-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 15 Aug 2026 14:34:27 +0200
Source: srt
Architecture: source
Version: 1.5.4-1+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Florian Ernst <florian@debian.org>
Changed-By: Florian Ernst <florian@debian.org>
Changes:
 srt (1.5.4-1+deb13u1) trixie-security; urgency=medium
 .
   * [4136a38] d/patches/CVE-2026-55869.patch: added from upstream.
     Fix KMREQ/KMRSP Stack-Based Buffer Overflow (CVE-2026-55869,
     GHSA-6xg9-784j-24rm), when used together with the patch for
     CVE-2026-55868 / GHSA-4mc6-qmpp-g7gw.
   * [76b1e2d] d/patches/CVE-2026-55868.patch: added from upstream.
     Fix Encryption State Machine Downgrade (CVE-2026-55868,
     GHSA-4mc6-qmpp-g7gw), and fix KMREQ/KMRSP Stack-Based Buffer Overflow
     (CVE-2026-55869, GHSA-6xg9-784j-24rm).
Checksums-Sha1:
 5588ff6b595fb540a812b56f509e73e09773fb99 2349 srt_1.5.4-1+deb13u1.dsc
 04a1ac57e866d2790a9d245ac29bddee8e1db61c 1743040 srt_1.5.4.orig.tar.gz
 e61e90df529ea8e7ede4ea66c7945666bed3ed53 30556 srt_1.5.4-1+deb13u1.debian.tar.xz
 04b5ad3010cd9a1883ac5557d54c87f7bae32bb3 11353 srt_1.5.4-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
 ecee48e6eb461e32ecbb8596892512cf39f1c44070a6c87ecdb39c47d040680c 2349 srt_1.5.4-1+deb13u1.dsc
 d0a8b600fe1b4eaaf6277530e3cfc8f15b8ce4035f16af4a5eb5d4b123640cdd 1743040 srt_1.5.4.orig.tar.gz
 50805bc733bc178d2b98dd8b768db651986819f2f520590060683e8e93d0805a 30556 srt_1.5.4-1+deb13u1.debian.tar.xz
 d67f64426804ad03f59d4833421e12a4edebf8939a246d374e4f8258e3a86fb3 11353 srt_1.5.4-1+deb13u1_amd64.buildinfo
Files:
 57a49f4f03beec9e59796a6740dfb596 2349 libs optional srt_1.5.4-1+deb13u1.dsc
 08e946bbcdb6f9dc3863de5dd8a48aa3 1743040 libs optional srt_1.5.4.orig.tar.gz
 bc6822852a8d5293aab5ccab7e3acdd1 30556 libs optional srt_1.5.4-1+deb13u1.debian.tar.xz
 8e73fa50bd414b600f79b819f934854b 11353 libs optional srt_1.5.4-1+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=m1h/
-----END PGP SIGNATURE-----