Accepted python-eventlet 0.26.1-7 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 11 May 2021 08:03:43 +0200
Source: python-eventlet
Architecture: source
Version: 0.26.1-7
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 988342
Changes:
python-eventlet (0.26.1-7) unstable; urgency=medium
.
* CVE-2021-21419: Malicious peer may exhaust memory on Eventlet side
by sending highly compressed data frame. Appled upstream patch: websocket:
Limit maximum uncompressed frame length to 8MiB (Closes: #988342).
Checksums-Sha1:
d4c1bdda21cceda95ea3ea63472a6f1d25d33899 2506 python-eventlet_0.26.1-7.dsc
1319881dd236aca875902d66c9028bc011c01b2d 24684 python-eventlet_0.26.1-7.debian.tar.xz
a6d6f303d0d2fe5ae78cec3e3f1035968eaaab7b 8022 python-eventlet_0.26.1-7_amd64.buildinfo
Checksums-Sha256:
30aecb6f86f056db7e5ec7afe4e66f79abf64c0569aba5ac6c9210ea5b569e7e 2506 python-eventlet_0.26.1-7.dsc
6fff73f94a36dc24ed6c98db352ebb3903ada58100ee88403cdee2d77867e693 24684 python-eventlet_0.26.1-7.debian.tar.xz
303ca596488c1df3da27ef92798ee7f3e100a45454fa78aeb499bad998ebc96f 8022 python-eventlet_0.26.1-7_amd64.buildinfo
Files:
6fdca94e59e77894fc8be3fb430ef9e4 2506 python optional python-eventlet_0.26.1-7.dsc
c609a24d82702766be637dd1326002ee 24684 python optional python-eventlet_0.26.1-7.debian.tar.xz
3d57c987570a6f53224bbaf05e4b3ee1 8022 python optional python-eventlet_0.26.1-7_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=hsU2
-----END PGP SIGNATURE-----