-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 15 Apr 2026 20:27:48 +0100
Source: xdg-dbus-proxy
Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym
Architecture: armel
Version: 0.1.4-3+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 xdg-dbus-proxy - filtering D-Bus proxy
 xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests
Closes: 1132939
Changes:
 xdg-dbus-proxy (0.1.4-3+deb12u1) bookworm-security; urgency=high
 .
   * d/gbp.conf: Configure for bookworm
   * d/p/Fix-GVariant-reference-leaks.patch:
     Add patch from upstream 0.1.6 fixing some memory leaks.
     As well as being a desirable bug fix, this is necessary for the fix
     for CVE-2026-34080 to apply cleanly.
   * d/p/flatpak-proxy-Use-g_autoptr-in-validate_arg0_match.patch,
     d/p/Improve-detection-of-eavesdrop-true.patch:
     Fix detection of eavesdrop=true match rules, resolving a vulnerability
     in which a malicious or compromised Flatpak app could monitor D-Bus
     traffic that it was not intended to be able to access.
     (CVE-2026-34080) (Closes: #1132939)
Checksums-Sha1:
 daf452918a400b3ac0836aea48850971a17f5fe4 60708 xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_armel.deb
 198d5355ec68d06981dd6d16eabd4a21fdec1cd1 11652 xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_armel.deb
 93508460c02a57ec47873567a5ae9e6a3b3841b0 8276 xdg-dbus-proxy-tests_0.1.4-3+deb12u1_armel.deb
 b02cca3f2c8c023bb1f013130997acba2e6f99ce 8506 xdg-dbus-proxy_0.1.4-3+deb12u1_armel-buildd.buildinfo
 d05c585095d922be6d50406d4067dc399ea042e2 21048 xdg-dbus-proxy_0.1.4-3+deb12u1_armel.deb
Checksums-Sha256:
 d800f4ece58212179d6e7e8967ddfb61bad7d5e246f9d23c0b853e02b30b1d24 60708 xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_armel.deb
 4acb78d4a4a7451f8a302ad475fd35e2cef0fa589efbe045b7502f753bb4d4b4 11652 xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_armel.deb
 44eabd1b42e448b59b232a18994bf61f04fedb3992e5fce1c986cdd96ae64ce7 8276 xdg-dbus-proxy-tests_0.1.4-3+deb12u1_armel.deb
 d90df06e77984583ac3163bd7071529e378b6b57f7bcf8c81cd9268ac4883175 8506 xdg-dbus-proxy_0.1.4-3+deb12u1_armel-buildd.buildinfo
 774806b8f8d5ccfeead3242d52a4eba8897ee0346f00578d4c8b802cbf4cf7c5 21048 xdg-dbus-proxy_0.1.4-3+deb12u1_armel.deb
Files:
 425346e0ca3f7af8b2a6e8ee17e19649 60708 debug optional xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_armel.deb
 617ebb5074b7ae84408bd2a110ac3271 11652 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_armel.deb
 ede4d3d939cd31fbff83f65ebbfd67ef 8276 admin optional xdg-dbus-proxy-tests_0.1.4-3+deb12u1_armel.deb
 408d3cab8773fbc17dd7fda7293b8ade 8506 admin optional xdg-dbus-proxy_0.1.4-3+deb12u1_armel-buildd.buildinfo
 563c46617e8816f03f33649fa6b66584 21048 admin optional xdg-dbus-proxy_0.1.4-3+deb12u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=7Wgj
-----END PGP SIGNATURE-----