-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Oct 2026 06:55:44 +0000 Source: sos Built-For-Profiles: derivative.ubuntu noudeb Architecture: source Version: 4.12.0-2~bpo13+1 Distribution: trixie-backports Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Arif Ali <arif-ali@ubuntu.com> Closes: 1145981 Changes: sos (4.12.0-2~bpo13+1) trixie-backports; urgency=medium . * Rebuild for trixie-backports. . sos (4.12.0-2) unstable; urgency=medium . * Patches to fix cleaner refuse out of tree tar members on extract [CVE-2026-79655] (Closes: #1145981) - d/p/0001-cleaner-refuse-out-of-tree-tar-members-on-extract.patch - d/p/0002-cleaner-refuse-out-of-tree-tar-members-for-hardlinks.patch * d/t/control: Replace script with avocado tests * d/watch: Update to Version 5 * d/control: Upgrade debhelper-compat level to 14 Checksums-Sha1: 38f5564b019490c5e6c7747da232d459c08b4f96 2302 sos_4.12.0-2~bpo13+1.dsc 6e26dfa836fad7e22e5c41c869c4376c4925253f 23304 sos_4.12.0-2~bpo13+1.debian.tar.xz 3ff62f8fb3c0cc48fea52bfe566499b248aba6b7 8559 sos_4.12.0-2~bpo13+1_source.buildinfo Checksums-Sha256: 808eff18ed4c48702ce5601bfb88c45a72c89db14939cdaef8831eee1de4b173 2302 sos_4.12.0-2~bpo13+1.dsc 8a1ebde98e4bd0585f4f31d8081c37b7e3272eb73f461725b28e2e562b5bd1b9 23304 sos_4.12.0-2~bpo13+1.debian.tar.xz 939e56aaf1581da40f1268f5619dde27be2bf85da7d9b40698114c65bdc122f7 8559 sos_4.12.0-2~bpo13+1_source.buildinfo Files: 6760faf1fb12746d4d19997f621a4661 2302 admin optional sos_4.12.0-2~bpo13+1.dsc df208a69e614c4ee2a707924aff639f1 23304 admin optional sos_4.12.0-2~bpo13+1.debian.tar.xz 04af9d59c6c1b3f354b3fffc64dccd61 8559 admin optional sos_4.12.0-2~bpo13+1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEE1Jad3EZlMnZZH8RdfmwLnrWUTOsFAmrN1vUUHGFyaWYtYWxp QHVidW50dS5jb20ACgkQfmwLnrWUTOu+TA/9GHgachPVUCZ1mEVRRPTkIIlpXmYC 3ieYzYZXmwbZT31EpSqFXE6Z5a/afXfZBf6HUw22Z0VeOiG/rYyJ1Ka6yEjTuxg9 SqZTv4cQDqc5q407TZ6KdzA6zjmsMQ4SIhcAH3xLt/NyZf5xUcz0KsjzpXevfQtf ti8PhpV7yEXpstGpwLDQRPqoFnp8E2FXPFzqrDuj+ihn1rnf24s2WfwcgjgF2PyU YqFO7JrLuovVTwZsbIP5oljVAO0EU2Yi23xJ7DOM6EaWhTN24uNs+0Oyy0fTdTP8 KmXypi6K9/Gd69wnwaUer6XwzI/AnmT+m8N1wRP4OhxGwGIp6wcGZd3p82pDlpoc cAOYtks+oFalLcsmM2NFiVSTNqnuBfG4gi7WPgy1DYKTI/X/xzJBPbfNt4NnLZmL nSMR9oSP+SVlCi4pnHBp1Iyvng9r0b6gxzlkWjo0aRDFv9rq5GFslciN9+0Duwb8 byYfde4oJhAF/j7Xq6e+EcBbBIa7Op+EcVeJuLx3pkWXSFDiqTrGX7BAiTZW1ldz Aa8VTrQFtKnpDoR2wjw/R5HcKYhoxS/+PTS7sw93n5wPsk15BT6oPdG3BDiKZ9Dq l8DCxDWfyNqxSJO6wvFTvwCs/BY7qz3/c5BOOhs9LsfURhll97qKhaROAczOTgXf zpXz93hf9QAby3U= =Mgzz -----END PGP SIGNATURE-----
