-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 13:35:47 +0800
Source: docker.io
Binary: docker-cli docker-cli-dbgsym docker.io docker.io-dbgsym
Architecture: armel
Version: 26.1.5+dfsg1-9+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 docker-cli - Linux container runtime -- client
 docker.io  - Linux container runtime
Changes:
 docker.io (26.1.5+dfsg1-9+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Engine fixes are cherry-picked from the upstream 25.0 LTS branch, which
     carries official backports of all of them; BuildKit fixes are taken from
     BuildKit v0.28.1 as vendored by moby/moby: CVE-2026-41568, CVE-2026-42306,
     CVE-2026-34040, CVE-2026-33997, CVE-2026-33747, CVE-2026-33748.
   * Add engine-go1.24-os-root-mkdirall.patch. The upstream CVE-2026-41568 fix
     calls os.Root.MkdirAll, added in Go 1.25; trixie has Go 1.24, so the two
     calls are replaced by an equivalent helper built on os.Root.Mkdir.
Checksums-Sha1:
 029e4000f3c5f198ba6bf4aa198ef34d255440cf 7462964 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_armel.deb
 65fed746adbe4bd73f2ecdea20d40f99e2eed339 6479200 docker-cli_26.1.5+dfsg1-9+deb13u1_armel.deb
 b3e6cadbf6e3ebcf90c7ae42f10380c7d15c7d01 1012516 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_armel.deb
 89151fd195b2b1981689e3fc370f9f99a34a4d54 30498 docker.io_26.1.5+dfsg1-9+deb13u1_armel-buildd.buildinfo
 92c19a28d7f2ca2f53267eeaa31fd228ed41a759 15126672 docker.io_26.1.5+dfsg1-9+deb13u1_armel.deb
Checksums-Sha256:
 015447aa409c33b5610fef570e6950c27b8af929b27f906850370ce946294a5e 7462964 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_armel.deb
 d2dd458c11bd9b9feabdf9171387cef8cfb0f311d6ae0cb32e98b6ea3ee23950 6479200 docker-cli_26.1.5+dfsg1-9+deb13u1_armel.deb
 83ca92bbc024178963779722bc01f87fe8202a00b73ae75de7b6db182e3f9ff2 1012516 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_armel.deb
 b2651f7911dac39a6dd2bea1dff0ba03680aaacff2e1827eaca5cb1a7a5222e9 30498 docker.io_26.1.5+dfsg1-9+deb13u1_armel-buildd.buildinfo
 6468d6f23a69778cd066a52ed5625b3081c7dc2e12ae84b09edfedd45982f6fa 15126672 docker.io_26.1.5+dfsg1-9+deb13u1_armel.deb
Files:
 fb0b9959f92554c88f3fd97dae1a36b5 7462964 debug optional docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_armel.deb
 04b14f3d0b7243660fa14712144cefbf 6479200 admin optional docker-cli_26.1.5+dfsg1-9+deb13u1_armel.deb
 56e500590bf5b4be1628f91f8dd7bbca 1012516 debug optional docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_armel.deb
 e323fdf92dc4e7e78f02d32792214c42 30498 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_armel-buildd.buildinfo
 19010f7ec653304d4feefa5c0c039c69 15126672 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=6EfZ
-----END PGP SIGNATURE-----