-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 11 Aug 2025 00:21:57 +0200
Source: libcryptx-perl
Architecture: source
Version: 0.087-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa@debian.org>
Closes: 1107697
Changes:
libcryptx-perl (0.087-1) unstable; urgency=medium
.
* Team upload.
* Import upstream version 0.087.
Fixes CVE-2025-40914:
"CryptX embeds a version of the libtommath library that is susceptible to
an integer overflow associated with CVE-2023-36328."
Closes: #1107697
* Install new SECURITY.md document.
* Declare compliance with Debian Policy 4.7.2.
* Remove Rules-Requires-Root: no.
* Update 3rd-party filename in debian/copyright.
Checksums-Sha1:
b041079c743ed9c0465c3a9313d18c2916dd45c3 2377 libcryptx-perl_0.087-1.dsc
e044b84fdf8ad4a8ecc552193071196030166852 1859357 libcryptx-perl_0.087.orig.tar.gz
d1a3e787128a394420904bc4b9050f58288a4808 5860 libcryptx-perl_0.087-1.debian.tar.xz
Checksums-Sha256:
228274749799ce6aa5d4cda95bd212076b75844859c241523ae251ab7a3d8b75 2377 libcryptx-perl_0.087-1.dsc
8070ec295160d48f376d8ff1b2cbf0bf152da9f2033939382f00f13f748cd37d 1859357 libcryptx-perl_0.087.orig.tar.gz
1665fb4049290884e9c2837b282de7a764d3fae12fc71991f792b233c735d0f2 5860 libcryptx-perl_0.087-1.debian.tar.xz
Files:
83fd58c9e5dda0c647d6ac053d4abf4d 2377 perl optional libcryptx-perl_0.087-1.dsc
6fc1b5794ca184a523adfc56b95e40e7 1859357 perl optional libcryptx-perl_0.087.orig.tar.gz
8f8c31b574b5c166b507af3eb8ca873f 5860 perl optional libcryptx-perl_0.087-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=wJL3
-----END PGP SIGNATURE-----
Attachment:
pgp0tNHhGCs0Y.pgp
Description: PGP signature