-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 15 Apr 2026 20:27:48 +0100
Source: xdg-dbus-proxy
Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym
Architecture: ppc64el
Version: 0.1.4-3+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) <buildd_ppc64el-ppc64el-osuosl-01@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 xdg-dbus-proxy - filtering D-Bus proxy
 xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests
Closes: 1132939
Changes:
 xdg-dbus-proxy (0.1.4-3+deb12u1) bookworm-security; urgency=high
 .
   * d/gbp.conf: Configure for bookworm
   * d/p/Fix-GVariant-reference-leaks.patch:
     Add patch from upstream 0.1.6 fixing some memory leaks.
     As well as being a desirable bug fix, this is necessary for the fix
     for CVE-2026-34080 to apply cleanly.
   * d/p/flatpak-proxy-Use-g_autoptr-in-validate_arg0_match.patch,
     d/p/Improve-detection-of-eavesdrop-true.patch:
     Fix detection of eavesdrop=true match rules, resolving a vulnerability
     in which a malicious or compromised Flatpak app could monitor D-Bus
     traffic that it was not intended to be able to access.
     (CVE-2026-34080) (Closes: #1132939)
Checksums-Sha1:
 ebd6c711b821eba045d7d29b78ece327761d85de 62616 xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_ppc64el.deb
 431d014fbd34c93047d2ada603526160c1a3c317 11936 xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_ppc64el.deb
 9ca81e1b064a7b556af7c94594a7077a22c91b3a 8556 xdg-dbus-proxy-tests_0.1.4-3+deb12u1_ppc64el.deb
 f486e147fcff0f247f2a715d1c42290c44877ad4 8689 xdg-dbus-proxy_0.1.4-3+deb12u1_ppc64el-buildd.buildinfo
 52bdc2eee7e64974e0d6c3fb90c3efa515038807 25656 xdg-dbus-proxy_0.1.4-3+deb12u1_ppc64el.deb
Checksums-Sha256:
 7814224d56fd4021929bd86cbedbf6ad29b396743d2167a8b4677f87853454b1 62616 xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_ppc64el.deb
 c60b31aac31f488acab756a01cddca3ed5be3fdda9626fe480108d629a1b00b4 11936 xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_ppc64el.deb
 09d76b2eb579dd9a73f9aab74ea2f1c226ab12401a83e4fbc7afd00090e2e3e7 8556 xdg-dbus-proxy-tests_0.1.4-3+deb12u1_ppc64el.deb
 aa92952b9219cc9f5ed937f0b8b064cf8f2a3ad5ebe82e730cf75e7ffdd402db 8689 xdg-dbus-proxy_0.1.4-3+deb12u1_ppc64el-buildd.buildinfo
 81fe79e2bbf77f4edfe911faa5feba64bb02c059b81688a2e2e7ce2319785341 25656 xdg-dbus-proxy_0.1.4-3+deb12u1_ppc64el.deb
Files:
 332882aadc168d4c36fd527a57dc41a2 62616 debug optional xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_ppc64el.deb
 e17bbbfbceed7f2bf2fcdb735009911d 11936 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_ppc64el.deb
 9230c1d776bdfa83b9f3d40424f788f5 8556 admin optional xdg-dbus-proxy-tests_0.1.4-3+deb12u1_ppc64el.deb
 93393855abb27b917ddfd2bd03ed8d32 8689 admin optional xdg-dbus-proxy_0.1.4-3+deb12u1_ppc64el-buildd.buildinfo
 913e4a93da3c913a9537ff5a0f6a2ae3 25656 admin optional xdg-dbus-proxy_0.1.4-3+deb12u1_ppc64el.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEGHWM+bJZRznwgySGOrVShFbIMGEFAmnnOWgACgkQOrVShFbI
MGFgbg/8DaJ8C8hquHQR9/NQezHeLRtLQPvhhMNya5Mnj0WZI/tkwj3HZvBkE1U0
qQbKBOa3Gn4HTfyCdBOZkeKU/Cfv0C2qQeNQ4CDAotOiyzuc+g7H3925adWeDhNG
XC9XSR+MVFbsDe9mY9S9tgiOnbpgQNeZD8Oxr/gRO5o0f3E6biei3C5CRuq9GbdZ
uhI2tyRbPUuGY25hWVvao8oQ0CHljUzHQik6zi8lOzk4z4/l224j+oTpzDZjt+RT
jPEnfYUAQKKHoIdUELXGAiyDs0Jra8DPm7uxH1ndHJtODNkJ6BDvl1/WxOmx/gaJ
Hk3pkpIuY/eYQvtdptkn5LR2+1104XtWstgUSe9EEb+7TBHagziOT3PbC4l8hGwy
+C8lAZhd9RRqc/B8jSGaBA2XTrQ89fUsT8FAZAlzYmonrgnRnP/3NiZbtSExKnQr
ig6Tn57blOto5yHstx5tbPv1tMmri1KIMYli1P1yaga936z6pEy98+b1nUK0TfRK
li0b4fOLUweXq3GuKiBi2wuUgDOsaZa9KZbnyLAlHJ3egIgp/NE8dtuljjh/tqw5
nwkoYA99MLTzmf9rIAcn4OnJfB/mP9rvvxCizQtXwBZYzYVMCz5v98Sre5Qaganl
uG4+7UOneuiFd6FTnTNfRI+5bi+8uHNJEBtC7Rum1aHvQLlvZZA=
=nMPN
-----END PGP SIGNATURE-----