-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 23 Sep 2026 13:16:29 +0100
Source: xdg-dbus-proxy
Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym
Architecture: riscv64
Version: 0.1.6-1+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-01) <buildd_riscv64-rv-manda-01@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 xdg-dbus-proxy - filtering D-Bus proxy
 xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests
Closes: 1148782
Changes:
 xdg-dbus-proxy (0.1.6-1+deb13u3) trixie-security; urgency=high
 .
   * d/p/CVE-2026-94422/*.patch:
     Apply patches from upstream release 0.1.9 to fix message filtering
     bypass vulnerabilities.
     A malicious or compromised Flatpak app could use these vulnerabilities
     to escape the sandbox and execute arbitrary code on the host.
     (CVE-2026-94422, GHSA-2cgv-pwcq-wvpq, Closes: #1148782)
   * Mention CVE-2026-93676, #1144129 in previous changelog entry
Checksums-Sha1:
 ba5a07bd56f9cd6cf68c41c569001431c3852fca 67536 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u3_riscv64.deb
 4c48c7e218b6b299bbd399186c1074f30df134a4 25776 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u3_riscv64.deb
 9914c6dc95b4492773d6ba3ced01a93f4090c172 14344 xdg-dbus-proxy-tests_0.1.6-1+deb13u3_riscv64.deb
 4a2393ae14511964a842074532fe1ddab629e7a4 8940 xdg-dbus-proxy_0.1.6-1+deb13u3_riscv64-buildd.buildinfo
 dfcd096ef36a250487f4c0b03e09969072daa2f3 25892 xdg-dbus-proxy_0.1.6-1+deb13u3_riscv64.deb
Checksums-Sha256:
 a6f23e04965142783a41a8f064ffba00991add134630f5433611ced21914365a 67536 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u3_riscv64.deb
 623a7b3527aa1c2b4ec7e5dfab2908099b1538fd2bf962dce0a37a085fdb328b 25776 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u3_riscv64.deb
 8fab72be1d02a42e6407594b10a9c7e2b531b31ba5ac2703a9cadb313467cf86 14344 xdg-dbus-proxy-tests_0.1.6-1+deb13u3_riscv64.deb
 dabdbcca4d73e52814f551a43cdb632c164ae9cbd08072c8194728de65ec1e8c 8940 xdg-dbus-proxy_0.1.6-1+deb13u3_riscv64-buildd.buildinfo
 14ca8afa69c336479ad2052ab459d23011343d4335776d456a95e5ea3cad98c6 25892 xdg-dbus-proxy_0.1.6-1+deb13u3_riscv64.deb
Files:
 71b89203a6f7a643d23a318160e686d1 67536 debug optional xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u3_riscv64.deb
 4025dece0d7c687ff00df413df0f0501 25776 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u3_riscv64.deb
 670426801b7e0e14bcbc63ee0bf621cb 14344 admin optional xdg-dbus-proxy-tests_0.1.6-1+deb13u3_riscv64.deb
 9ca927c8b308bea354afa17f63067210 8940 admin optional xdg-dbus-proxy_0.1.6-1+deb13u3_riscv64-buildd.buildinfo
 ececdb3e5161d9abfc6b13b783f0c0eb 25892 admin optional xdg-dbus-proxy_0.1.6-1+deb13u3_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=yCQv
-----END PGP SIGNATURE-----