-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 28 May 2024 08:18:40 +0200
Source: python-pymysql
Architecture: source
Version: 1.1.1-1
Distribution: unstable
Urgency: high
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1071628
Changes:
python-pymysql (1.1.1-1) unstable; urgency=high
.
* New upstream release:
- Fixes CVE-2024-36039 (SQL injection if used with untrusted JSON input
because keys are not escaped by escape_dict) (Closes: #1071628).
* Removed 0002-remove_intersphinx.patch now useless.
* Rebased removed-broken-tests.patch.
* Added python3-sphinx-rtd-theme as build-depends.
Checksums-Sha1:
e945f5a1f0aca5019b8b7ba41f1b1c79c1558668 2297 python-pymysql_1.1.1-1.dsc
c167cad6b02f21f4d190e2c04ccbe46b801915e7 72860 python-pymysql_1.1.1.orig.tar.xz
eb4dca136137d46eeccf388f58f9d53d96b6b9f2 7196 python-pymysql_1.1.1-1.debian.tar.xz
f7a289b61f5af0beb7782d915ec4bd639276638a 10027 python-pymysql_1.1.1-1_amd64.buildinfo
Checksums-Sha256:
2d9e1425f1c8ed88191c192a2737cdb0882ac2ccdfcd3ed4e0f9734d327860df 2297 python-pymysql_1.1.1-1.dsc
a501d7580f3db3738272838d01d31701c14cd3f3db804f798f6f3324ef83821e 72860 python-pymysql_1.1.1.orig.tar.xz
1cc4d16568f9c47ccb85d563b2ad5ebaeb3db4b2dbdf55f498d693b606f77bd2 7196 python-pymysql_1.1.1-1.debian.tar.xz
6b6a09e27a18a03f5268e8c6576459b811e0e0841fc0c96dcc16d97ee9450c58 10027 python-pymysql_1.1.1-1_amd64.buildinfo
Files:
dbac315e27d90a91a69a6254b71772cf 2297 python optional python-pymysql_1.1.1-1.dsc
e773e6901526639301750e75cfc8ca62 72860 python optional python-pymysql_1.1.1.orig.tar.xz
1997e1c4d130e83fbefd6acf58d3564f 7196 python optional python-pymysql_1.1.1-1.debian.tar.xz
aa127257f7e1dc733ff17f5598f47732 10027 python optional python-pymysql_1.1.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=Z3jx
-----END PGP SIGNATURE-----
Attachment:
pgpqj4d2WmdR6.pgp
Description: PGP signature