-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 15 Apr 2026 20:27:48 +0100
Source: xdg-dbus-proxy
Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym
Architecture: s390x
Version: 0.1.4-3+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 xdg-dbus-proxy - filtering D-Bus proxy
 xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests
Closes: 1132939
Changes:
 xdg-dbus-proxy (0.1.4-3+deb12u1) bookworm-security; urgency=high
 .
   * d/gbp.conf: Configure for bookworm
   * d/p/Fix-GVariant-reference-leaks.patch:
     Add patch from upstream 0.1.6 fixing some memory leaks.
     As well as being a desirable bug fix, this is necessary for the fix
     for CVE-2026-34080 to apply cleanly.
   * d/p/flatpak-proxy-Use-g_autoptr-in-validate_arg0_match.patch,
     d/p/Improve-detection-of-eavesdrop-true.patch:
     Fix detection of eavesdrop=true match rules, resolving a vulnerability
     in which a malicious or compromised Flatpak app could monitor D-Bus
     traffic that it was not intended to be able to access.
     (CVE-2026-34080) (Closes: #1132939)
Checksums-Sha1:
 2fb92924b70fdc28c424ee77638a0d8180d01418 59152 xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_s390x.deb
 d2ec9947b2795f174737fafb8fda7be887d9f97e 11084 xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_s390x.deb
 d9fc21755a8a489539a4f15597210d8ffbe2f598 7808 xdg-dbus-proxy-tests_0.1.4-3+deb12u1_s390x.deb
 f2eb9dffa574b00ea09b9e6ed882d4ef0855e686 8552 xdg-dbus-proxy_0.1.4-3+deb12u1_s390x-buildd.buildinfo
 82f6993226ced2e65f7859179ae52d9f01eee620 22064 xdg-dbus-proxy_0.1.4-3+deb12u1_s390x.deb
Checksums-Sha256:
 97b81b5d96a0641f7f3b3ac23e7caeba9b4e07e2f0230d6163c3af4320edbaf6 59152 xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_s390x.deb
 99c73e7ede35ebeb6f1f43109fb3af2de4454fd5e6ff6764b669ad8e8c959080 11084 xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_s390x.deb
 1513673b661773daeae919850123cc4c7d9be8c73488bc14cea3eed0b4eac040 7808 xdg-dbus-proxy-tests_0.1.4-3+deb12u1_s390x.deb
 97067fcf234d12e286f7fab0d41f042cda33e8978422c71762126a84932947b1 8552 xdg-dbus-proxy_0.1.4-3+deb12u1_s390x-buildd.buildinfo
 5caaaeb03b6b3da621c6be24ddb19f5a9647681e15033024db92b0019fb8056e 22064 xdg-dbus-proxy_0.1.4-3+deb12u1_s390x.deb
Files:
 6e3af9200929970c7f607cf4208e85be 59152 debug optional xdg-dbus-proxy-dbgsym_0.1.4-3+deb12u1_s390x.deb
 80cc9ebcd01c63d7448d02e3ac7ba641 11084 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.4-3+deb12u1_s390x.deb
 0c47cb9f2450e425f283ceb355afc001 7808 admin optional xdg-dbus-proxy-tests_0.1.4-3+deb12u1_s390x.deb
 e0569ebebad204ae10255b84896112c3 8552 admin optional xdg-dbus-proxy_0.1.4-3+deb12u1_s390x-buildd.buildinfo
 e4a06f7b4da30a2e09b864e8d4de791d 22064 admin optional xdg-dbus-proxy_0.1.4-3+deb12u1_s390x.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmnnP7oACgkQMWUFebkH
noTD5Q//TLw6o+KX3RqbIVfDgO4885JZTgfGjw1EZD30W+EHbzc6LhCUbysuWlWG
oMNwPrtsytUTT5dMGCWtP3Hg61TYWXPqLd9ZMo0Ovb/e0O1y1EY6O5hrWsGy8KO2
diAkJIBt7rxDePOtF4HYtd8Mr5Wx5M8XMV06Ji4MfGbTdh8tKar1Yb94CmiEj1Qp
f+gBFNwFPfgfXuR686MVtnd8jgzji0bm4xTywWLWIry/EbL6v95V1Ojbw3S0QbLq
LxtIZQqXAvioHTwm1bqWyUsKcBz7OVR2ywV3T3WwZH5CFwTcGOwXg0PKpO3EDur3
T+C/Y+UyfxL+CrMSwyLm3tsm7S0mytnD0EYmvnPRYGl330503biTUtG/W0TuPPSk
USrAnmj0B95MMs1G6dt9VnRLeSCUlt6IRNSWuIgaLvI8hi5i3BcL2F9YBdy+BCwZ
xdI/TBrXXYg0305Sw74f5E6cQit/xCe3YctmIUNkE8vZOu9tU4mO0sHJKhrkEUWn
WrL5lQyvLabggkmokCKiVao3+usFACxX0Ce7pSrkhRBI02SsRXwU5CM1kfz/T7TY
yeGT2pgknT4GL6MsogTSOmvTM9JUbjQ286DP7taj+TT4SQzeM5Qp/+xHXBc9TMpL
0UTSxEQmfFhZ+zuGO/SrnYwdkGlRBlFg3zoLOFAnvJ7o1L5iNas=
=9zwE
-----END PGP SIGNATURE-----