-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 08 Sep 2025 20:19:17 +0200
Source: libjson-xs-perl
Architecture: source
Version: 4.040-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
libjson-xs-perl (4.040-1) unstable; urgency=medium
.
* Team upload.
* Import upstream version 4.040.
- Fix json_atof_scan1 overflows (CVE-2025-40928)
* Drop initial patch for CVE-2025-40928 in favour of upstream changes
* Drop patches applied upstream
Checksums-Sha1:
e62a08bd71679b7df1fdd346141f5b2391a44422 2457 libjson-xs-perl_4.040-1.dsc
0a19cc5d57a24aed73741e1d7ca0df8f6c136265 87082 libjson-xs-perl_4.040.orig.tar.gz
bc00f88bf493edbba541f11d26be58f1d4f9d0ec 5112 libjson-xs-perl_4.040-1.debian.tar.xz
Checksums-Sha256:
254d65c79e2f5e24ea5a81a6ff34d1cb226ec73d39333012a5e46e14bbb53692 2457 libjson-xs-perl_4.040-1.dsc
8eff1e9f304c5625b59ab7b42258415f6d3e3681c1ddab6b725518a018a7f5e0 87082 libjson-xs-perl_4.040.orig.tar.gz
7b9297998acb4b67adfa232b0d90533e716b6558bcc7c108855896d9ed283baa 5112 libjson-xs-perl_4.040-1.debian.tar.xz
Files:
ecc0ef383506660d71525a21d1e6efa3 2457 perl optional libjson-xs-perl_4.040-1.dsc
b501fc6cb77a45b530ca1948800956c1 87082 perl optional libjson-xs-perl_4.040.orig.tar.gz
c12bebdeee65129a27c848ee72fe3d3d 5112 perl optional libjson-xs-perl_4.040-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=JGOf
-----END PGP SIGNATURE-----
Attachment:
pgpmyqRFRLAu9.pgp
Description: PGP signature