-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 18 Jul 2026 12:03:02 +0200 Source: libnfs Architecture: source Version: 4.0.0-1+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Balint Reczey <rbalint@ubuntu.com> Changed-By: Thorsten Alteholz <debian@alteholz.de> Closes: 1139731 Changes: libnfs (4.0.0-1+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2026-53689 (Closes: #1139731) fix validation of string size to prevent integer overflow Checksums-Sha1: dcbf47671511c2b1ddd08e395c07e26693fd1aad 2341 libnfs_4.0.0-1+deb11u1.dsc 004de9e12cf726d7d5fe09b7aa47d14c3703e70f 251662 libnfs_4.0.0.orig.tar.gz 6b059d88bb3642321a9f5f22f692fa0d2486eaf9 12416 libnfs_4.0.0-1+deb11u1.debian.tar.xz 685304f9649eeab42179816b8daf04d36779295d 7457 libnfs_4.0.0-1+deb11u1_amd64.buildinfo Checksums-Sha256: 1e63ec682e96e165997e029846de14d3f75fc167dcde5274ae9b0e4ee1db9301 2341 libnfs_4.0.0-1+deb11u1.dsc 6ee77e9fe220e2d3e3b1f53cfea04fb319828cc7dbb97dd9df09e46e901d797d 251662 libnfs_4.0.0.orig.tar.gz efe8188be00f76bed14f23c17c868fff9ab59aa57849c88efabe60ba0302c689 12416 libnfs_4.0.0-1+deb11u1.debian.tar.xz da209c8a7684ffefdfd5f3f26d5609c8aa37c309bfb3cab36d2b632944640260 7457 libnfs_4.0.0-1+deb11u1_amd64.buildinfo Files: 86c9894741fa5ffe99dafe75210edda1 2341 libs optional libnfs_4.0.0-1+deb11u1.dsc 623c6d5a4c514a9811c713effeaf68fb 251662 libs optional libnfs_4.0.0.orig.tar.gz 71cc363bf8a1b008cdfb9eac95551ab4 12416 libs optional libnfs_4.0.0-1+deb11u1.debian.tar.xz 64398ecfa3d5f7ce5c0793b47e0e6d6d 7457 libs optional libnfs_4.0.0-1+deb11u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmpbukRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR12UD/9MudV6920Xmm4dEG5HwlMZzSABLurp ZWXkI+bFhSIrvYBiotIELdCACDz61em9As+M7sHa+r7HDyThq5fLy859FI/OHWAC JdmPxeIxHodLVjmByF/rJJpAh1ieeJnjpY+IJhfMBphBqd0uHHNNoOvaKZqoWlvK 9Q+lFbrV/Frg11vHlbCyr3S8wgnUCX+vQwFrOTwCCD8sD0kp3DUwOqLXlWU1HrwP uoVL2PBl+QoDWbNM3mrFZNLiCIhMvn+SX1pcj81pjtYK78bSS7TKs8As91H6yM++ R2w6Cs425Ui+hFv25c4AnL/snBafIsd5iK/DhxDmK8p9lpS9xo5eoIgvOtdmdUo9 oXAfvyYFOWv09K4LreuzMfkHzwXT0zv2lnFwi/mDCzXhPdVURP2T/CuXQzCJvfCW dAUGs0gHKdhznsOP5lzSi9rH/md2oPHmEya2Ms+EJb69i/4n9lewx7EuGc5AGeWR MPAaUNJqD1Ki2B541Of3aG4t3MY0ELJe35uJPZZzypKqVLRwRbc3PbdMAQ6547K6 CaaKjSjAiLuW+/vYmWHfnRaAXHrkyVJBatCJu15fHXnuffNONiBQeG1wyNOqd2U4 Z/B+vK/RR13T31/jBHu7FiimvYY4vUB1GYV4ZQm6GtTCvGKznLf5TO3LAs3hr9xF Pe06ocCa49G9bw== =N9qf -----END PGP SIGNATURE-----