-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 04 Feb 2026 07:57:37 +0100
Source: munge
Architecture: source
Version: 0.5.16-1.1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Gennaro Oliva <oliva@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 munge (0.5.16-1.1~deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Rebuild for trixie-security
 .
 munge (0.5.16-1.1) unstable; urgency=high
 .
   * Non-maintainer upload.
   * Fix out-of-bounds read in credential decoding
   * Fix buffer overflow when unpacking message address length (CVE-2026-25506)
Checksums-Sha1:
 bd870ce8f27f4b76cf5804910aba5fe0b3bf0332 2164 munge_0.5.16-1.1~deb13u1.dsc
 61614142640fa1c3977ff36a5dfa2e498e50ccc5 264415 munge_0.5.16.orig.tar.gz
 428dbdbc6ef309006cc5567e45a2c45067195fd8 12324 munge_0.5.16-1.1~deb13u1.debian.tar.xz
 e1840951bca2742eb7f0a5c28bd98ab1c6581bcb 6414 munge_0.5.16-1.1~deb13u1_source.buildinfo
Checksums-Sha256:
 2fa6bc527fa85514c78c4871d7103ad4c8f05753f59fcac3dc96f5601a52690f 2164 munge_0.5.16-1.1~deb13u1.dsc
 fa27205d6d29ce015b0d967df8f3421067d7058878e75d0d5ec3d91f4d32bb57 264415 munge_0.5.16.orig.tar.gz
 fb6e1dbd90daeacd3b727b4d37d9632e66254a13d433a1e6e708d84cebd2b696 12324 munge_0.5.16-1.1~deb13u1.debian.tar.xz
 5c22aa21b26f8737f983102a60483a2f1eb02eacecbdcf5f2c41bb098caf976d 6414 munge_0.5.16-1.1~deb13u1_source.buildinfo
Files:
 611288854d9184b488a8007fb66b27f8 2164 admin optional munge_0.5.16-1.1~deb13u1.dsc
 1822226cd6455935bba1308e079c9581 264415 admin optional munge_0.5.16.orig.tar.gz
 96f5e350c3cd8ff9b47ee995dc83536a 12324 admin optional munge_0.5.16-1.1~deb13u1.debian.tar.xz
 897e0ca9b18ae07b9938bfd46ab4a4fa 6414 admin optional munge_0.5.16-1.1~deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=8OyM
-----END PGP SIGNATURE-----