-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 13:35:47 +0800
Source: docker.io
Binary: docker-cli docker-cli-dbgsym docker.io docker.io-dbgsym
Architecture: s390x
Version: 26.1.5+dfsg1-9+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 docker-cli - Linux container runtime -- client
 docker.io  - Linux container runtime
Changes:
 docker.io (26.1.5+dfsg1-9+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Engine fixes are cherry-picked from the upstream 25.0 LTS branch, which
     carries official backports of all of them; BuildKit fixes are taken from
     BuildKit v0.28.1 as vendored by moby/moby: CVE-2026-41568, CVE-2026-42306,
     CVE-2026-34040, CVE-2026-33997, CVE-2026-33747, CVE-2026-33748.
   * Add engine-go1.24-os-root-mkdirall.patch. The upstream CVE-2026-41568 fix
     calls os.Root.MkdirAll, added in Go 1.25; trixie has Go 1.24, so the two
     calls are replaced by an equivalent helper built on os.Root.Mkdir.
Checksums-Sha1:
 c3477d2384d5613a93eafad21741e6b4af58961d 8013064 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_s390x.deb
 85787278125985b4ef6d709b6e18c201b408053c 6577792 docker-cli_26.1.5+dfsg1-9+deb13u1_s390x.deb
 abdac1dedf344d5ea10a72c6ae45d6706d7fd549 963660 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_s390x.deb
 bf086437480639915a8000dd75c1a4b035db97f6 30505 docker.io_26.1.5+dfsg1-9+deb13u1_s390x-buildd.buildinfo
 25bb2d8775fbb912bdbf6365184583b41c3e5f05 15680456 docker.io_26.1.5+dfsg1-9+deb13u1_s390x.deb
Checksums-Sha256:
 7ca8b314c0aeb24f95c0cfb179d3b13e0360b3585ae3bf9cfc45fac613102ec7 8013064 docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_s390x.deb
 66b0dd683656f12c05d01a6dfd3223e79d25ba8060829ac0e93a472ad6f4c615 6577792 docker-cli_26.1.5+dfsg1-9+deb13u1_s390x.deb
 51ea0a6138327a67056eeb79a5e3bb3f35f909c85726d12314a3bc2e0aaddd60 963660 docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_s390x.deb
 9e03acccc269ef971183cd58e3c10b58d0b3a187cc4d89b3604baea83c84a74f 30505 docker.io_26.1.5+dfsg1-9+deb13u1_s390x-buildd.buildinfo
 6dc6df0bd681841dbf054ec70db89337dab1f982c063f8291a971fa7f359ee9f 15680456 docker.io_26.1.5+dfsg1-9+deb13u1_s390x.deb
Files:
 a83e0dbb01943555bc72abeece5d7fa1 8013064 debug optional docker-cli-dbgsym_26.1.5+dfsg1-9+deb13u1_s390x.deb
 2c2c55c42f146f32f31e93dc443c5df9 6577792 admin optional docker-cli_26.1.5+dfsg1-9+deb13u1_s390x.deb
 418938ef7a2dab46bb9d8b46e4d67fd7 963660 debug optional docker.io-dbgsym_26.1.5+dfsg1-9+deb13u1_s390x.deb
 5ae989c9b332f6a752851261aea3e6cb 30505 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_s390x-buildd.buildinfo
 ae878ad071a5d645a44f881a8c32cfe2 15680456 admin optional docker.io_26.1.5+dfsg1-9+deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmp9d3gACgkQMWUFebkH
noTM+w//XQ/H4IZQDfCDAKU1P+fCxWsVo5jISp7XR280AzAGuSkS+/0AJH3hwGtT
WhO5vrTaN3bmjYE6e6SMjKsh9EhwDI9ZzYiXHTxlnzRUhnLDmGvhn39eQaXqV1xh
I11k9tKsNmLLrgDnqQcCNNimYuP7J4IZvZj+JJar2alWqprkwstSO1KNU1tvN+MV
dL42bH2I6oaO3HnXEATvtX0aTDLOiaE3wUGLHPcwLc+0rzdSrCPJR17mnNc5X+/h
L99xy9uf0IerujRFGoBxnRkAPdx9ivcaXTSqHKEsPR8JzaJartdL0LB0QJ3TpCk5
rGefe8aKsS35wpZnKduK1dTqUcHDNcmuWzNp6XPArgwIMUmXbz3tIumRsbBtfRq2
5rl5OpCBlj35oin7/6nSJSCpyS32W8UHIKrj4iEZQ2kxOlQ/XwLbSA6yJwwzxLUI
XS21PJFSkgglKOIFO+zFHjs5dDvHTGJ9CwGYQW1K3Be1tQGhQm7eZM89rByyJIRI
2TKz/wAoxFI6UvKQBbgddnFI2U3Hnh8pWpXJwvMsX76pFZCYwmuZ1Wbr266yIqUj
jTR5g0HbGOWJR5PNWQMvOkty/sZke8xX2LLS+l6ZtrUyA4MdizGJTX9oencM2EX0
szKKiR+IGOa7wECS5jNmvLFbHn6TNGwMmwehrDTNGeC9Hz6AMXw=
=Ysdw
-----END PGP SIGNATURE-----