[ubuntu/resolute-proposed] jaraco.context 6.0.1-1ubuntu1 (Accepted)

[Marc Deslauriers]

jaraco.context (6.0.1-1ubuntu1) resolute; urgency=medium

  * SECURITY UPDATE: Zip slip path traversal vulnerability
    - debian/patches/CVE-2026-23949-*.patch: ensure that the default filter
      honors the data filter to avoid path traversal vulnerabilities in
      jaraco/context/__init__.py, tests/test_safety.py
    - CVE-2026-23949

Date: Wed, 21 Jan 2026 10:39:31 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/jaraco.context/6.0.1-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Wed, 21 Jan 2026 10:39:31 -0500
Source: jaraco.context
Built-For-Profiles: noudeb
Architecture: source
Version: 6.0.1-1ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 jaraco.context (6.0.1-1ubuntu1) resolute; urgency=medium
 .
   * SECURITY UPDATE: Zip slip path traversal vulnerability
     - debian/patches/CVE-2026-23949-*.patch: ensure that the default filter
       honors the data filter to avoid path traversal vulnerabilities in
       jaraco/context/__init__.py, tests/test_safety.py
     - CVE-2026-23949
Checksums-Sha1:
 7113549e6baaae742faf6da2360388dfaa050beb 2292 jaraco.context_6.0.1-1ubuntu1.dsc
 e2ec5ca045f24ee1e0117a80c7413795f580b198 7724 jaraco.context_6.0.1-1ubuntu1.debian.tar.xz
 3db44b7e5ea65d407d6a25b4be1e935388fe27af 7759 jaraco.context_6.0.1-1ubuntu1_source.buildinfo
Checksums-Sha256:
 a63346b2d71d448c8e8617321812df92757af192090ac7b8b41d62a644c43741 2292 jaraco.context_6.0.1-1ubuntu1.dsc
 a24e37dfff2d54fc89d615e5f7eddb1e53f96afec537c9c237b9541d05168f59 7724 jaraco.context_6.0.1-1ubuntu1.debian.tar.xz
 63a4eab8986a28644848e6d7f5e28702857cd4ef1da08e6f0269dc9c2bceec94 7759 jaraco.context_6.0.1-1ubuntu1_source.buildinfo
Files:
 ddd36faa8afc81a681d38817bde68137 2292 python optional jaraco.context_6.0.1-1ubuntu1.dsc
 fb55962f3b83c3f2c002d9e694470ca1 7724 python optional jaraco.context_6.0.1-1ubuntu1.debian.tar.xz
 4c53e229ece16ff33a68cbe351c5a47e 7759 python optional jaraco.context_6.0.1-1ubuntu1_source.buildinfo
Original-Maintainer: Jeroen Ploemen <jcfp at debian.org>