-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 24 Nov 2025 17:04:50 +0100 Source: python-gevent Architecture: source Version: 20.9.0-2+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Paride Legovini <paride@debian.org> Changes: python-gevent (20.9.0-2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Security Team. * Backport upstream fix for CVE-2023-41419: gevent.pywsgi: Much improved handling of chunk trailers. Validation is much stricter to the specification. * d/gbp.conf: set debian-branch to debian/bullseye * d/salsa-ci.yml: add lts-team pipeline for bullseye Checksums-Sha1: 572316f9c863bc28afa5c60dd5525cabd00ca89b 1934 python-gevent_20.9.0-2+deb11u1.dsc 332b1f42c98955f84dd863557af2aaa926d87180 4237730 python-gevent_20.9.0.orig.tar.gz cf8902543d5d6cabe1dc1892bc7e924d6888b5e3 76668 python-gevent_20.9.0-2+deb11u1.debian.tar.xz 0862ab00f3a4b1502b7b27d8a70d176345d66bba 6519 python-gevent_20.9.0-2+deb11u1_source.buildinfo Checksums-Sha256: 5e3669c09775d2572cd434c029cf4086a83fcf65044a1b59f6b63fffd53ce492 1934 python-gevent_20.9.0-2+deb11u1.dsc a43d6b8335eae4d1ebb3f9585bcb78c397c6f1f141eb2449838167cbb4a40ee3 4237730 python-gevent_20.9.0.orig.tar.gz 151b43d9e1f198bf1a3f7ab52901d3efc5998efbd25720d0f3d67ce5ca38e2ea 76668 python-gevent_20.9.0-2+deb11u1.debian.tar.xz 855e297e65b55332315048201093913274f1edbc33ff0db824675a72a966a054 6519 python-gevent_20.9.0-2+deb11u1_source.buildinfo Files: 21e8efacf95e96de4126fe3b02e678ce 1934 python optional python-gevent_20.9.0-2+deb11u1.dsc 0b8bae370d5a54e29027a7634868e9dc 4237730 python optional python-gevent_20.9.0.orig.tar.gz 0f027870cd02cafa0c36bd2fbd124bc9 76668 python optional python-gevent_20.9.0-2+deb11u1.debian.tar.xz 9bfbf9226e1faecbeda31ae42ed53bdd 6519 python optional python-gevent_20.9.0-2+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEVhrVhe7XZpIbqN2W1lhhiD4BTbkFAmkkw20ACgkQ1lhhiD4B Tbk9nAf8DGwVIrMxbOY/89jDKKXKywwfKbXHPwcAt2k1kmnn00B4siBvmnY5YGx9 gWGd0zk9GgoUs4AatCV8o8WGH0mhvHRIkav7kY0KJZJIckUBxqRFFvta3scdwCFq dxL9iW0YXl1lypT+vmGd6JlBGVAp1+G1+9YyQYrtbgSW/J7tb2K5tVsUA+OtEJiJ ZsVQBkieJx9YDThU1hId7fDfyMXk9hRLmQyhbVcNiwQ9DLD/YMaV6/p80brWjz7z PWnaxnGiEAF2UTqYO2DDg5bXWwqID3drTIHpbuHn4ETXm6u90uP9c0TsLJUj72PW sU+p1780WFObPiuxCRbOSu+gGUvEgQ== =j4Pl -----END PGP SIGNATURE-----