Accepted git-annex 10.20250416-2+deb13u1 (source) into stable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 31 Oct 2026 10:55:29 +0000
Source: git-annex
Architecture: source
Version: 10.20250416-2+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Haskell Group <pkg-haskell-maintainers@lists.alioth.debian.org>
Changed-By: Sean Whitton <spwhitton@spwhitton.name>
Changes:
 git-annex (10.20250416-2+deb13u1) trixie-security; urgency=high
 .
   * Address CVE-2026-112818.
     Thanks to Joey Hess for preparing the backport of the fix.
Checksums-Sha1:
 a45574ba2aece4ada7027df2078249c2081712c8 5792 git-annex_10.20250416-2+deb13u1.dsc
 585d7c7717862aa3076310df5b19511cafddcef1 7123144 git-annex_10.20250416.orig.tar.xz
 f4169a7496ddd7175ef62b0edb1077874097ec47 96608 git-annex_10.20250416-2+deb13u1.debian.tar.xz
 2677102b2418e8dda6a89a873715debc8e0eb409 14149 git-annex_10.20250416-2+deb13u1_source.buildinfo
Checksums-Sha256:
 951a9f208db344a11c21e6d6140fa86bf7a2129af2e6d070242fdf0e9632b44c 5792 git-annex_10.20250416-2+deb13u1.dsc
 945f78cbde7c4b3c3add3e0068dc34fbd98c4fc4cbfbba8a98282a2a31c01dd0 7123144 git-annex_10.20250416.orig.tar.xz
 58f310371e890989a184a79c7ee5ef895596b651253137af9f52cbf379bbb98f 96608 git-annex_10.20250416-2+deb13u1.debian.tar.xz
 ded08bbee27542ccd9709eacdc61c1cfec4a9eddb177304d194c0341661c4c93 14149 git-annex_10.20250416-2+deb13u1_source.buildinfo
Files:
 f50674fd7a48b1781c5bedf741616625 5792 utils optional git-annex_10.20250416-2+deb13u1.dsc
 f2f7d2b0910b80438b5619f84f2bf69d 7123144 utils optional git-annex_10.20250416.orig.tar.xz
 731f79970258f4db0b574583ba6461d3 96608 utils optional git-annex_10.20250416-2+deb13u1.debian.tar.xz
 0cf2f7eba14bdfa06a2fa2adf6fbdaaf 14149 utils optional git-annex_10.20250416-2+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=GuzC
-----END PGP SIGNATURE-----