-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 08 Sep 2025 22:30:23 +0200
Source: libjson-xs-perl
Architecture: source
Version: 4.040-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 libjson-xs-perl (4.040-1~deb12u1) bookworm-security; urgency=high
 .
   * Rebuild for bookworm-security
 .
 libjson-xs-perl (4.040-1) unstable; urgency=medium
 .
   * Team upload.
   * Import upstream version 4.040.
     - Fix json_atof_scan1 overflows (CVE-2025-40928)
   * Drop initial patch for CVE-2025-40928 in favour of upstream changes
   * Drop patches applied upstream
 .
 libjson-xs-perl (4.030-3) unstable; urgency=medium
 .
   * Team upload.
   * Fix json_atof_scan1 overflows (CVE-2025-40928)
Checksums-Sha1: 
 294ee402776b55ca653c382a7589bc605975567d 2489 libjson-xs-perl_4.040-1~deb12u1.dsc
 1b52aae5597dbd56cea124b25ee3457ee3d82876 5164 libjson-xs-perl_4.040-1~deb12u1.debian.tar.xz
Checksums-Sha256: 
 8c5189502e7be85fd8473055187f97d3a402c887875a94f1d4ee874b66823fb2 2489 libjson-xs-perl_4.040-1~deb12u1.dsc
 f93e5108aa598b893a494ee2a7c67fc57507bc381d81294a9960d944e9c16134 5164 libjson-xs-perl_4.040-1~deb12u1.debian.tar.xz
Files: 
 2fd5dc5cd52fe2923d846e05be3c061c 2489 perl optional libjson-xs-perl_4.040-1~deb12u1.dsc
 04cb99f6c32be047b49dfda68573838b 5164 perl optional libjson-xs-perl_4.040-1~deb12u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=q80v
-----END PGP SIGNATURE-----