-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 17 Nov 2025 17:40:26 +0500
Source: python-scrapy
Architecture: source
Version: 2.13.4-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Andrey Rakhmatullin <wrar@debian.org>
Changes:
python-scrapy (2.13.4-1) unstable; urgency=medium
.
* New upstream version.
+ Improved protection against brotli decompression bombs (CVE-2025-6176).
* Drop d/watch in favor of d/upstream/metadata.
* Drop the Priority field.
* Remove the obsolete Python 3 mentions from the description.
Checksums-Sha1:
9594313de29c8c3f9b6152cc460fbd15f524d544 3514 python-scrapy_2.13.4-1.dsc
3389a6735cf03ee22c8b843d3e55de7c1387ea89 1265867 python-scrapy_2.13.4.orig.tar.gz
d04f56b0497e47c96e2e30d667db589fac970ef1 10936 python-scrapy_2.13.4-1.debian.tar.xz
8317a5c7bbb58ad83f77b197cb2c590e3901a177 12011 python-scrapy_2.13.4-1_amd64.buildinfo
Checksums-Sha256:
b26abbf41a169f1bfa1ed9f96cd15081d018c29d42d1094ed1098188991fd099 3514 python-scrapy_2.13.4-1.dsc
d617f5f61780fd2800deaa9624ceb3923129bd44f9ba3025ecfa673029a450fc 1265867 python-scrapy_2.13.4.orig.tar.gz
3417494c91ab636ae474144f50a5072a232c76ca3a84cd3099f4912872ab664a 10936 python-scrapy_2.13.4-1.debian.tar.xz
b6be0831bf540bd461eb5172adf4837f0af0412b00de64a0cbfc7389ea2e95d5 12011 python-scrapy_2.13.4-1_amd64.buildinfo
Files:
a5663d8de291baca71fc3d38949fcae2 3514 python optional python-scrapy_2.13.4-1.dsc
994d94e9d282c29119233e09313eb145 1265867 python optional python-scrapy_2.13.4.orig.tar.gz
469f182b9a94fa1217c20f310cfdfcc7 10936 python optional python-scrapy_2.13.4-1.debian.tar.xz
8bcc944eaa779f1393685ee3ee23a26e 12011 python optional python-scrapy_2.13.4-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=NpE/
-----END PGP SIGNATURE-----
