-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 13:35:47 +0800
Source: docker.io
Binary: docker-cli docker-cli-dbgsym docker.io docker.io-dbgsym
Architecture: riscv64
Version: 26.1.5+dfsg1-9+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-03) <buildd_riscv64-rv-manda-03@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 docker-cli - Linux container runtime -- client
 docker.io  - Linux container runtime
Changes:
 docker.io (26.1.5+dfsg1-9+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Engine fixes are cherry-picked from the upstream 25.0 LTS branch, which
     carries official backports of all of them; BuildKit fixes are taken from
     BuildKit v0.28.1 as vendored by moby/moby: CVE-2026-41568, CVE-2026-42306,
     CVE-2026-34040, CVE-2026-33997, CVE-2026-33747, CVE-2026-33748.
   * Add engine-go1.24-os-root-mkdirall.patch. The upstream CVE-2026-41568 fix
     calls os.Root.MkdirAll, added in Go 1.25; trixie has Go 1.24, so the two
     calls are replaced by an equivalent helper built on os.Root.Mkdir.
Checksums-Sha1:
 da54b022d9c43e9e3670c4a6228821051e8e5815 7930352 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_riscv64.deb
 6dc9236815caacf4d04169d12153f4c85e14d725 6499664 docker-cli_26.1.5+dfsg1-9+deb13u1_riscv64.deb
 c0326f258e99b3c7cc39615ac8e2a6b02b023106 1075892 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_riscv64.deb
 25085a89fcb2d04f7165a476aca2875fbcfdd1e8 30628 docker.io_26.1.5+dfsg1-9+deb13u1_riscv64-buildd.buildinfo
 aecb3fdfe4d88aed20183fe544dde819785f8ffb 15458164 docker.io_26.1.5+dfsg1-9+deb13u1_riscv64.deb
Checksums-Sha256:
 183c476b6d19744654c0368f752fd1df2eb6161d6e91e6cbbb179934a05a24bb 7930352 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_riscv64.deb
 230d6534f0085a1c7747d1e969cc28564cb433fa86b14637e050bb9bc829f435 6499664 docker-cli_26.1.5+dfsg1-9+deb13u1_riscv64.deb
 248599665811d86837dcee49b4659bd6976db89ae72d4f42b3203949c0fd750b 1075892 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_riscv64.deb
 f5546ea73a4bbfee160733a3c0ac49a1428d89b7e97c7e5294b52fac26a9426b 30628 docker.io_26.1.5+dfsg1-9+deb13u1_riscv64-buildd.buildinfo
 b05f569eba7feb168774042e1ef89d122f2a27e4162ad80c8924e60e47e95584 15458164 docker.io_26.1.5+dfsg1-9+deb13u1_riscv64.deb
Files:
 2eb6f2b66a1b98b6f59dc7d9ad874129 7930352 debug optional docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_riscv64.deb
 b3aaa83761748094ef882760a7e6171f 6499664 admin optional docker-cli_26.1.5+dfsg1-9+deb13u1_riscv64.deb
 4237113478f0bff92e564ac725a5e561 1075892 debug optional docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_riscv64.deb
 8b72ddee3be5ee82f1400243490b0da9 30628 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_riscv64-buildd.buildinfo
 cbaf28b77223bfefad892dd05ad8c2d7 15458164 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=vUfm
-----END PGP SIGNATURE-----