Accepted freecad 0.20.2+dfsg1-4+deb12u1 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 03 Oct 2026 11:43:23 +0200
Source: freecad
Architecture: source
Version: 0.20.2+dfsg1-4+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Science Maintainers <debian-science-maintainers@lists.alioth.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Closes: 1144349
Changes:
 freecad (0.20.2+dfsg1-4+deb12u1) bookworm-security; urgency=high
 .
   * Maintainer upload by the LTS Team.
   * Backport patches for
     - CVE-2026-34789 - Arbitrary code execution.
     - CVE-2026-73234 - Path Traversal (Closes: #1144349)
     - CVE-2026-73235 - XXE/SSRF (also #1144349)
Checksums-Sha1:
 1f8190bdab370665daf896feea49aa56c3608943 3458 freecad_0.20.2+dfsg1-4+deb12u1.dsc
 4fe4fdd072dedd2cd77097b46baca97cc244c241 38576460 freecad_0.20.2+dfsg1.orig.tar.xz
 514c1979d63c8508cfbf65907887d72f2d030c66 39344 freecad_0.20.2+dfsg1-4+deb12u1.debian.tar.xz
 41ca8d066c4ec8f8b9ab6d8fb4c80c8bba872390 13550 freecad_0.20.2+dfsg1-4+deb12u1_source.buildinfo
Checksums-Sha256:
 5abcded4c97186cbcb72a96e6c266c12c9b9e3c25fa9f17008dfecd346a68220 3458 freecad_0.20.2+dfsg1-4+deb12u1.dsc
 fde91f3ab109925743d0ef060d1f078a30ad9adcdc3b53a9a283a2f4f861a739 38576460 freecad_0.20.2+dfsg1.orig.tar.xz
 c8e8d3f3fb60c280accf1485fa0ee0ecafd0a0983839a9982b1c960e258ec328 39344 freecad_0.20.2+dfsg1-4+deb12u1.debian.tar.xz
 d03946aa0c9e7766b714362319e0e35cc0cf9894283c75fa0341afdbb3cc83da 13550 freecad_0.20.2+dfsg1-4+deb12u1_source.buildinfo
Files:
 3ef93615911fe20beebe4f483f077cc5 3458 science optional freecad_0.20.2+dfsg1-4+deb12u1.dsc
 4e4548289787cc46adff37278e49f1b6 38576460 science optional freecad_0.20.2+dfsg1.orig.tar.xz
 04091d3e26ba1868760d99640432f613 39344 science optional freecad_0.20.2+dfsg1-4+deb12u1.debian.tar.xz
 48c001994aca6a0fd596714859247ecb 13550 science optional freecad_0.20.2+dfsg1-4+deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=cnOg
-----END PGP SIGNATURE-----