-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 25 Nov 2025 06:44:32 +0100
Source: r-cran-gh
Architecture: source
Version: 1.4.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian R Packages Maintainers <r-pkg-team@alioth-lists.debian.net>
Changed-By: Daniel Leidert <dleidert@debian.org>
Closes: 1110481
Changes:
 r-cran-gh (1.4.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload by the Debian LTS team.
   * d/patches/CVE-2025-54956.patch: Add patch to fix CVE-2025-54956.
     - The HTTP response is delivered in a data structure that
       includes the Authorization header from the corresponding HTTP
       request (closes: #1110481).
Checksums-Sha1:
 bb5a638219ff1e834537b75a0c3be47bee627674 2295 r-cran-gh_1.4.1-1+deb13u1.dsc
 61f327b5cfef767f07e622e2455dd002b4664403 46164 r-cran-gh_1.4.1.orig.tar.gz
 a257cdb988bb9d03b700c0e1cdd3de73c9289024 5088 r-cran-gh_1.4.1-1+deb13u1.debian.tar.xz
 46b841de28ae8f07b2168385de90efc75f021c73 11590 r-cran-gh_1.4.1-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
 6715cda35abd2815609fec31e9050d12dd94489b0b381aba3038e40d8eb5cf81 2295 r-cran-gh_1.4.1-1+deb13u1.dsc
 76bd3f2a31eeaf76a633362899a20b0f7e8fb6159d4777baf3da2a47854292af 46164 r-cran-gh_1.4.1.orig.tar.gz
 0fb7acd7fcbdbc01e7004bffdbf9c24c339673c897598216a51c23b0c135ec40 5088 r-cran-gh_1.4.1-1+deb13u1.debian.tar.xz
 cab8734409000ccc90fd44fba5d4ad19ad79fc0f0650eaedebcc276b6e050bab 11590 r-cran-gh_1.4.1-1+deb13u1_amd64.buildinfo
Files:
 6b9ad7e5f92e581d948f9aa2471b5877 2295 gnu-r optional r-cran-gh_1.4.1-1+deb13u1.dsc
 d3453d1c49ae99431e77ebe4e050aa79 46164 gnu-r optional r-cran-gh_1.4.1.orig.tar.gz
 32cd5de659753bd2b5e14f6ce5c78ba1 5088 gnu-r optional r-cran-gh_1.4.1-1+deb13u1.debian.tar.xz
 78f9c0bf509c7a53f2492cf62038d27f 11590 gnu-r optional r-cran-gh_1.4.1-1+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=MKgw
-----END PGP SIGNATURE-----