From foo@bar  Sun Jul  5 13:40:01 2026
Format: 1.8
Date: Sun, 05 Jul 2026 13:23:43 +0200
Source: python-msgpack
Binary: python3-msgpack python3-msgpack-dbgsym
Architecture: hurd-amd64
Version: 1.1.2-3
Distribution: sid
Urgency: high
Maintainer: Debian GNU/Hurd Build Daemon <buildd_hurd-amd64-hurd-dbdd-tls-1@buildd.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Description:
 python3-msgpack - Python 3 implementation of MessagePack format
Closes: 1141340
Changes:
 python-msgpack (1.1.2-3) unstable; urgency=high
 .
   * CVE-2026-57585: Out-of-bounds read/crash on Unpacker reuse after a caught
     error, potentially leading to a DoS attack. Applied upstream patch: "fix
     Unpacker crash after unpack failure" (Closes: #1141340).
Checksums-Sha1:
 1d26a052658c9dbc560146965d796763856519eb 8225 python-msgpack_1.1.2-3_hurd-amd64.buildinfo
 48f85eb978cb5900900eff7b18f30835c15165d5 600116 python3-msgpack-dbgsym_1.1.2-3_hurd-amd64.deb
 57e0a8e93ca8b93d82df39b33d229570dc8db5da 106408 python3-msgpack_1.1.2-3_hurd-amd64.deb
Checksums-Sha256:
 6db1650d65cbe34467c1aee8c81972da33d18d6a63bda321ab734f5ae29e049f 8225 python-msgpack_1.1.2-3_hurd-amd64.buildinfo
 a0c23d2c0440e8a9a80c024f5c77e1ed5ea2ed060604777f6f9a420f2bfbb61d 600116 python3-msgpack-dbgsym_1.1.2-3_hurd-amd64.deb
 5b93f9a1f76d1d1e38dbb991903f422c648e3e47c8c7a529092a6d24c94b4ce3 106408 python3-msgpack_1.1.2-3_hurd-amd64.deb
Files:
 0a9357c1a09ccae1eaaaacf29d9f3417 8225 python optional python-msgpack_1.1.2-3_hurd-amd64.buildinfo
 960a33cf41252e81c5512c87c2e211d9 600116 debug optional python3-msgpack-dbgsym_1.1.2-3_hurd-amd64.deb
 f6b5dbd8467181690d7c172a532377fe 106408 python optional python3-msgpack_1.1.2-3_hurd-amd64.deb
Signed-By: buildd autosigning key hurd-dbdd-tls-1 <buildd_hurd-amd64-hurd-dbdd-tls-1@buildd.debian.org>