• Accepted libstring-compare-constanttime-perl 0.321-3 (source) into unst

    From Debian FTP Masters@21:1/5 to All on Sat Apr 12 12:30:01 2025
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Sat, 12 Apr 2025 12:05:35 +0200
    Source: libstring-compare-constanttime-perl
    Architecture: source
    Version: 0.321-3
    Distribution: unstable
    Urgency: medium
    Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org>
    Closes: 1101502
    Changes:
    libstring-compare-constanttime-perl (0.321-3) unstable; urgency=medium
    .
    * Team upload.
    * Add patch from upstream PR to prevent revealing the secret length.
    Fixes CVE-2024-13939. (Closes: #1101502)
    * Declare compliance with Debian Policy 4.7.2.
    Checksums-Sha1:
    4165939b00d44816c7662b8f60e54014b9225e03 2588 libstring-compare-constanttime-perl_0.321-3.dsc
    a03476951fb8bae1d6d0b7b2ff28764c2c49291c 5072 libstring-compare-constanttime-perl_0.321-3.debian.tar.xz
    Checksums-Sha256:
    adb4852ab63c79a938f8b5fbdb62c4e8be04f86319c736f6bc4aa5fb730b270c 2588 libstring-compare-constanttime-perl_0.321-3.dsc
    51cfe006f20faedc3442ed2675409bc24b647d8ce8ab169e3b0fac761dde20dc 5072 libstring-compare-constanttime-perl_0.321-3.debian.tar.xz
    Files:
    a435692d140b697c08008f3c74255d82 2588 perl optional libstring-compare-constanttime-perl_0.321-3.dsc
    646d218e972e8e7bc3f8a0eb22c6674d 5072 perl optional libstring-compare-constanttime-perl_0.321-3.debian.tar.xz

    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmf6O9lfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgaANw/+NAR/qPqvTQq4/Ll4xBDnP1RrGs29Sl6OOwhH5dN1qdad/Bi74zK0T0zB Cp3uAISbZ6msFpJ1i+MFBrY8gR7dEiLrzMcb8YB6VQsiHMr0/LjdhwqK3UbT6td7 K5wtZGIT0VDA/C1Zm1jRYCczmxtPft8QFaCBHILOO0m4U4pnbG7Sy25rrpxAv6/f EZ6pogjI6q5U7hndsjHF3vvkmFugiC0XAzi6IQYxyteg3goXiqcHPuOVevJ6AmCv q6zt2wK5aC2RsJ59uglO/yDDc4mpvlqi0szodYN5S8HBJ5kH7zG1zhzXc+soSTKy uA1JXHpC9aBO0z+UZ4k46+SgZiMvNClmWEC0RlXqucZe9rMWt8VunNyiMWteSzEu CdQTUkO4BnpjbTwQKQmkgOUkEJ/msgFsghxh403tqD0gt5OTMqxseqkmi4fA7Yg+ tbRJlS4sTRI6nr4A2XL1T8gci7Pwm9Kc1ZNh6FFp8oyppcwI+szTsrPi0HE5d5in TFU/S15CpSDs/xiPjDfcgMSuzBiTIg037puokh93P91ZSbms1+llEJwXYb++0D1D ZOPtPpk6AcNpFMagnd21q1DKpBjCfynqcEOe8PzqmbX9sEhfBKFy0lvuJFVfet/y CGzDgEJbf9TaXFpDlNbXiTZ5BeoY/7rgiQLi1UGxtdKGHAqy6RQ=
    =FJTZ
    -----END PGP SIGNATURE-----


    --==============V55506247738659490=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCZ/o+XwAKCRCb9qggYcy5 IZVpAP4hsbFZN/O5hm+Yk447H4bu3GFxg4ZB9sULzcPn7L90VQD/SlBfhgQhyWDE D8vajzn3UTQ44hqjQ1Sjf5bfHkXs1ww=j7BX
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)