-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 11 Aug 2026 13:43:30 +0100
Source: xdg-dbus-proxy
Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym
Architecture: amd64
Version: 0.1.6-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 xdg-dbus-proxy - filtering D-Bus proxy
 xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests
Changes:
 xdg-dbus-proxy (0.1.6-1+deb13u2) trixie-security; urgency=high
 .
   * d/p/GHSA-r7hp-698j-2h6c/*.patch:
     Fix a vulnerability in access control for receiving broadcasts.
     In 0.1.6 and 0.1.7, a malicious or compromised Flatpak app could
     receive any broadcast D-Bus message on the session bus or the AT-SPI
     bus, leading to unintended information disclosure.
   * d/p/tests/*.patch:
     Add automated test coverage for message filtering
Checksums-Sha1:
 9715d0df9b68864a32f708fdff503751f47e50dd 68432 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_amd64.deb
 0f5de437e0a6f0c592cd44cd35b7e156c1e7986f 22904 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_amd64.deb
 9e0f5ff45cbb0cdb7afac8f211f17dca4b4a2a72 13360 xdg-dbus-proxy-tests_0.1.6-1+deb13u2_amd64.deb
 129c88e7372604083e4160461c084c889437fd4e 8929 xdg-dbus-proxy_0.1.6-1+deb13u2_amd64-buildd.buildinfo
 9dd90f67cf62d3e4242575d4e59079b30718cfe1 25640 xdg-dbus-proxy_0.1.6-1+deb13u2_amd64.deb
Checksums-Sha256:
 a117f16676978f94e47cdd34a0af0c98472e097e847ceef4c700502962693f34 68432 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_amd64.deb
 9af8e900115952596f57ac306961f6acfe33873827fdc35149e1866f849dc00c 22904 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_amd64.deb
 eb9edb1d029bbc8dfa109cd75cdb5d011dfefbb03470c48a27f402601d9209c5 13360 xdg-dbus-proxy-tests_0.1.6-1+deb13u2_amd64.deb
 83e877f252f8f3ccf34bd5d0848e2f35e7c37b7942233e9332543121838f102a 8929 xdg-dbus-proxy_0.1.6-1+deb13u2_amd64-buildd.buildinfo
 ab3d712fc62e7ac401aef2d08242721544917f8161859d8e650fef8e147a7001 25640 xdg-dbus-proxy_0.1.6-1+deb13u2_amd64.deb
Files:
 44f116224d11c41a6fa29815bdd6b5d3 68432 debug optional xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_amd64.deb
 efb0b7a505c23557e6d9a9a79cac7ab7 22904 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_amd64.deb
 025ad8e0312a41cdc7ebf841e37319e8 13360 admin optional xdg-dbus-proxy-tests_0.1.6-1+deb13u2_amd64.deb
 36f1c48afb10a1baa047d6afdd0e3372 8929 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2_amd64-buildd.buildinfo
 e6eddc731433d3f9f66955e7dd39d59b 25640 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=301R
-----END PGP SIGNATURE-----