-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 12 Jun 2025 05:12:58 +0800 Source: python-signxml Architecture: source Version: 4.0.5+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Ying-Chun Liu (PaulLiu) <paulliu@debian.org> Changed-By: Ying-Chun Liu (PaulLiu) <paulliu@debian.org> Closes: 1107195 Changes: python-signxml (4.0.5+dfsg-1) unstable; urgency=medium . * New upstream release. - The upstream fixes CVE-2025-48994 and CVE-2025-48995 (Closes: #1107195) * debian/control: Add pybuild-plugin-pyproject to Build-Depends to fix PEP517 plugin dependencies are not available. Please Build-Depend on pybuild-plugin-pyproject. - Also add pybuild-plugin-pyproject, python3-hatch-vcs and python3-hatchling. Checksums-Sha1: ee627a4fc00918164b6600f3b0dee6404f7452f3 2242 python-signxml_4.0.5+dfsg-1.dsc 08d93b0f1a60d054661f18c766d6edc0a18a4dae 1383700 python-signxml_4.0.5+dfsg.orig.tar.xz 04e6d875789b73b08b021a320c0785721c5a4ee2 8732 python-signxml_4.0.5+dfsg-1.debian.tar.xz 89cc51c3f4d29890100b2f0390d4a98ad73b9fe9 9294 python-signxml_4.0.5+dfsg-1_source.buildinfo Checksums-Sha256: 889b71f4671b17516974ce6c9a26004c3a505a39cb2fbc1526f05db8bb1b97cc 2242 python-signxml_4.0.5+dfsg-1.dsc 9349f81ad8457bd1dca2d6ec3c78ea7fe48584f8b5008e9529390528837bb7de 1383700 python-signxml_4.0.5+dfsg.orig.tar.xz 5568fc93a75b12de1ca2d2f2646818003dead006babe2a9fa72ff54e72976372 8732 python-signxml_4.0.5+dfsg-1.debian.tar.xz 468a9dbc48bbc89c4ce32920d2856a161b2c998a959a1e2b653aa7890b3ec01d 9294 python-signxml_4.0.5+dfsg-1_source.buildinfo Files: cc2c3400d6a33872796e64c61de72a18 2242 python optional python-signxml_4.0.5+dfsg-1.dsc 67e460c2bb4983235bea7c50c26c6672 1383700 python optional python-signxml_4.0.5+dfsg.orig.tar.xz 3b84f0ac7f9567d91a2bf5eaef5f1705 8732 python optional python-signxml_4.0.5+dfsg-1.debian.tar.xz 452cd5cc3d2d3ec8ea2e7ac0b1d3974e 9294 python optional python-signxml_4.0.5+dfsg-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEEo2h49GQQhoFgDLZIRBc/oT0FiIgFAmhJ/zATHHBhdWxsaXVA ZGViaWFuLm9yZwAKCRBEFz+hPQWIiNNvEACGtc4LRl/uobnlxSWD7QvBW659Bmms kc5xBsDbpD4ehEf9NTgxleWWNe42xzbsV+NkYBm0wsip2OgX0lAuWrW89YYSTDQO 2fsa6oc3ZO8DDybDwLXAIX1trX0jYWbDTZHzc1XJmFhWXJICsVtJvQpQW6TjjgBx XvC+vC6yEI4XaK13Tg6aEV5r8qLbg/uKjSDu8tSkOovgKQWUx0P8VRyR1vjsxboZ XkdyXHFeOiKNh0lv7PYEWIgt3OVcFDhPCHP4VOd/CXabTR3XGVDrjGbsB65JANm2 ggWM/VHzFhKgRty5hvqibB135wsz7U7TOiUQUebuor+dMEPjXI2zzbIYrmiHkFJe x9I+cJ/q4hxqvVu5w/uE+hyHQ3DW8hw6H1TfhH1+h3t0daw9ILVXipLh2R6jWzPM DsQBKd2iqYoHSm6hyxhhM9yktnHJSJYNe8fo8/HWg7uKQbegF38xFCtm3tRzI2jc CzdpMa2hF2zBvbrNtNdkLuVjBo9DYDLF/oKKyIZdorGDhsMkVXHGKuJZjVqAM3ly YAPoPnEsdGlML/RVBn6gs7T6HynJQg9iO8klxWr3ayTWKgb/3Ncaa9J3VksQbm30 kdlJR8hgXHGxX9UWIpqf6Us0VPCcQ22bbfs5Af8yOmJTxq5mp4m3fJw90Z+Ui89K 6xiu9421WAdb3Q== =c2R7 -----END PGP SIGNATURE-----
