-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 15 Apr 2026 20:27:48 +0100
Source: xdg-dbus-proxy
Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym
Architecture: mipsel
Version: 0.1.4-3+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: mipsel Build Daemon (mipsel-osuosl-05) <buildd_mips64el-mipsel-osuosl-05@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 xdg-dbus-proxy - filtering D-Bus proxy
 xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests
Closes: 1132939
Changes:
 xdg-dbus-proxy (0.1.4-3+deb12u1) bookworm-security; urgency=high
 .
   * d/gbp.conf: Configure for bookworm
   * d/p/Fix-GVariant-reference-leaks.patch:
     Add patch from upstream 0.1.6 fixing some memory leaks.
     As well as being a desirable bug fix, this is necessary for the fix
     for CVE-2026-34080 to apply cleanly.
   * d/p/flatpak-proxy-Use-g_autoptr-in-validate_arg0_match.patch,
     d/p/Improve-detection-of-eavesdrop-true.patch:
     Fix detection of eavesdrop=true match rules, resolving a vulnerability
     in which a malicious or compromised Flatpak app could monitor D-Bus
     traffic that it was not intended to be able to access.
     (CVE-2026-34080) (Closes: #1132939)
Checksums-Sha1:
 6e189ad248f35bcbff4771b3087026657e626f3b 63036 xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_mipsel.deb
 d9270e2cc9c2ef48650bc1f5cb3b4fe0c6c82bd4 11668 xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_mipsel.deb
 40b48bce77dcb2cd8c449eba79a5e27e2b0219f7 7832 xdg-dbus-proxy-tests_0.1.4-3+deb12u1_mipsel.deb
 68fe364ab5dc0290352db9009b73a4a5129c4b94 8452 xdg-dbus-proxy_0.1.4-3+deb12u1_mipsel-buildd.buildinfo
 3c648ad7bf80b40364e67c723d2e5eca709ac1af 22452 xdg-dbus-proxy_0.1.4-3+deb12u1_mipsel.deb
Checksums-Sha256:
 35c5f37c9a795dc2fd9627e7d700114e557d3d38e4286a73f7bb0731f86dc6f2 63036 xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_mipsel.deb
 f9136087b6112bfe8200661367753db4762d681474497a0917c17a4fc14fdbab 11668 xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_mipsel.deb
 f46ab82b8ce582dec441077bf0c6b7ccef73f03db47054cb29e36f932ad4a843 7832 xdg-dbus-proxy-tests_0.1.4-3+deb12u1_mipsel.deb
 6fcd19df4429f74174f6a94d3cdcde09a38d0223e4705159fc911ede5cb32af0 8452 xdg-dbus-proxy_0.1.4-3+deb12u1_mipsel-buildd.buildinfo
 d88651337ae5093b52f47aa07b40452cd303c0f1dce90fd1eb5cede06faf8218 22452 xdg-dbus-proxy_0.1.4-3+deb12u1_mipsel.deb
Files:
 8b3c9fc87d5d8e04b1054845b8e70461 63036 debug optional xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_mipsel.deb
 a0da1f8fbac1e6c1190663aef79640a0 11668 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_mipsel.deb
 58f10628a1cd7865f91c0c5cce35b397 7832 admin optional xdg-dbus-proxy-tests_0.1.4-3+deb12u1_mipsel.deb
 4617d01c46a299414519ef2d033902a2 8452 admin optional xdg-dbus-proxy_0.1.4-3+deb12u1_mipsel-buildd.buildinfo
 eff41d3bde1a2adb142d71c03413faca 22452 admin optional xdg-dbus-proxy_0.1.4-3+deb12u1_mipsel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE4ZxaH3zEHAF/GhnCHrk2gTKeWggFAmnnObMACgkQHrk2gTKe
WghP2w/7BQDPq5g1darfhyUtRy5vbf4c7BJIRMP7KBG97423+bYhZzU3/wwQQsem
Ac/00+fIXF31uzq7lNcrX0dZ5abet1J5otawPNULO7Do19PPO5hgrbHGkTWDNqIv
X2NFXuHodfu6jANBSrt3B5hvcK+BQMmKowlToDis82A8V4eGo1DeXNXQcrP2KBLh
WowfWKSybmpFBhZW8JZ1nUXLgr0Vl8QdhZobu9Nue1HTziMcvG+iYgIJTI1CD5wi
C37sTgt0xF1OwJZcN6PjbNnZT7FacNO1e4FAMusPUC5LfRjkRWJmW3trwrkNi4W4
CSZhXgzXp0I6IdWcciuHyXkHHOU1Cmmx7C6NP98GMnpQcfKxke0Cd0K+TbMhUWFS
vbIPKJMqVBKdvNn/EpBJMc++Br7atfwuALtpYPkS3p6pIZFAJDPxtdoXqeLpd2qT
eK9OAwFJHum2vIgrUp5smTGyLvI3YLctye+550vLgzWTnwYKleEr7boLOpmpUMFd
wS2CTjDxY2jD1hw6c767+F0ULT8VKpiEd3cUg7XDRPVXwYlD5vD4+b6yM/JKfgED
AZy2mrnU+p36kwxZTgQBcOAo1OJjY254iPq+zKlTAnlj4j524YL/QAXJS+FUyIHh
uWPCZ0VWr7X/OS/u0YjNk6eENvEVUuUOj96VO+fXju+GKbMgPjc=
=yciT
-----END PGP SIGNATURE-----