-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 15 Apr 2026 20:27:48 +0100 Source: xdg-dbus-proxy Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym Architecture: mips64el Version: 0.1.4-3+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Simon McVittie Description: xdg-dbus-proxy - filtering D-Bus proxy xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests Closes: 1132939 Changes: xdg-dbus-proxy (0.1.4-3+deb12u1) bookworm-security; urgency=high . * d/gbp.conf: Configure for bookworm * d/p/Fix-GVariant-reference-leaks.patch: Add patch from upstream 0.1.6 fixing some memory leaks. As well as being a desirable bug fix, this is necessary for the fix for CVE-2026-34080 to apply cleanly. * d/p/flatpak-proxy-Use-g_autoptr-in-validate_arg0_match.patch, d/p/Improve-detection-of-eavesdrop-true.patch: Fix detection of eavesdrop=true match rules, resolving a vulnerability in which a malicious or compromised Flatpak app could monitor D-Bus traffic that it was not intended to be able to access. (CVE-2026-34080) (Closes: #1132939) Checksums-Sha1: ff78e83c7d231a8cd91f50f01027ed2295d078c2 64456 xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_mips64el.deb d538cceafe547f4df48a3254f6b375321b219b0b 12152 xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_mips64el.deb 29aa0db90123cea4612e70341d2ebec41f4903e1 8092 xdg-dbus-proxy-tests_0.1.4-3+deb12u1_mips64el.deb 67dbc6e0e1da407b284422219b819277d6395b9d 8487 xdg-dbus-proxy_0.1.4-3+deb12u1_mips64el-buildd.buildinfo e9cf267482054e365d475ce588c68b09e14a4c55 22600 xdg-dbus-proxy_0.1.4-3+deb12u1_mips64el.deb Checksums-Sha256: 0606abc0283168ef8e54343b6f05d9a2d4a873204b4edd347d4a9bf65a64df9f 64456 xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_mips64el.deb 65a238a79d81aec1fa2051765128db6fbd59bbaaa809f110ffef14567f6f3d5e 12152 xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_mips64el.deb 8ccc3382685e0e411d686bf8889e7cba03969de66427dd4b39a89d3c486bad8c 8092 xdg-dbus-proxy-tests_0.1.4-3+deb12u1_mips64el.deb 28c835ec0a7e123d16d1a545344dfae696bbbd45aefab0b066cfd88070af5241 8487 xdg-dbus-proxy_0.1.4-3+deb12u1_mips64el-buildd.buildinfo 22863fcaa34e6b827449615efaf0351c4dab6af245f037f3f43b8f204a0175dd 22600 xdg-dbus-proxy_0.1.4-3+deb12u1_mips64el.deb Files: 53e7c5146227ed34cecb567116f4c44a 64456 debug optional xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_mips64el.deb 796eb7d67f71d947e2d03dd06b63d96e 12152 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_mips64el.deb 3a7f78b60ba0373e6063394ee7a543d5 8092 admin optional xdg-dbus-proxy-tests_0.1.4-3+deb12u1_mips64el.deb 042923ad3d54892d78703fe8dd4189ca 8487 admin optional xdg-dbus-proxy_0.1.4-3+deb12u1_mips64el-buildd.buildinfo 5957b4523b5645aa26ecbbf39227590b 22600 admin optional xdg-dbus-proxy_0.1.4-3+deb12u1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4ZxaH3zEHAF/GhnCHrk2gTKeWggFAmnnOgAACgkQHrk2gTKe WghAlg//Wli7D8rHQGkQVWrwVOsSNGC4bD19V3N/aQ6BTAX7eMEApX8SQKCePVuW +PXsdIHQm6De63By79cfZVhH9wJqYmp/jvheil1HhlAiBeR3bJbwS+WydkSDI4Lt a3ZkQSzmb2zXWswje624dZUuJ6DhPAoRWFfoSG00ZAd93lNk2Z8cSnuQPSYhOrJv axHkCCfxyhby8hI+isI8bCyHDfHphcWv1CoROUUG1fywMbzzq8VZLv8/Jeuq1KEG ohT129dSEEHHxgo1ExPBnQLjCufwSsUZ66b15A2UjS7LULfytH7BIwolubkjXCK0 xPbyU4olQoumAczSsMN0NHEWfY/KfGHGG/ArsdWW2a7yHFafZRl4M25h4J+Q6UWL g30voGn0R8Z96TJOSdiW0HE5SLDHCAKHHt7MlyQ3hOvJ2ZFZmHFlc2+VAIdNvb85 xoFK4Wvm6MdZ5LOzTFpErrhpUFziIWX2EBoAMTFpPK1QFSuDKKHYsli9xHrY/tbE u9tb5dZhIlc9roW35IYSGsajtoS9xJI3O31x505uMxtl6L76gXfSWkI+e4l6jPDI kLT2H9AuBQOUmjiYBI1yCiLuNLnkUlRTywCUYWuHdOLXbsmfxURMYmuFSF6t0ZMl S8d4mX5LONfIONgLxSoKF0zlyZ48XnuYakUSxBd1nkZNsGX6qaM= =y+3I -----END PGP SIGNATURE-----