-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 13:35:47 +0800
Source: docker.io
Binary: docker-cli docker-cli-dbgsym docker.io docker.io-dbgsym
Architecture: amd64
Version: 26.1.5+dfsg1-9+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 docker-cli - Linux container runtime -- client
 docker.io  - Linux container runtime
Changes:
 docker.io (26.1.5+dfsg1-9+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Engine fixes are cherry-picked from the upstream 25.0 LTS branch, which
     carries official backports of all of them; BuildKit fixes are taken from
     BuildKit v0.28.1 as vendored by moby/moby: CVE-2026-41568, CVE-2026-42306,
     CVE-2026-34040, CVE-2026-33997, CVE-2026-33747, CVE-2026-33748.
   * Add engine-go1.24-os-root-mkdirall.patch. The upstream CVE-2026-41568 fix
     calls os.Root.MkdirAll, added in Go 1.25; trixie has Go 1.24, so the two
     calls are replaced by an equivalent helper built on os.Root.Mkdir.
Checksums-Sha1:
 85f561d2709d552c14eee4b538c81eb402e54e65 8355076 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_amd64.deb
 d9b02095dbc5852a13be358abd7a3803bbb9109b 7337444 docker-cli_26.1.5+dfsg1-9+deb13u1_amd64.deb
 2f95daacee2b334ab5668a706d050325c84dd254 3286540 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_amd64.deb
 0859160b13c4920b77b54e3406e13a6be47cf9c9 30646 docker.io_26.1.5+dfsg1-9+deb13u1_amd64-buildd.buildinfo
 452692208974097edebbc5d90d507ce1ba96deaa 23037844 docker.io_26.1.5+dfsg1-9+deb13u1_amd64.deb
Checksums-Sha256:
 b40ddf3ac540a309ad69f180f2bbb70b96d430c2653f8fda41b339112a017490 8355076 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_amd64.deb
 e78ac35b7a21652546ca1a739f63e4f31fe52e4385a9baf7020be400c594f23d 7337444 docker-cli_26.1.5+dfsg1-9+deb13u1_amd64.deb
 91e3122dcd484b511222d0017e7bd344fcc8085685138a8dabb47b0938e05f53 3286540 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_amd64.deb
 5bf2391770f01d37cdc28a50cd9c0cc4d978e3179c7d053f39e1242d0d1c752c 30646 docker.io_26.1.5+dfsg1-9+deb13u1_amd64-buildd.buildinfo
 142fe32f839a20720b2e6074b8d28d883b01bc45345f7315586b0c2d348dae87 23037844 docker.io_26.1.5+dfsg1-9+deb13u1_amd64.deb
Files:
 8e4c8f17f99aa22ae322257ef90933bb 8355076 debug optional docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_amd64.deb
 14a467674f3e9b5146896dddf474f327 7337444 admin optional docker-cli_26.1.5+dfsg1-9+deb13u1_amd64.deb
 863d6983e1ddd35633859357d4c98622 3286540 debug optional docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_amd64.deb
 8e0e122860a3e466a2498c2a06151128 30646 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_amd64-buildd.buildinfo
 c39ef3ea2d7d34410c4422495ab5fb2c 23037844 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=cgcM
-----END PGP SIGNATURE-----