-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 22 Dec 2025 16:27:34 +0100
Source: rust-sequoia-openpgp
Binary: librust-sequoia-openpgp-dev
Architecture: amd64
Version: 2.0.0-2+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Holger Levsen <holger@debian.org>
Description:
 librust-sequoia-openpgp-dev - OpenPGP data types and associated machinery - Rust source code
Closes: 1122582
Changes:
 rust-sequoia-openpgp (2.0.0-2+deb13u1) trixie; urgency=medium
 .
   * Add upstream commit b59886e5 (via debian/patches, edited to apply cleanly)
     to fix an underflow in aes_key_unwrap / CVE-2025-67897 to prevent DOS
     (crash) via special crafted encrypted messages. Closes: #1122582.
Checksums-Sha1:
 879f4850f57f75945999b598b5865d53cb30e08f 2250036 librust-sequoia-openpgp-dev_2.0.0-2+deb13u1_amd64.deb
 be287a5ec79354648d3717957017a29fb8ab73fd 15955 rust-sequoia-openpgp_2.0.0-2+deb13u1_amd64-buildd.buildinfo
Checksums-Sha256:
 f6b0f78983cf7fad23302b619469e47db32b526da4c6cb81570af63667af1e00 2250036 librust-sequoia-openpgp-dev_2.0.0-2+deb13u1_amd64.deb
 9d884661230947e018b8b0c3130cb7ca16d7dcabf91fd28227ebbd70dfd2fcfc 15955 rust-sequoia-openpgp_2.0.0-2+deb13u1_amd64-buildd.buildinfo
Files:
 d43f37840d8a9d6f6dbf8a158a32d252 2250036 rust optional librust-sequoia-openpgp-dev_2.0.0-2+deb13u1_amd64.deb
 2b9ee7d48fe9c1fa55b07e1abba53f3e 15955 rust optional rust-sequoia-openpgp_2.0.0-2+deb13u1_amd64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=FFMS
-----END PGP SIGNATURE-----