-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 08 Apr 2026 11:17:32 -0400 Source: python-geopandas Architecture: source Version: 0.8.2-1+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Debian GIS Project <pkg-grass-devel@lists.alioth.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Changes: python-geopandas (0.8.2-1+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload from the Debian LTS team. * CVE-2025-69662: Prevent a potential SQL injection vulnerability which could have allowed an attacker to obtain sensitive information via the to_postgis() function. * Refresh patches. Checksums-Sha1: e354f00b2a8928ab6a840a87fb9a2d0772d47425 2412 python-geopandas_0.8.2-1+deb11u1.dsc d74f346984505bfc698f05431a79097114a4cac3 6006290 python-geopandas_0.8.2.orig.tar.gz 0b61d4ce381d1b2d6ca10b70c491381ea6e8d3b2 1322632 python-geopandas_0.8.2-1+deb11u1.debian.tar.xz c207929aa0a63979b33d2455e6d739db9d32de07 6481 python-geopandas_0.8.2-1+deb11u1_source.buildinfo Checksums-Sha256: 176003b3836795d78d7fe2e947d2306b3068ee1700ae4cac36216c690000b224 2412 python-geopandas_0.8.2-1+deb11u1.dsc 11927e2074e3f74c8a6ec474df0e25ad4bdee4a0e3e039e50dcf5db9d509c30e 6006290 python-geopandas_0.8.2.orig.tar.gz a3d7f38c65cd752130e6754ea565879847f72fe4a77f5eef1e2ac8687960ddd1 1322632 python-geopandas_0.8.2-1+deb11u1.debian.tar.xz 07f72c086a66243cf716f238608952b9c089859812170f4c9dd41b47ef71284f 6481 python-geopandas_0.8.2-1+deb11u1_source.buildinfo Files: 4a008d56662fd60631c4fd2c08de7872 2412 python optional python-geopandas_0.8.2-1+deb11u1.dsc f7a677a05e364820bf025fd3796a3501 6006290 python optional python-geopandas_0.8.2.orig.tar.gz e27c1b0399e944e6aa2c84a53f94f209 1322632 python optional python-geopandas_0.8.2-1+deb11u1.debian.tar.xz 0dcf621238218b44861f1bcc128c6990 6481 python optional python-geopandas_0.8.2-1+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmnWoVwACgkQHpU+J9Qx HljdOA//W6Nr8BJ5ARi8WafjARb1dFW0Pjj37b5uKNSdjxNU7SVLTMVabZlT81qY gnOqlLfBNLORDGIWVQY1OhTVBGQBKFl2J4EJLzUB3qt2xn4GNvGesDAT+ZUbT/uO 48h9odXY6WQxonMWG6b0dx8sKHRmsDB9zGzZ6EGgtBHFnLC59LR5pf/P429ff2sG guVFhu0FKuj6yGO48rHE7ZW9xPX6mL1B2+Ooz4VEPmIpUjCdcwQR/UgQfCnvY2kr ErLT7NPq31MYC8xEDQmBw9/YWqOhV60K8ZqT+9I9EWsjFTWu9DDoBEylAItM4OoF +4ljEfjOZh0ssb3HkQT12PtnjV44bZvzEj17yqG93EohWWOxpqtvM/MBkBflCppK R2gxlrKhVrQhdTojHpsZrBLLOquwelbc8JFjhnnLBfhmR3Hcr0R83AL774mv28R8 MnRwixkygqD/MqVSA9ectfcKmt4S+xfH9gVDdSiNuxzH5nuqs8FjUxRy8CCOt5Wf 0YbeHeIKQ2OLvDkygRD0bhCDxGZAaG0aIZTQzCcTiZR2qXd3ah0SzC4VJZ8dPTcZ 9kwtCLqIIlwoB26aC9E/DetN8gslpW4TB8iqRDuXLTI+Iwrh8MJhrqZJAZfOoKlx w8TXBg9zYjwtw/atv97qd1jOGDcrU6N3HRMcXMAyU/HPhsHEALE= =fUMp -----END PGP SIGNATURE-----