-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 06 May 2024 11:01:29 +0200
Source: tryton-client
Architecture: source
Version: 6.0.26-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian Tryton Maintainers <team+tryton-team@tracker.debian.org>
Changed-By: Mathias Behrle <mathiasb@m9s.biz>
Changes:
tryton-client (6.0.26-1+deb12u1) bookworm; urgency=medium
.
* Add 04-send-gzip-only-with-session.patch.
To prevent zip bomb attacks the server accepts since
https://foss.heptapod.net/tryton/tryton/-/commit/1923117e935de62276352585185ced6d854bcb3d
only compressed content from authenticated users.
This patch allows only to send gzip content within a session.
Checksums-Sha1:
83fb65f32fd341de40a08688426fb5f949d83bcf 2603 tryton-client_6.0.26-1+deb12u1.dsc
5782d31b9a79784d2fd5e571f7db772758cd7720 20972 tryton-client_6.0.26-1+deb12u1.debian.tar.xz
b14e6d3f849d34c1672c7e70b7f814293fc62c53 12041 tryton-client_6.0.26-1+deb12u1_amd64.buildinfo
Checksums-Sha256:
f78cc11c080f98e8c7f0f9c03dd9c24da973cc6f256a9ee860ec15146369f934 2603 tryton-client_6.0.26-1+deb12u1.dsc
6a657d10fde20f818bb8fe6fb2461d0ef0ef986b9a359ee026874dc565c61fa2 20972 tryton-client_6.0.26-1+deb12u1.debian.tar.xz
f729824363c1af8f000cafc049501558c9f322fcd765737f261eba187af4d7d6 12041 tryton-client_6.0.26-1+deb12u1_amd64.buildinfo
Files:
aedb997127093d0ccd23a13421fd3a0e 2603 python optional tryton-client_6.0.26-1+deb12u1.dsc
bc4a1026022684738bd8618912b53920 20972 python optional tryton-client_6.0.26-1+deb12u1.debian.tar.xz
319ad021458656e37b428d6188306d88 12041 python optional tryton-client_6.0.26-1+deb12u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
Comment: Signed by Mathias Behrle
iQJFBAEBCgAvFiEErCl+XEa50LYccXaB1tCb5IQFu/YFAmY4nUcRHG1hdGhpYXNi
QG05cy5iaXoACgkQ1tCb5IQFu/Y5rhAApRcZPQUflCH/oi1yyL6nksamgONBq2Yb
5usskWxlTVQMEnlwHmNit4RPudV1wnlO3QUdIVg57i2Z4jR2rLkXqnjG0CFiPWX+
F7SzBFisqYzDJC38jQrE/GDuXxtjrpNZpvSuIIPTnWZB8vtkfiEz4E/XPVZ9WjZz
IUmCMxWIgUstB97wB72N7LeYaIdSFgTfses3qlmF1OhrnzJCCnGellkJgquXq9tb
pSOSGCXbxuNF428ijf13lgWEdkOeYxpMtFnJ3W5txrC6YCb2ezrhDS4vRYa7uvxk
FUSsml0l5vnuR13Xwl65YnsdLu+oWSs+wUKFIeTzXS2hlFLT0SNTE6XatFnOO+Gt
jF4zzpZJU79wBJMO458ymYx+pu3oBLC6+/J5k3dOho/JcHjKy/23+rK1qnPN6mJE
WFmsUELEx6BKxbtCmtFe0zU1Ogt4qcMKdULoGN0jlvplytnX+IUMPhsDnLQ4e3Ke
KnIzML+SnBLpNd8YxTT3B4hhnJ5p6BAgr5A14/mZkTyrp4CIIgo9uqKLfnprMf6r
OuxTdreZrC3seWmH9dUrAbPF3XNztCuU353JAoJRcU8dNisB1YvuqQJ3nscJ4zvx
6dVfzlpg0NdPzqRO0CkCJegwtNjz0VkUAUuP24vDCyblTNvbc69Hn+j+xL2KcXKq
IYfuxsEtXTs=
=cNIF
-----END PGP SIGNATURE-----
Attachment:
pgp_tQ8ohJ8j1.pgp
Description: PGP signature