-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 21 Jun 2026 00:00:28 +0300 Source: poetry Architecture: source Version: 2.3.4-0.1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Closes: 1132609 Changes: poetry (2.3.4-0.1) unstable; urgency=medium . * Non-maintainer upload. * New upstream release. - CVE-2026-34591: Wheel Path Traversal Leading to Arbitrary File Write (Closes: #1132609) Checksums-Sha1: c9c63a0792b3aec6815df9ccb948678aa853e1bd 3230 poetry_2.3.4-0.1.dsc 8497b386b5b86bbff6ede106bf4f3166d868c9f0 4120908 poetry_2.3.4.orig.tar.xz f1db7b419da4340e16d148933617f2b886f947fb 9660 poetry_2.3.4-0.1.debian.tar.xz Checksums-Sha256: 0f2ec6546e9931c4ffeb8380f676e640d53e66f83e561d14d29360e91a1a1fcf 3230 poetry_2.3.4-0.1.dsc 51aaaa06d2ca843134fc188e23f5f4ac400eeafd4d73e967d03c7c9721a2ea96 4120908 poetry_2.3.4.orig.tar.xz 16349696172a24aa33a40c05659cf8cac9aeb5b6f94e8629ec0cbf0498394dbb 9660 poetry_2.3.4-0.1.debian.tar.xz Files: ce6985a057bba50a79dac83eb3eda46e 3230 python optional poetry_2.3.4-0.1.dsc ea3172f5d6e442b171627f89fb49dd6f 4120908 python optional poetry_2.3.4.orig.tar.xz c9ae0447a7d369ec2de9871923b8b11f 9660 python optional poetry_2.3.4-0.1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmo3F9gACgkQiNJCh6LY mLEgsRAAq2W211kv0S93Sl5gWuyzr1SlozgY3e6j0oZO5RzbR4oC8A65+js8iD2J vX4pjeEhrsHgeSdGJ8EdKm4MmcwR0ug8/n6e8G7UZvsG0LpsbZQXIjfdVzsNlsCk IFiFBokawIVyTjIPri0AEJqYmaQwY48P7CYbKArnzR/D3dK2r2e4Jg/9BgzF/Bn4 eHvFJKNK0osp6V0FxFjkee3HO4O9vOXq/oKYtuLuMaKhiwNy28seRKRROBwnNNoJ 5O24aNZBkV2C4mu/P4XEPuqaTSIG5YGbJXUgg0AqaZGpvxVCVOVT7EL9yBWSdTwy /Vy0WydM94mDN1la5zNbfXrch76vwWYIiYdeGhL/GStb5LcKe7Ed+sVk1CLSTqc0 u+5pwoIrLF0wasO6GFhZu7gbHQOUUicW6Kiqm3IcgwDDhi4WrMr0lQY/RtuKCMpy pFnTrKa82QhA9U48RtzNrTimLyWZESNL5bmw22LUMdvVY/N3OvIXmsIV2QB99koZ Xw7TsOEXipJYrQy4CxQQiFFB7/F2EnJpVV9g0TDdNJwvUZLWeVz41TH4KKfRlIew itOs5zrnm4jWVRYa5SeaPs6qfbkEy7GoGzqvD1H2n45oDhpdjDhu8GHMR8OCWsMS paotgtWudZqFH/Gk6YPu+AfC6Ks/9OCZCQ+rZ+xiKivD5BbX7Mc= =iPBC -----END PGP SIGNATURE-----