-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 13:35:47 +0800
Source: docker.io
Binary: docker-cli docker-cli-dbgsym docker.io docker.io-dbgsym
Architecture: i386
Version: 26.1.5+dfsg1-9+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 docker-cli - Linux container runtime -- client
 docker.io  - Linux container runtime
Changes:
 docker.io (26.1.5+dfsg1-9+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Engine fixes are cherry-picked from the upstream 25.0 LTS branch, which
     carries official backports of all of them; BuildKit fixes are taken from
     BuildKit v0.28.1 as vendored by moby/moby: CVE-2026-41568, CVE-2026-42306,
     CVE-2026-34040, CVE-2026-33997, CVE-2026-33747, CVE-2026-33748.
   * Add engine-go1.24-os-root-mkdirall.patch. The upstream CVE-2026-41568 fix
     calls os.Root.MkdirAll, added in Go 1.25; trixie has Go 1.24, so the two
     calls are replaced by an equivalent helper built on os.Root.Mkdir.
Checksums-Sha1:
 70fa33d3198077b8d41b35b64f883d7e799c5e18 7970804 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_i386.deb
 42caedab3cb5caea1e9a0fa77b00fe3dddb1873d 7467208 docker-cli_26.1.5+dfsg1-9+deb13u1_i386.deb
 08049285275b38b328a32930344e8a2f8098dd63 988736 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_i386.deb
 a344ba76cc52c59106f3f26c0eb7c4e33e2b5994 30538 docker.io_26.1.5+dfsg1-9+deb13u1_i386-buildd.buildinfo
 05aae5faee7b0df8a43f581b8ba0d81313f4b146 17421584 docker.io_26.1.5+dfsg1-9+deb13u1_i386.deb
Checksums-Sha256:
 027a74176c0ec26c05690422290dd63783f4030c0ea4b4dbc2a9db377bf3a0f0 7970804 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_i386.deb
 a49c4fbf65df316269ce58d0c5cdc4ccb2957a9d5c1a7a1dd928a9504d230394 7467208 docker-cli_26.1.5+dfsg1-9+deb13u1_i386.deb
 1a4a125a35bb65f786a1b07fdd2fac765449b3c5d8e95d7d09968a8c93b541a6 988736 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_i386.deb
 d8dce0af0117b521d3854b81164feb400d49120d88cd51f4a01cf2b938107de7 30538 docker.io_26.1.5+dfsg1-9+deb13u1_i386-buildd.buildinfo
 267290321ded621aeec173ebce9061ee8d1ceac90040b434584db30cb5fe6e45 17421584 docker.io_26.1.5+dfsg1-9+deb13u1_i386.deb
Files:
 31cbdc3b71651b51202b9660eede7011 7970804 debug optional docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_i386.deb
 5c9f1e70744ce5f08fce99b3451708e2 7467208 admin optional docker-cli_26.1.5+dfsg1-9+deb13u1_i386.deb
 aa0c58e45992ba49aff875a84adca16b 988736 debug optional docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_i386.deb
 21f030da0fb970417b9bdbaf9d7e69d9 30538 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_i386-buildd.buildinfo
 388163b028654adf25e3c63042a0294b 17421584 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=iCQ0
-----END PGP SIGNATURE-----