-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 25 Nov 2025 05:48:19 +0100 Source: r-cran-gh Architecture: source Version: 1.4.0-1+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Debian R Packages Maintainers Changed-By: Daniel Leidert Closes: 1110481 Changes: r-cran-gh (1.4.0-1+deb12u1) bookworm; urgency=medium . * Non-maintainer upload by the Debian LTS team. * d/patches/CVE-2025-54956.patch: Add patch to fix CVE-2025-54956. - The HTTP response is delivered in a data structure that includes the Authorization header from the corresponding HTTP request (closes: #1110481). Checksums-Sha1: 364bdae1f0ceba3aa989a24ca4b330c6773d5912 2170 r-cran-gh_1.4.0-1+deb12u1.dsc b8a66ac626c12f18cdb8e4192f963ceef6421609 41214 r-cran-gh_1.4.0.orig.tar.gz 072900db179efa701f7c3bf463010c2b72e956f0 5016 r-cran-gh_1.4.0-1+deb12u1.debian.tar.xz 73a136f171505f5ee956fcb762d08472e7e84b09 11526 r-cran-gh_1.4.0-1+deb12u1_amd64.buildinfo Checksums-Sha256: 3caac9af1e95ca0cf6d01ed42ca7c667ab4bc708874139be07d8a9a7163efe6d 2170 r-cran-gh_1.4.0-1+deb12u1.dsc 68c69fcd18429b378e639a09652465a4e92b7b5b5704804d0c5b1ca2b9b58b71 41214 r-cran-gh_1.4.0.orig.tar.gz 4fd6ffcf0ce8442bcebfd92054062de3bfd5eb17d5f519f14cec24071662019e 5016 r-cran-gh_1.4.0-1+deb12u1.debian.tar.xz bc8d24394ebc8e9a04558a46052b64c63f8ca042fd2a3381e286b5f35115da7c 11526 r-cran-gh_1.4.0-1+deb12u1_amd64.buildinfo Files: f4d48632ccfcd4bc5960b499c67429ae 2170 gnu-r optional r-cran-gh_1.4.0-1+deb12u1.dsc 78490c84c3c83fac51a707a0e51fafed 41214 gnu-r optional r-cran-gh_1.4.0.orig.tar.gz 93b44afbccc55871a6ba6200e77b578e 5016 gnu-r optional r-cran-gh_1.4.0-1+deb12u1.debian.tar.xz c31a1df2e3eda1ede8944ce325e78cea 11526 gnu-r optional r-cran-gh_1.4.0-1+deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvu1N7VVEpMA+KD3HS80FZ8KW0F0FAmk1Q8gACgkQS80FZ8KW 0F0LwxAAnN9Im2Lhi92dwnNqj+YQBPeA5syqvqDwU/VteT3NNE5haz9Dn1rgzfZz wTSD48ySQOoWPLakSF9gEAScqhgy0v0GXgFQlz6E5vjcVBrQw9g8vWQhZLQc6ouR LIdjkSgt0WerpoiAObO8QdWBne1kBepW6DdHjec5ivCnm+iUdm8baMR7DmMTW9WC PRLL7TrbKI+qnD/YBzFnEiuyTSGbbK4RCOph9YaipESjdopX55LvmA9jw5BFw/ZW UydXkZtzHteatSWf173SpOFGxOqKaUHs0loR5Uncid9kmaFNG4np7EXj4rJW/vOf 3AnU4dmqnlY0PdrRMFFRAl7x9TPH+lt8vW6p3GOtfw6hz8He2JFBTJQ6Ghw8R5lg oAEc1n+Ii9TFc/fDCGN3h34f5Wz3CTA6dznpV6sWBi+2jmVA6jFt5jp9rNiIDJeU tFzADf1+C9OMC5+F3Km7ifblO9/rGqPHK78SiEALsSwmkve4+oknGMByI/froP5a 8YB8e9FuI5lA7Zsj8jNMCZp5/frW5dRCji/X7Ht+XCOD1N3707b5XzUeADcTiKKr MYLQWxkIUV8M8FU5pKrLPsfpgLUmW8OzBshjeVC5UCqb2K7/NDuEU6gthL0r+Qye LOJfwLnTwgaGDpnT0y+c6i+1P4BZVmKoNV5NIcol+U/tF8SmQng= =3/Vy -----END PGP SIGNATURE-----