-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 09 Jun 2024 19:24:43 +0200
Source: python-aiosmtpd
Architecture: source
Version: 1.4.6-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Jakob Haufe <sur5r@debian.org>
Closes: 1066820 1072119
Changes:
python-aiosmtpd (1.4.6-1) unstable; urgency=medium
.
[ Dale Richards ]
* Team upload.
* New upstream version 1.4.6
- CVE-2024-27305 - SMTP smuggling due to poor handling of
non-standard line endings (Closes: #1066820)
- CVE-2024-34083 - STARTTLS unencrypted command injection
(Closes: #1072119)
* d/watch: Update for new version format.
* Update patch line offsets for new upstream version.
* Add .gitattributes file to use CRLF line endings for
aiosmtpd/tests/test_smtpsmuggling.py, so the checked out file matches
the one in the upstream release tarball.
* Bump Standards-Version to 4.7.0, no changes needed.
Checksums-Sha1:
90e3401186c0cd0a417f33938cb96d3ea0bb588b 2252 python-aiosmtpd_1.4.6-1.dsc
3635c0bb5dd42c587753c7772a453977e7f643b7 153666 python-aiosmtpd_1.4.6.orig.tar.gz
40bb6ef9e9e8a4910c923c11e0837ac4658e06e2 6988 python-aiosmtpd_1.4.6-1.debian.tar.xz
e135c2e5b99b03f0400a7cad6ce697e15c2bf6c0 7308 python-aiosmtpd_1.4.6-1_source.buildinfo
Checksums-Sha256:
bc94ce2679039eb6264cb0c7d15774f322a306db86544b0b979aacbef3cb6f33 2252 python-aiosmtpd_1.4.6-1.dsc
297d28b1b57da9debe5c0f8815fc153cd17605120a59f6200735a720445c5337 153666 python-aiosmtpd_1.4.6.orig.tar.gz
06b589629f1656b625ae19ba5861129abf97e92fd0643b4a83d9aad596e67dfa 6988 python-aiosmtpd_1.4.6-1.debian.tar.xz
f3ceb954f351d2525a637b7f80a99dc9ee5191f8c5effa8c297ad2a51aae3739 7308 python-aiosmtpd_1.4.6-1_source.buildinfo
Files:
883580e39e6c0957a3aa24826a0e2d93 2252 python optional python-aiosmtpd_1.4.6-1.dsc
6e8c6828395c3e5a37573e693d4c0e29 153666 python optional python-aiosmtpd_1.4.6.orig.tar.gz
0c6ea50cc2995c7e34042a6c064d11d7 6988 python optional python-aiosmtpd_1.4.6-1.debian.tar.xz
6ade3b26bd102fcffead9caa149696f7 7308 python optional python-aiosmtpd_1.4.6-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Kf2p
-----END PGP SIGNATURE-----
Attachment:
pgpO4KJP00P08.pgp
Description: PGP signature