-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 15 Apr 2026 20:27:48 +0100
Source: xdg-dbus-proxy
Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym
Architecture: arm64
Version: 0.1.4-3+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 xdg-dbus-proxy - filtering D-Bus proxy
 xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests
Closes: 1132939
Changes:
 xdg-dbus-proxy (0.1.4-3+deb12u1) bookworm-security; urgency=high
 .
   * d/gbp.conf: Configure for bookworm
   * d/p/Fix-GVariant-reference-leaks.patch:
     Add patch from upstream 0.1.6 fixing some memory leaks.
     As well as being a desirable bug fix, this is necessary for the fix
     for CVE-2026-34080 to apply cleanly.
   * d/p/flatpak-proxy-Use-g_autoptr-in-validate_arg0_match.patch,
     d/p/Improve-detection-of-eavesdrop-true.patch:
     Fix detection of eavesdrop=true match rules, resolving a vulnerability
     in which a malicious or compromised Flatpak app could monitor D-Bus
     traffic that it was not intended to be able to access.
     (CVE-2026-34080) (Closes: #1132939)
Checksums-Sha1:
 5bd94b96e91500e24b037d3b260a3874eee2c8d8 60276 xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_arm64.deb
 61f9721cc6b1465cc18f49a2d3672b635ee67c55 11568 xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_arm64.deb
 67f4742e306263463db4fd598d1177843567cada 7916 xdg-dbus-proxy-tests_0.1.4-3+deb12u1_arm64.deb
 11f4aceead4a97fe51d99e840373dcdda495c6cd 8664 xdg-dbus-proxy_0.1.4-3+deb12u1_arm64-buildd.buildinfo
 c5cf4cb4d1565fd647730a510065343afe739630 22432 xdg-dbus-proxy_0.1.4-3+deb12u1_arm64.deb
Checksums-Sha256:
 099d0279399ac9e39d7bff52c43be3b57d6b19f48ee6bd8b41f6740c4e41b76d 60276 xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_arm64.deb
 1d2521a3f5eef8c69e8404c183ea8bcf446041197148db8c4f8bd95fc62c82ef 11568 xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_arm64.deb
 a1cedb11e729609b2c3ab211a970cbe33ea027c0fd742d915b2a5843c5e9918f 7916 xdg-dbus-proxy-tests_0.1.4-3+deb12u1_arm64.deb
 c32a0e545e06808f3eba52d72f2e5e86e75a901724d78229580076f511e375b6 8664 xdg-dbus-proxy_0.1.4-3+deb12u1_arm64-buildd.buildinfo
 ca539c3526178bc4a1e094765cbe9b2fc88a18b5906a4e4a5e126112773175ff 22432 xdg-dbus-proxy_0.1.4-3+deb12u1_arm64.deb
Files:
 7a7a3eb1cd2653334a275603826ca3a6 60276 debug optional xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_arm64.deb
 d77a525780a7d2592f1d611ccbc47b2a 11568 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_arm64.deb
 a5978a3acd7131566d34c04ae01de8b9 7916 admin optional xdg-dbus-proxy-tests_0.1.4-3+deb12u1_arm64.deb
 416e560149fb3d62e9614234da506dee 8664 admin optional xdg-dbus-proxy_0.1.4-3+deb12u1_arm64-buildd.buildinfo
 018181ff944c725a6fdab2302aae116d 22432 admin optional xdg-dbus-proxy_0.1.4-3+deb12u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=4JA9
-----END PGP SIGNATURE-----