-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 13:35:47 +0800
Source: docker.io
Binary: docker-cli docker-cli-dbgsym docker.io docker.io-dbgsym
Architecture: arm64
Version: 26.1.5+dfsg1-9+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 docker-cli - Linux container runtime -- client
 docker.io  - Linux container runtime
Changes:
 docker.io (26.1.5+dfsg1-9+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Engine fixes are cherry-picked from the upstream 25.0 LTS branch, which
     carries official backports of all of them; BuildKit fixes are taken from
     BuildKit v0.28.1 as vendored by moby/moby: CVE-2026-41568, CVE-2026-42306,
     CVE-2026-34040, CVE-2026-33997, CVE-2026-33747, CVE-2026-33748.
   * Add engine-go1.24-os-root-mkdirall.patch. The upstream CVE-2026-41568 fix
     calls os.Root.MkdirAll, added in Go 1.25; trixie has Go 1.24, so the two
     calls are replaced by an equivalent helper built on os.Root.Mkdir.
Checksums-Sha1:
 7fa50a2a1f16216c7e611e7c68aacbda61e9ef33 7852272 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_arm64.deb
 016a24ce4a14ccd9de42909ffd333a2dc3ef1fee 6316696 docker-cli_26.1.5+dfsg1-9+deb13u1_arm64.deb
 af14f5a8d4ed077714a3558f4755001c95c8ce7c 972116 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_arm64.deb
 dcbd753be8b6eff422bdb13346022160830de1cf 30699 docker.io_26.1.5+dfsg1-9+deb13u1_arm64-buildd.buildinfo
 ae84012c38b5a6d64d683933d8a8310d86ab06c2 15066596 docker.io_26.1.5+dfsg1-9+deb13u1_arm64.deb
Checksums-Sha256:
 41a2cae3c9544edbea34becb3013486905e56879c38b4953824da02ffd0a19bd 7852272 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_arm64.deb
 d9dbab1a7cae040aa617ab509067b4d070dc1dde190851e5b629150705da55fd 6316696 docker-cli_26.1.5+dfsg1-9+deb13u1_arm64.deb
 793dacda18e8abd5e3bc8361e090634c8d0535a771f036406d499e033d0acbc4 972116 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_arm64.deb
 fed6a0d13b99084f885483f3e8f54f1ac4b0f8a08681c65ae7bab6f27089e4b0 30699 docker.io_26.1.5+dfsg1-9+deb13u1_arm64-buildd.buildinfo
 e1fe5c5599e1ab91e305cc82ff215240401ff0c755c00e5a9307f78577eebcc9 15066596 docker.io_26.1.5+dfsg1-9+deb13u1_arm64.deb
Files:
 9de859252fd3d278ffd0b666685a8ebb 7852272 debug optional docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_arm64.deb
 01e56cfc967617205f0a5b842a4a8967 6316696 admin optional docker-cli_26.1.5+dfsg1-9+deb13u1_arm64.deb
 478ca2c2c257a6a85d5f0b4cc8e621bf 972116 debug optional docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_arm64.deb
 95318f1fb6088c4700f49498c704133e 30699 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_arm64-buildd.buildinfo
 08ce8d46c0507153b739a42462fec934 15066596 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=xo1X
-----END PGP SIGNATURE-----