-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 07 Jan 2026 14:16:28 +0100 Source: python-filelock Architecture: source Version: 3.18.0-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: Sascha Steinbiss Changed-By: Sascha Steinbiss Closes: 1123510 Changes: python-filelock (3.18.0-1+deb13u1) trixie; urgency=medium . * Add patch: cve-2025-68146.patch This addresses CVE-2025-68146 by including the patch from upstream. (commit e84510eac948b5b6027b24025f421a650cbd9749) Closes: #1123510 Checksums-Sha1: 75c61783cf0b18dc998dbbb07e3c11c2b18fd2e1 2207 python-filelock_3.18.0-1+deb13u1.dsc 6bf5439cf851d2f9d127e3576a40e937245c82f6 18075 python-filelock_3.18.0.orig.tar.gz c5b6a95c9edfe10795131be3310c57bc2e51f745 5260 python-filelock_3.18.0-1+deb13u1.debian.tar.xz 1b0f7075054fe43c56d5482d7e06008584ca3d4b 7515 python-filelock_3.18.0-1+deb13u1_amd64.buildinfo Checksums-Sha256: 1161c5f9e89aebd34fc0bb8242139fd8707492951d557cbf2a02965f46a4a9a0 2207 python-filelock_3.18.0-1+deb13u1.dsc adbc88eabb99d2fec8c9c1b229b171f18afa655400173ddc653d5d01501fb9f2 18075 python-filelock_3.18.0.orig.tar.gz 7f4d94d33f39c03ef070a95da027ab7268b028b804675333165f4f95f87ab2eb 5260 python-filelock_3.18.0-1+deb13u1.debian.tar.xz 33ab518c7309e63550efde718fe014fa11b7b99b1b3e8e4845e197b055a21721 7515 python-filelock_3.18.0-1+deb13u1_amd64.buildinfo Files: 4673aa0996ae78003dd37faf540ddcf3 2207 python optional python-filelock_3.18.0-1+deb13u1.dsc 164180bf691720ae8c29b6326d63ddf0 18075 python optional python-filelock_3.18.0.orig.tar.gz 63815db160969b6671f4d43530c55e15 5260 python optional python-filelock_3.18.0-1+deb13u1.debian.tar.xz aecf557b9d1c615bdba9a9211dd7268d 7515 python optional python-filelock_3.18.0-1+deb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWzS6WqtVB+kDQm6F6NN64vCfSHIFAmlg5isACgkQ6NN64vCf SHKtUA/9E6ZiJKYAIVjSOR3IRiumHy4ct6oNEqYIT+juhVc7he1JQp/0XD4/YS9m /faohL0VdJBpfuJRO6cS1mv9nzw2/l5EesOFclj5m2NgXA1L0PQUgKYkzJ0rjAiI cQaT6WfqhrBm7++kFgcFZmP6j7M7uOUg0XNL+Jiv0w3wNV3WwdECs0hyEL77RIhN A6c8fmL3LhzqwGfVNROO6UfeTH/NgWrhbtHm2tA6ETd1amAwTCeBb+3pmRd9CKZX I0RxRU/SyKnWfNGuqtCYyPaYNt9HF0qhWOy93j1yZv0XZpE54SoU55edZP1haaeV RgmYAMDVv9x7Brx0v3N4XStzqCO+sG+fFXQ5L0x21U9hX9V+nDH4UO1SLl8iUked nIKSakkg1gkfpsiTI9NMmdT+ym14xY5PR8QHg6pt7IFfqdHqq9rBOya8gx6OKh3z D+UkcMVEgwv9u9i55I0qRkWGOMyjRBuD8fPP2pLscwGzbDLptXRtsY7Pt6H01Aaz Y0RLBB4ZM7XyyGDKt2DLURu/EMFZZeIEZ1r2a68mZ9tjq7Q5QhHxTxgxN0q9smBy OpyqqKzIrIe5a+AoP30Cw9aVWl//2n2PjkZ4uiHoIRlEw7xWoZZH3+m7AHcL7FPG 4sqWXDNNgJX41P9YeEIJlwqDeeoM8d/qPS//9Voh96BERWDRptM= =7Pzj -----END PGP SIGNATURE-----