-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Jul 2026 20:38:15 +0300
Source: python-daphne
Binary: daphne python3-daphne
Architecture: all
Version: 4.1.2-2+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 daphne     - Django Channels HTTP/WebSocket server
 python3-daphne - Django Channels HTTP/WebSocket server (Python3 version)
Closes: 1138864
Changes:
 python-daphne (4.1.2-2+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-44545: DoS via unbounded WebSocket message sizes
   * CVE-2026-44546: Header injection on WebSocket upgrade path
   * (Closes: #1138864)
Checksums-Sha1:
 db6ce87a3782b956c07d8ef06e3d0496d3e594b4 13740 daphne_4.1.2-2+deb13u1_all.deb
 7a914dd737eefea40992237c92b44551815403fe 8848 python-daphne_4.1.2-2+deb13u1_all-buildd.buildinfo
 59e7e0a37c9f90da3890f7b6206c0b5cfc51d7ec 31356 python3-daphne_4.1.2-2+deb13u1_all.deb
Checksums-Sha256:
 dc0c61187bd95302c0cc97293c6d2c2401aa0038096596d34f6c0fede4528af6 13740 daphne_4.1.2-2+deb13u1_all.deb
 16ef898655841c6f850961cb3e30e6ec6661a19618b4f7d352172c93b49f02d5 8848 python-daphne_4.1.2-2+deb13u1_all-buildd.buildinfo
 2af25966a3b2286ce6944f4393de7f2d54c2b28f740822f5a20688dda956d308 31356 python3-daphne_4.1.2-2+deb13u1_all.deb
Files:
 c180a28d77c3225709cb7f1015f51a08 13740 httpd optional daphne_4.1.2-2+deb13u1_all.deb
 1448b831923925628179e73b8c3549f6 8848 python optional python-daphne_4.1.2-2+deb13u1_all-buildd.buildinfo
 83eb3ac3a31773220a4c3c433030167d 31356 python optional python3-daphne_4.1.2-2+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=iEZQ
-----END PGP SIGNATURE-----