Accepted ruby-oauth2 1.4.4-1+deb12u1 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 02 Oct 2026 11:58:17 -0500
Source: ruby-oauth2
Architecture: source
Version: 1.4.4-1+deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org>
Changed-By: Simon Quigley <tsimonq2@debian.org>
Changes:
 ruby-oauth2 (1.4.4-1+deb12u1) bookworm-security; urgency=medium
 .
   * Team upload.
   * CVE-2026-54603: keep a protocol-relative redirect on the same
     origin, and drop Authorization when a redirect changes origin.
Checksums-Sha1:
 ac5e0a3a3db0ec6d2f1aa6bdd75d7f084eba48ab 2183 ruby-oauth2_1.4.4-1+deb12u1.dsc
 591ed15d0c7ffb5597fbe0a12786f5e3f6ff32a9 28477 ruby-oauth2_1.4.4.orig.tar.gz
 11a37b259290d1ddaf4ea0f197612b19d4af32fe 4968 ruby-oauth2_1.4.4-1+deb12u1.debian.tar.xz
 f3534d355357e86c138210051a70b69e03dabd52 7662 ruby-oauth2_1.4.4-1+deb12u1_source.buildinfo
Checksums-Sha256:
 f3501a1c9bf2e3cbb6a2b15fe09158665f8bc7f3b5bce1f277cd369e210c1114 2183 ruby-oauth2_1.4.4-1+deb12u1.dsc
 bd5970c1fd63240beea6b7b33d4313530dc7b1c9fbd15fe47ed34c3d1b9c0df4 28477 ruby-oauth2_1.4.4.orig.tar.gz
 7916f49f34c1b7dac66545b9ff295f065027ba8e6023d7ec91250c860abd683a 4968 ruby-oauth2_1.4.4-1+deb12u1.debian.tar.xz
 259c374f59cf7ab6e92d46ff516dcfcd1697d940f873bc5b238ddf23113f64ec 7662 ruby-oauth2_1.4.4-1+deb12u1_source.buildinfo
Files:
 837dda4b2261866a1f53b24114c04d85 2183 ruby optional ruby-oauth2_1.4.4-1+deb12u1.dsc
 352b35db684732553d0e6cbfbfc91570 28477 ruby optional ruby-oauth2_1.4.4.orig.tar.gz
 e4e26a6abebc52862d729052bbc8b77c 4968 ruby optional ruby-oauth2_1.4.4-1+deb12u1.debian.tar.xz
 70860d109508b492b19f659514c42f9e 7662 ruby optional ruby-oauth2_1.4.4-1+deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=v9jG
-----END PGP SIGNATURE-----