-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 04 Jun 2026 14:03:02 +0200 Source: gsasl Architecture: source Version: 1.10.0-4+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: Debian XMPP Maintainers <pkg-xmpp-devel@lists.alioth.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Changes: gsasl (1.10.0-4+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2026-48829 Fix NULL pointer dereference in DIGEST-MD5 parser Checksums-Sha1: 94008e58bfc81d41f31e0d400a5148cccddc7623 2929 gsasl_1.10.0-4+deb11u2.dsc ec3def1bdc4a0b6284f0d1e2901495218c87587e 5946076 gsasl_1.10.0.orig.tar.gz 00a200a3862a973ac20de7d46df453c2cf46fb45 488 gsasl_1.10.0.orig.tar.gz.asc 4fb3ab0c1bb314c6d591cd51c2900ff2b0b12347 14984 gsasl_1.10.0-4+deb11u2.debian.tar.xz 2f40bc8ee6a3b7447cbd48e2c9d422f6ba1ba9d0 13851 gsasl_1.10.0-4+deb11u2_amd64.buildinfo Checksums-Sha256: a08d688525b6929c9356c0e884434274ea10df590e9cb23805187d8ceb96bfe9 2929 gsasl_1.10.0-4+deb11u2.dsc 85bcbd8ee6095ade7870263a28ebcb8832f541ea7393975494926015c07568d3 5946076 gsasl_1.10.0.orig.tar.gz 092aa96340dd24d796fe8851866aad19ae4cdd99de20886da79d8a36f907dbe6 488 gsasl_1.10.0.orig.tar.gz.asc e1f23933c4162a7f56806400767edaa48d134a04244ea1216748f1313ab40f89 14984 gsasl_1.10.0-4+deb11u2.debian.tar.xz baed72e7da0375f2eb184b3c5f01b158a90bf75915588a9191b84b547bf8337b 13851 gsasl_1.10.0-4+deb11u2_amd64.buildinfo Files: 646a26402d62a397b38f6316da526117 2929 devel optional gsasl_1.10.0-4+deb11u2.dsc 70918edd489eabceb622945940871348 5946076 devel optional gsasl_1.10.0.orig.tar.gz d5fb422debfe280238e69336ee10ea6f 488 devel optional gsasl_1.10.0.orig.tar.gz.asc 98d6edc54d2dceb483ea2f29b1851fc2 14984 devel optional gsasl_1.10.0-4+deb11u2.debian.tar.xz d134c277afc117e10c2f67c054811a67 13851 devel optional gsasl_1.10.0-4+deb11u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmoizkNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYRxNYD/939I6VdjBDgYESzIKLT+u8s1r5UNMQ /ZUGEjXFlNvHgmuUHlubvF3lBURT0lJreVG/2+HsUyEqeStvj0U+lTg6WxU6XNvB zH5662VKgFX6CBwBHgkELQtdORDBk+nV+nnQzKSv7BLpVYktyfriesGbQS5FFQpn vsG2bJbll+nMvFwL+pk/li7oipwqnEsFRXZ21mTz3utfsSu0DvdGQHicbyCUCcUg pyyIb7RZFJr2AW5tF2gwGEiImilEsNu4GNR7zI359/pUJKIYuIwL/BvLX41WosC7 DZPb3QTsZJ8Gj92YbeSLMC6nNa6wk/tBej5deFwTjKAa7YRSXGz2W0N/t9ulR4iH Vg+fX1ZjZL08JCxevbCWSzvQ/XZBr7JYbIsdPuFuxdDiGXVUAtP0RZg5uaQu9PMf ltQJ0xg3XSY9iJDPzSexto6d0hLSXj/UhtHWvx8N3ShoQ/BDWwvbx//WSsdsI6XF gtg25B0TM0Dl1WvF3M4b/N5nAosMiD/99TGfw6mnbrEFiiB5dARGQlLzG8PxPtdn sLQOBb7s6q68nuDeyEYExRuhBZG4iyoSjyJr2kKxVbqpZMOj293VweW/9bI+oYU2 HUY6iSZ7QVNRfD8EFlpWTNSVrmnH3HiaCmOA8rb4/JpARpiKQivmXqee+xlooKRx /wMPMmplp01Tzg== =WzrS -----END PGP SIGNATURE-----