-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 26 Mar 2026 11:06:04 +0100 Source: simpleeval Binary: python3-simpleeval Architecture: all Version: 1.0.3-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Mathias Behrle Description: python3-simpleeval - Simple, safe single expression evaluator library (Python 3) Closes: 1130875 Changes: simpleeval (1.0.3-1+deb13u1) trixie-security; urgency=high . * Add 01_CVE-2026-32640.patch (Closes: #1130875) This patch fixes CVE-2026-32640 https://github.com/danthedeckie/simpleeval/pull/171 with commits https://github.com/danthedeckie/simpleeval/commit/9cb4a7b99498c173263bd90f77bc185e160fb6b8 https://github.com/danthedeckie/simpleeval/commit/1654cbf0219345f707c79664b8657be6b8d23e33 https://github.com/danthedeckie/simpleeval/commit/cffa9f68cee54404a2ef43d949a8ae8a3311c503 Checksums-Sha1: 8c90629bec97b89929ef2ccb6268af674789fadf 26968 python3-simpleeval_1.0.3-1+deb13u1_all.deb bda82e2e432bea19f790751f68b6103759413d3e 6759 simpleeval_1.0.3-1+deb13u1_all-buildd.buildinfo Checksums-Sha256: 5c332587807888bf65fae015d429bf318463416c5c03db73d40815f307b44f08 26968 python3-simpleeval_1.0.3-1+deb13u1_all.deb 91f2ff99a58cc76474fc77459c51df5a3a73178434d01c640b3dc90d4939c61a 6759 simpleeval_1.0.3-1+deb13u1_all-buildd.buildinfo Files: d14632ecad2e56eaad53cce0f9c5e76c 26968 python optional python3-simpleeval_1.0.3-1+deb13u1_all.deb 742b1a47e994b853d589e5f0d0506859 6759 python optional simpleeval_1.0.3-1+deb13u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE81O8NL+3kjBAqEvLmgPNRvTf/zcFAmnl2EkACgkQmgPNRvTf /zdiLQ/+NyYbWkuJwdp9wnIq1aNlp2CaLqAMbiX+iw+JF4yhJHEU6kKRX5EctHas zcSwCePU9vpZlOWxNr3vJMEBLIbMZiS8m1GhmolFtNXHkJl+UWFYeDR+0AWAo5s8 WU2L9bv5EGFhSyLBcagPkz62duwY3iKqy+HgwqldGHaDc5khg2QscAyo8G6LQmZg fPZ+3ewdgGGkzzX56zanU34w+CCP4LrH72G6q8RCV1Q14o05gkPL50FGzEMm/EO5 93hSdLFEDClB3AvSTnVyzP1QolD5xSMCdnnEZ+fINzdiDgYrYDLOAJPaa0F5ni0B ijk4+RFXEi81iB0t389xRCLlES8ozmJCGEpxEyUsWbqjSWBqvwODlVc+hUDfPEFn OrEtZQDGBIde+T23zgytNtnNHwpR8oa2/qrG1c+FrJkSrmB8lypmIca08L3fEaUL 1SBMG8ik6drIC+m99KG2GCApU47mkrZyTkESGAL0Lvo99QSCOIAVCMv2PYt6fjHB q1xW3An2wC/sNIM8zdlRgccWFI3IQPEwXT4k3evXUVXO8R0tA+zJcRMIK0vAJEPK rfJMkQhUEgPZReenC6WV1dh63V3ECOGYvETOdj7sr50DtCqNox9PFyJb8SFHYCgU aJXY5141JZrBHRWeGZwfVvKrRGMRphO4exxuRtL/ee6pZQM2sjM= =Jtur -----END PGP SIGNATURE-----