-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 26 Mar 2026 15:12:42 +0100
Source: simpleeval
Architecture: source
Version: 0.9.10-1+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Tryton Maintainers <team+tryton-team@tracker.debian.org>
Changed-By: Mathias Behrle <mathiasb@m9s.biz>
Changes:
simpleeval (0.9.10-1+deb11u1) bullseye-security; urgency=high
.
* Add 01_CVE-2026-32640.patch.
This patch fixes CVE-2026-32640
https://github.com/danthedeckie/simpleeval/pull/171
with commits
https://github.com/danthedeckie/simpleeval/commit/9cb4a7b99498c173263bd90f77bc185e160fb6b8
https://github.com/danthedeckie/simpleeval/commit/1654cbf0219345f707c79664b8657be6b8d23e33
https://github.com/danthedeckie/simpleeval/commit/cffa9f68cee54404a2ef43d949a8ae8a3311c503
* Add a salsa-ci.yml targeting bullseye.
Checksums-Sha1:
1fb28dc2fb72719e66cef4e68ea783780188a40c 2161 simpleeval_0.9.10-1+deb11u1.dsc
99759edf051e1933adf07b58d64b24e445620d99 19466 simpleeval_0.9.10.orig.tar.gz
fd62eba44d31b783ced801cd73bbdb2c9f66fe03 8276 simpleeval_0.9.10-1+deb11u1.debian.tar.xz
bfd311d79acf1257ec07495582b9e2d9166a99dc 6879 simpleeval_0.9.10-1+deb11u1_amd64.buildinfo
Checksums-Sha256:
1ed0eda3173a0d5726ef13ad1bc0d31b76aac873f4a405a22435d95604682407 2161 simpleeval_0.9.10-1+deb11u1.dsc
9581d4d1a10f1a2ab1f0337c47175302303dea909fd12f926b591639271aaef4 19466 simpleeval_0.9.10.orig.tar.gz
7013af4e7aa8a0783d5aa99fcefd33ef9952be0b4e9f689ca10a0ae33990f136 8276 simpleeval_0.9.10-1+deb11u1.debian.tar.xz
874e76998806928ed5324ef477387605e34940ce4e44a23d95c62cffd73446aa 6879 simpleeval_0.9.10-1+deb11u1_amd64.buildinfo
Files:
6c6f2e050bf892b16afde12ff5e1242d 2161 python optional simpleeval_0.9.10-1+deb11u1.dsc
cf204ddcaf13405e68be2a05326ec017 19466 python optional simpleeval_0.9.10.orig.tar.gz
07f911b9fdfafaf518cd8b86d3036fbc 8276 python optional simpleeval_0.9.10-1+deb11u1.debian.tar.xz
ebf70e35ab6c046f5d6ace938ef88b18 6879 python optional simpleeval_0.9.10-1+deb11u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
Comment: Signed by Mathias Behrle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=Bmgv
-----END PGP SIGNATURE-----
