-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Mar 2026 10:10:45 +0000
Source: multipart
Architecture: source
Version: 1.2.1-2+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Colin Watson <cjwatson@debian.org>
Changes:
 multipart (1.2.1-2+deb13u1) trixie-security; urgency=medium
 .
   * CVE-2026-28356: Fix ReDoS in parse_options_header.
Checksums-Sha1:
 097e1830667f7e80f0466612afafe32eb64e4023 2101 multipart_1.2.1-2+deb13u1.dsc
 30628e9caf5c74eedc0710738cc7295ca42a8064 36507 multipart_1.2.1.orig.tar.gz
 ae20efc14b2b96768d6469baa4cb47c74b976640 2984 multipart_1.2.1-2+deb13u1.debian.tar.xz
 438f6d58da01cf06b4ad581ce805cdc1995b9077 7286 multipart_1.2.1-2+deb13u1_source.buildinfo
Checksums-Sha256:
 bd2bdea62415dc1a66b8667f04e5a8db5e1ca92e479d81549b6bd1543dbe9663 2101 multipart_1.2.1-2+deb13u1.dsc
 829b909b67bc1ad1c6d4488fcdc6391c2847842b08323addf5200db88dbe9480 36507 multipart_1.2.1.orig.tar.gz
 e58a4708f28762e440f6aeccd75ee03043b2f3c8d479acede278ab19cbdfaf8f 2984 multipart_1.2.1-2+deb13u1.debian.tar.xz
 75e4641a8fd67df67ed161b8fb259685af190a895bdfb3d26bb5010b990a111e 7286 multipart_1.2.1-2+deb13u1_source.buildinfo
Files:
 8b7b081c71dbad0d95e0acbc5c577496 2101 python optional multipart_1.2.1-2+deb13u1.dsc
 9a8f640620e6b828379d7678d2cd699f 36507 python optional multipart_1.2.1.orig.tar.gz
 2883610270932ff39baba6a83c7856a9 2984 python optional multipart_1.2.1-2+deb13u1.debian.tar.xz
 d3b68c3013a453d74b8ca83fc6883ef9 7286 python optional multipart_1.2.1-2+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=SKE9
-----END PGP SIGNATURE-----