-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Jul 2026 13:23:43 +0200 Source: python-msgpack Architecture: source Version: 1.1.2-3 Distribution: unstable Urgency: high Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1141340 Changes: python-msgpack (1.1.2-3) unstable; urgency=high . * CVE-2026-57585: Out-of-bounds read/crash on Unpacker reuse after a caught error, potentially leading to a DoS attack. Applied upstream patch: "fix Unpacker crash after unpack failure" (Closes: #1141340). Checksums-Sha1: c1b00cded578b4f66359bc8f1313352c1e02aa30 2211 python-msgpack_1.1.2-3.dsc bbf1aebd5d0e6e8de980800f91377a72ca70161f 6552 python-msgpack_1.1.2-3.debian.tar.xz e40452dce25823cc0f011db7c2fd83dee01c9f4e 8229 python-msgpack_1.1.2-3_amd64.buildinfo Checksums-Sha256: 65c3e46b6bef67e5fa5eddd14bce456d3c86d4f810a0793936ab0b21d2da9cd4 2211 python-msgpack_1.1.2-3.dsc 739a0dd6e8cda04464ba5eadd2911a0fa5ebe831a5e9ddbb5276ac7fc1eccb85 6552 python-msgpack_1.1.2-3.debian.tar.xz daa29fc3a0cdc07200714834633717a7a507b78b98361dd4df67899298955034 8229 python-msgpack_1.1.2-3_amd64.buildinfo Files: 0f81b5e1151bfc0d62ebc4534944f4f5 2211 python optional python-msgpack_1.1.2-3.dsc c9a4095700dcc97971a839b5889a70f1 6552 python optional python-msgpack_1.1.2-3.debian.tar.xz c352bbaf467d472809db3ef491316714 8229 python optional python-msgpack_1.1.2-3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmpKUYoACgkQ1BatFaxr Q/6bKw/+Id49QBkk3p5nMygj6XDTza9d7ITX9f5AGS0ROUp9tD30bo2WFQg10XOl DDlmdvMRM0OOuMHakVPmvxvmXVaBXw6gJJIXX/Kt7pSupq0WrFZHWK1WH1ugBYYy WKuONOCru8/+vUpqGJ3ELq9j4+f6v6scw6FWL9mCwc21/26s5E4mYGIcOw5J3SBZ 2FBo0rhVHyVAoVCMzY4TiSUG0AH74faJ/2y6Or6HSjI/JcQ4hGAqZ7sF0kWeshXD bBiiuU4+2SiEVrBYsZ7piQX7wS2Ab1q6XbaW7AvES5kHAF9wcUWA96yKwYvHtcck jkx7TB8DKt4aP6NzbWDF8c1eNonPfDsxkZOrRw8dITDoDUcjIrB7Dz9hZBZJw0tQ cHShihQzmUwDE9NIS//NkIb7VxKkzWlWUeY9k81KKf4VQY2M2dZln8M0OGdaEXlU +PI0UwWAgr05rBqe5eq8O9xuZXzepcFQWT46aetREmN4cqR7EbA5KMZC9NpOY6lY txqgP1wsHZuMP4S2shMNYVZThkcuOWjdyGSQwrLNiUtawXAlKOzBwUGEFrQbA268 36fZD1ySwT4H+Y8Y/XJyEWjFxlag/lwt6n1Bqn4suGIGw1oxJJcCd1Pl86+ThTf0 whlol1s63DAkI2BFa544UnuVSpEcQEoOq+vNm9JD6skgpbjc0kU= =5g42 -----END PGP SIGNATURE-----