-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 13:35:47 +0800
Source: docker.io
Binary: docker-cli docker-cli-dbgsym docker.io docker.io-dbgsym
Architecture: armhf
Version: 26.1.5+dfsg1-9+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 docker-cli - Linux container runtime -- client
 docker.io  - Linux container runtime
Changes:
 docker.io (26.1.5+dfsg1-9+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Engine fixes are cherry-picked from the upstream 25.0 LTS branch, which
     carries official backports of all of them; BuildKit fixes are taken from
     BuildKit v0.28.1 as vendored by moby/moby: CVE-2026-41568, CVE-2026-42306,
     CVE-2026-34040, CVE-2026-33997, CVE-2026-33747, CVE-2026-33748.
   * Add engine-go1.24-os-root-mkdirall.patch. The upstream CVE-2026-41568 fix
     calls os.Root.MkdirAll, added in Go 1.25; trixie has Go 1.24, so the two
     calls are replaced by an equivalent helper built on os.Root.Mkdir.
Checksums-Sha1:
 db3c16b7d400cd7fed70e4a581ba77c99540dd68 7473596 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_armhf.deb
 acfd2ee271145227c7dd70028893a40d7659c67e 6484560 docker-cli_26.1.5+dfsg1-9+deb13u1_armhf.deb
 e6b94a98bb7cc103d478cad33357210c5cb7c2e2 1014504 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_armhf.deb
 72281602570e64840e9c28150fe56a6156243818 30512 docker.io_26.1.5+dfsg1-9+deb13u1_armhf-buildd.buildinfo
 cf03ea3a845445aee3ac0734f6905ec6f9bef981 15102592 docker.io_26.1.5+dfsg1-9+deb13u1_armhf.deb
Checksums-Sha256:
 ba544d6cb888ae4e275057aea282a3e66c0b2ff0f07b45fda50fe6156bc4087a 7473596 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_armhf.deb
 53c1a088a6b4b4b62a38eae4dcd6884cc38bf55b868e3f90e12f2c3ba15d32b6 6484560 docker-cli_26.1.5+dfsg1-9+deb13u1_armhf.deb
 8156210de9d37d874f911e6e3fb802c6ffc8e4c52e2b4459a026f8db737d465f 1014504 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_armhf.deb
 ae08f04e47e25a422845c93c91a3e261616793ad82aed94d994a83af8f0f6192 30512 docker.io_26.1.5+dfsg1-9+deb13u1_armhf-buildd.buildinfo
 4a4cfdb304285c1dc41dd7c3adb4cdbff727569f2b16bb706a9680f259fd95f8 15102592 docker.io_26.1.5+dfsg1-9+deb13u1_armhf.deb
Files:
 3acfbad379d5d7c68875ba1cfa3bca1d 7473596 debug optional docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_armhf.deb
 f1535c7e816fb82e88888c4a383b29ec 6484560 admin optional docker-cli_26.1.5+dfsg1-9+deb13u1_armhf.deb
 7f1ee5e05579bfef0e25a9e876419b1a 1014504 debug optional docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_armhf.deb
 657fe68475c30ea688a28f88c72e7d9f 30512 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_armhf-buildd.buildinfo
 80395f2a01f9cd09c88c3cb02bce835d 15102592 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=gNvo
-----END PGP SIGNATURE-----