Accepted libnfs 4.0.0-1+deb12u1 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 18 Jul 2026 12:03:02 +0200
Source: libnfs
Architecture: source
Version: 4.0.0-1+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Balint Reczey <rbalint@ubuntu.com>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Closes: 1139731
Changes:
 libnfs (4.0.0-1+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2026-53689 (Closes: #1139731)
     fix validation of string size to prevent integer overflow
Checksums-Sha1:
 5067affded2a39fb02820302f3838b0e0f62d828 2341 libnfs_4.0.0-1+deb12u1.dsc
 004de9e12cf726d7d5fe09b7aa47d14c3703e70f 251662 libnfs_4.0.0.orig.tar.gz
 3d359f3e55ce53856545fd28541e5dd7026f4377 12428 libnfs_4.0.0-1+deb12u1.debian.tar.xz
 3b306a18773615d2d2f710deb725d8edc0f401d8 6934 libnfs_4.0.0-1+deb12u1_source.buildinfo
Checksums-Sha256:
 6cb9b333d70a1c34dcf07cd4add84d4cbd450d9000ac160a09e068565e0aedf3 2341 libnfs_4.0.0-1+deb12u1.dsc
 6ee77e9fe220e2d3e3b1f53cfea04fb319828cc7dbb97dd9df09e46e901d797d 251662 libnfs_4.0.0.orig.tar.gz
 4c02147c67f0a078b32269fc2dda1baaf368b1778a22233b7fd85a4ce81d46bd 12428 libnfs_4.0.0-1+deb12u1.debian.tar.xz
 1b899faa503e3c4039302c83c1326aeabbfedcfd1e1bc3c70223fbe9ae43a767 6934 libnfs_4.0.0-1+deb12u1_source.buildinfo
Files:
 a28484a16d0c14b794c38c476a2da030 2341 libs optional libnfs_4.0.0-1+deb12u1.dsc
 623c6d5a4c514a9811c713effeaf68fb 251662 libs optional libnfs_4.0.0.orig.tar.gz
 b05ff11dec6c6e1709fda2bf2a48fc77 12428 libs optional libnfs_4.0.0-1+deb12u1.debian.tar.xz
 f9fab842b8c41d909eb09022f7ae417a 6934 libs optional libnfs_4.0.0-1+deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=erGz
-----END PGP SIGNATURE-----