-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 25 Sep 2026 15:04:13 +0000 Source: sos Built-For-Profiles: derivative.ubuntu noudeb Architecture: source Version: 4.12.0-2 Distribution: unstable Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Arif Ali <arif-ali@ubuntu.com> Closes: 1145981 Changes: sos (4.12.0-2) unstable; urgency=medium . * Patches to fix cleaner refuse out of tree tar members on extract [CVE-2026-79655] (Closes: #1145981) - d/p/0001-cleaner-refuse-out-of-tree-tar-members-on-extract.patch - d/p/0002-cleaner-refuse-out-of-tree-tar-members-for-hardlinks.patch * d/t/control: Replace script with avocado tests * d/watch: Update to Version 5 * d/control: Upgrade debhelper-compat level to 14 Checksums-Sha1: 411bd788ad996c51a1908586595047e23ff13ff7 2270 sos_4.12.0-2.dsc 50c9e8f5b63e8532d81ab492729979f6dd5da562 23092 sos_4.12.0-2.debian.tar.xz eb1e41341b874d9f96f0b6a40f19aad88ced8999 8525 sos_4.12.0-2_source.buildinfo Checksums-Sha256: b80f8b9f6486eaf6a6babd74332e553b73e43a4f4fdccfa1d23cdc33cb1bb2fd 2270 sos_4.12.0-2.dsc 6a4d9c959dc618ccd9509c788a36d1c0b9a9d94ac55a85986ebbe2a79075805a 23092 sos_4.12.0-2.debian.tar.xz b9c6b3e759bc387d78258ddda2af50734a2c5883ddfa652297dad80bc7c9f0cf 8525 sos_4.12.0-2_source.buildinfo Files: 0b5c83f0f6a3834df672ef4ef4e57b04 2270 admin optional sos_4.12.0-2.dsc 0cacf8755068bc936627e01fcb493c4a 23092 admin optional sos_4.12.0-2.debian.tar.xz bf1f9407cdc9fe881494134d35d4ba01 8525 admin optional sos_4.12.0-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEE1Jad3EZlMnZZH8RdfmwLnrWUTOsFAmq2yGIUHGFyaWYtYWxp QHVidW50dS5jb20ACgkQfmwLnrWUTOsw+w/+MLoq7pmTdNpMlUtN8mRNBL9rQXJm ffMTW2NmzDDtmOQAPewK43feIJTdat3Q/dtO3v0XY5UGsdF/EHiodzZgBP8KwV/z rYH26EkReQqMlWR17cYZvdmbfNmJYpo768BgcmqmXy123unzl0gS7Xt+5jOONL+r Any6kNQPR2z1xOW1gbh6PASfiUpWNj7XShtMlB1aFfrFK3DCXXUSdN4i0JnbyoGT k+s2CVA1w/JGFpaBeE+bkJXFI1/lCCsC86/JwxmSnK1rfOi9bBYKap+G2AKgy24P UHlGa1V/RhjClvcHkRFlTb1ED5JxiuL24ZjpnWFDmX1fLWB9KWKldcqlOTDdig+t xwkl1uzv44SqBxrW6D/FR6btuaNRMaSZzSJLDxROk5enqxB578GHY5KMBU6ThdDb bWA5D8vgCJgqdLfc27EkZqd1EXxysoggqdV8fMSO01Lj5nE9qKaFB8X9QdDlwLlS bd8sOkma1hNwV1pkuaiLYLmIQSv2PkYscgbxRTpBsW3rpcbATWzP9lgYHV4lE7um rWPXbtqLz5iX69byHVI2XTs8rsXc4CrKYCMdHdVKLwHGkYbHLBANU+/8GZei5mfO DqPYC7/vqTh2N2MeeWAGJPFbwHpcVjDSPHsimwHIQrX8NEgPJCmTPydolCX10zPO LjWs2BsQaOP/jYo= =xbWS -----END PGP SIGNATURE-----