-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 22 Dec 2025 16:27:34 +0100
Source: rust-sequoia-openpgp
Binary: librust-sequoia-openpgp-dev
Architecture: i386
Version: 2.0.0-2+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Holger Levsen <holger@debian.org>
Description:
 librust-sequoia-openpgp-dev - OpenPGP data types and associated machinery - Rust source code
Closes: 1122582
Changes:
 rust-sequoia-openpgp (2.0.0-2+deb13u1) trixie; urgency=medium
 .
   * Add upstream commit b59886e5 (via debian/patches, edited to apply cleanly)
     to fix an underflow in aes_key_unwrap / CVE-2025-67897 to prevent DOS
     (crash) via special crafted encrypted messages. Closes: #1122582.
Checksums-Sha1:
 454f2b67e36d2b82c6c10158bd0b29561bada4cd 2250028 librust-sequoia-openpgp-dev_2.0.0-2+deb13u1_i386.deb
 b356ce2ce2da3e922e7ebf780bce20697863676d 15859 rust-sequoia-openpgp_2.0.0-2+deb13u1_i386-buildd.buildinfo
Checksums-Sha256:
 9a081c100a22861b668992a55e629bf303b092118baf6982fac3bb077724185b 2250028 librust-sequoia-openpgp-dev_2.0.0-2+deb13u1_i386.deb
 e6573336d80c4363a03a936871750172630895ffe82d00db177c1849139c78ea 15859 rust-sequoia-openpgp_2.0.0-2+deb13u1_i386-buildd.buildinfo
Files:
 9893d74733a49a25386f4c67b3f27e00 2250028 rust optional librust-sequoia-openpgp-dev_2.0.0-2+deb13u1_i386.deb
 2554bb9fe833fe66c74091355a820ce7 15859 rust optional rust-sequoia-openpgp_2.0.0-2+deb13u1_i386-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=JLBL
-----END PGP SIGNATURE-----