Accepted poetry 2.1.2+dfsg-1+deb13u1 (source) into proposed-updates

Debian FTP Masters <[email protected]> Sat, 04 Jul 2026 15:48:35 +0000
Newsgroups gmane.linux.debian.devel.changes.stable
Message-ID <[email protected]>
--===============5432927802669992029==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Jul 2026 18:25:04 +0300
Source: poetry
Architecture: source
Version: 2.1.2+dfsg-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian Python Team <[email protected]>
Changed-By: Adrian Bunk <[email protected]>
Closes: 1132609
Changes:
 poetry (2.1.2+dfsg-1+deb13u1) trixie; urgency=3Dmedium
 .
   * Non-maintainer upload.
   * CVE-2026-34591: Wheel Path Traversal Leading to Arbitrary File Write
     (Closes: #1132609)
Checksums-Sha1:
 81c371096778ae7a01596d6582c009a04534fa2b 3299 poetry_2.1.2+dfsg-1+deb13u1.dsc
 5846f4d992fd0a9a8a577646e2c0a8990f2069e3 4086308 poetry_2.1.2+dfsg.orig.tar.=
xz
 dd927dd3f249d7bdbdc05e63cf773a72783aa673 11760 poetry_2.1.2+dfsg-1+deb13u1.d=
ebian.tar.xz
Checksums-Sha256:
 ebeaec7a6505be6c9a789ad908db08e947e8f46aa42f89af68bd25ffabe145f6 3299 poetry=
_2.1.2+dfsg-1+deb13u1.dsc
 a3d219b433acd8c2cffdac25480d0a5c2429799147e2e555f7184b7fbc6cecea 4086308 poe=
try_2.1.2+dfsg.orig.tar.xz
 6a6094c0dcb9088b4f82c34fa28cc27ceab7117cfe6ca5dc7da30f8f88fa47cb 11760 poetr=
y_2.1.2+dfsg-1+deb13u1.debian.tar.xz
Files:
 7f3bfde8bd085fa3de9a14b26b19775e 3299 python optional poetry_2.1.2+dfsg-1+de=
b13u1.dsc
 9911da39e14e82289a9ab5394415ccf9 4086308 python optional poetry_2.1.2+dfsg.o=
rig.tar.xz
 61412994ea518472a9f984762a978bb7 11760 python optional poetry_2.1.2+dfsg-1+d=
eb13u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmpH3vQACgkQiNJCh6LY
mLFf0RAAkpKbZyx4Gv9joRV/+Ro2hEqbSCiw4hfqwubifRbSWXpJKrejCm5Y0qCa
rkHX552T+lG7Je23HwA391ER756x0bP5d0J2YPMyEIsAa8vDBzkLXSnKWvhTsdBr
vncTWIsZtuewmoZXuib5BA5Al64C/WEfEVv+//XGiKJTkOgAolRcqgoi0N9nef0Q
GvADrcVE9/vxPf4I5lreNm0qN3pWGA6buU2rO5iWx1isR4IftPWKRnFULH+PUdfq
dm++jBZ71tGI2sLWL7FguRp5kzOny30CpcSkmnV4lb5IhMDqmnKXvy9nDOC7faFw
RW2ZM5x02puwETl2SZrccQTZI8OsmuQ5UQAk29SH00g+MnASotIV6RUNtud1u/P5
XfszMy2UTjC/7FVBZ8CQvlckSz4BWQq7HiJVNzZZ67VovIDXtEd16xqKhQRrF2Ti
ez71Umqsxd7YPA5BtQ6IBzmE3wBBqWPx37ZpR5nXPZOXZbG4pbTnjBxWnyXa3bx6
M6oe2gqccuIEnBywvHqxeM8nZOaQwH4YWOqFDfXYd5uvC2jEX483RAOGIUdf6j6E
V/sQXJ1ooDhazxk+3aRkmJmpXFBqdIGaXVmwWfETfFurvFK8ZkkSmOskZCAt5y3T
mmCrvxrWaxITxJpQEIjUGUXxXBmgjU7d9Nk3hoWM5PxfWkQzj7M=3D
=3Dw7DO
-----END PGP SIGNATURE-----


--===============5432927802669992029==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCakkrUwAKCRCb9qggYcy5
IXCMAQDv6V+flVIvYbhQOoeV4K1Kdz5HY7FY3jDPodd1Js5NwQD/Zh3rnt/FcFgt
pksAPQRsHnv2eEHQkRcjOm+XYGM+XQ0=
=Okhn
-----END PGP SIGNATURE-----

--===============5432927802669992029==--