-1.debian.tar.xz 7c51140ce1b7d0e554a70bbbe63194f1de6da057 7825 rust-pyo3_0.22.5-1_source.buildinfo Checksums-Sha256: 8e2ea2bd9c7a0ce90c1213ba348a944cbfcfe623c6606af1cd5b9205f1b292c5 3239 rust-pyo3_0.22.5-1.dsc 3d922163ba1f79c04bc49073ba7b32fd5a8d3b76a87c955921234b8e77333c51 546700 rust-pyo3_0.22.5.orig.tar.gz 36855bd088b735d04620452ad2c95a2c566388776743bbe42dc3e93d9373653c 5896 rust-pyo3_0.22.5-1.debian.tar.xz 48d42a84750f12639f0d6fca6e3782e7ba03e2af3679dd3a2c1720eeed9ebb87 7825 rust-pyo3_0.22.5-1_source.buildinfo Files: 0d2bcff29ddfc646286516173cd50bbc 3239 rust optional rust-pyo3_0.22.5-1.dsc f4b8a180800484efb410858fc4bd3036 546700 rust optional rust-pyo3_0.22.5.orig.tar.gz 0e649245441fd7ae4cb29fcfcefc4b0d 5896 rust optional rust-pyo3_0.22.5-1.debian.tar.xz d7d639bf68b5fc30a38e211a8c8f2cb5 7825 rust optional rust-pyo3_0.22.5-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEErApP8SYRtvzPAcEROTWH2X2GUAsFAmcndDQACgkQOTWH2X2G UAtIQQ//aBZR/t9FkUb6r4juoNx0LsXr0D1Q8yZxKCf2luEophB9ne41ccub9w/V gRWrb1+HWE1kS7OQg7zTJN7C2qxDQt6ovgzwq9ruDeSP93QiQsg7B3xbl2oLTEdN vEFSF5v39uvkFHX2MUCmia8fP2QHfx28/YZEa9v1cUJk0idaES1LmVLjjPsuE+ss MAr1qgR8x5F4hqYCpMLMkBfrGr/5zgY0RlamswUolnV7c4e6QUykCZB2oz82VRwH i/FD/H8zr5KAsIbxZnjdyhlkT1qGZmszXOcrAluidaciulaSWbZ1BCBB7FAZm/QL 0kPwstHF3vo67WBnG5+PVwrfpz7GCZ0YBZXY+V6zk82CIWHS5eMMEeQfHaS63NL0 HI0wHeIxScI5M3nDqHcApNaDTR4JVn0ZhDJBdGg3aeHsP1BK+qiqBwDNSUsjGb40 fITzTyIZTPX8wda3PXkd++vzePrvTYruw1ykYS9TvkR5/0HXxhQxdnI6gAl8YJyY wxGaz8IAxbWdFosj6UIrIC36r3QxjbYKFWRGDS8/uTocr21QHDCmD4gwyBIsgKh2 xRqjbCnbxDqm8z3hFE8dzCxW3XjAzaXeSS57YzGmFcxHnxcsOMoSogRqGrRWUxks bhX2bKY6PXtODoStL7lnlPjFPJ7uZ2n6aDVnqe9iFT4gptjigxs= =7YER -----END PGP SIGNATURE-----