-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 13:35:47 +0800
Source: docker.io
Binary: docker-doc golang-github-docker-docker-dev
Architecture: all
Version: 26.1.5+dfsg1-9+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 docker-doc - Linux container runtime -- documentation
 golang-github-docker-docker-dev - reusable Go packages included with Docker
Changes:
 docker.io (26.1.5+dfsg1-9+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Engine fixes are cherry-picked from the upstream 25.0 LTS branch, which
     carries official backports of all of them; BuildKit fixes are taken from
     BuildKit v0.28.1 as vendored by moby/moby: CVE-2026-41568, CVE-2026-42306,
     CVE-2026-34040, CVE-2026-33997, CVE-2026-33747, CVE-2026-33748.
   * Add engine-go1.24-os-root-mkdirall.patch. The upstream CVE-2026-41568 fix
     calls os.Root.MkdirAll, added in Go 1.25; trixie has Go 1.24, so the two
     calls are replaced by an equivalent helper built on os.Root.Mkdir.
Checksums-Sha1:
 f93d22648c06e1240ce6024d3b342f38c240db3f 2330232 docker-doc_26.1.5+dfsg1-9+deb13u1_all.deb
 680f2131791c2acf376e369bfedf684e1c8a0250 30047 docker.io_26.1.5+dfsg1-9+deb13u1_all-buildd.buildinfo
 e40881b3494bab7de8ef7b0dcd9ece4cb6eb6b52 2722116 golang-github-docker-docker-dev_26.1.5+dfsg1-9+deb13u1_all.deb
Checksums-Sha256:
 a99bbc587bbd06722be9de1b3c15ed73e9f1e8105553990e27d76456dae057b0 2330232 docker-doc_26.1.5+dfsg1-9+deb13u1_all.deb
 329d10c4ea3841b428fbffee7761cf2fb0e42ca92bd981772095fdbb66b04a38 30047 docker.io_26.1.5+dfsg1-9+deb13u1_all-buildd.buildinfo
 1cff84ab7c38b3d1d72ace77f9de1917c8439ba45b6504f3c4c16df0b637db05 2722116 golang-github-docker-docker-dev_26.1.5+dfsg1-9+deb13u1_all.deb
Files:
 7f7d4c611888450461de582eeb608bc6 2330232 doc optional docker-doc_26.1.5+dfsg1-9+deb13u1_all.deb
 c8471745e0dcfb3df171f36386d7c49a 30047 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_all-buildd.buildinfo
 f120ea589b1fd66ad790de841da0bb5b 2722116 golang optional golang-github-docker-docker-dev_26.1.5+dfsg1-9+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=IUho
-----END PGP SIGNATURE-----