-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Aug 2026 13:43:30 +0100 Source: xdg-dbus-proxy Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym Architecture: armel Version: 0.1.6-1+deb13u2 Distribution: trixie-security Urgency: high Maintainer: armel Build Daemon (arm-ubc-06) Changed-By: Simon McVittie Description: xdg-dbus-proxy - filtering D-Bus proxy xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests Changes: xdg-dbus-proxy (0.1.6-1+deb13u2) trixie-security; urgency=high . * d/p/GHSA-r7hp-698j-2h6c/*.patch: Fix a vulnerability in access control for receiving broadcasts. In 0.1.6 and 0.1.7, a malicious or compromised Flatpak app could receive any broadcast D-Bus message on the session bus or the AT-SPI bus, leading to unintended information disclosure. * d/p/tests/*.patch: Add automated test coverage for message filtering Checksums-Sha1: 75c277d8fbf865106c75cd243f1f95acf4389f9f 66248 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_armel.deb 62363c0593b6912723ed00e87f47b78a439596e7 22456 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_armel.deb 465552a02f146abc4509646de1628da4d06c3535 12680 xdg-dbus-proxy-tests_0.1.6-1+deb13u2_armel.deb 55fa55badf4ec85e52b880b725215b0f7d50fa5c 8781 xdg-dbus-proxy_0.1.6-1+deb13u2_armel-buildd.buildinfo 7149591593742d658a81a1631340381bfb0531ed 22484 xdg-dbus-proxy_0.1.6-1+deb13u2_armel.deb Checksums-Sha256: c56a79077db5fbb3dcb0305c19336e9f5913f1b7b44b7b33b960a184ed6a3132 66248 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_armel.deb 71eafd427e9ca48bce3833755719419d95db031e8a7707272661bb9af29107e6 22456 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_armel.deb ce7f4179af1e70fbb37286cbf0f42bfdfba90de0c956c3008cfc519d3a29bc87 12680 xdg-dbus-proxy-tests_0.1.6-1+deb13u2_armel.deb 514b8c1cacc3e51eedc02779d25ac2c4b668fd44ca9a916f4935b100d8f1c4c9 8781 xdg-dbus-proxy_0.1.6-1+deb13u2_armel-buildd.buildinfo 038f75e856e1a58bd321cc2dec5c0a7ec70f4d80e893ccbe55bac4e97ce60964 22484 xdg-dbus-proxy_0.1.6-1+deb13u2_armel.deb Files: a297c1dcfbe4981bf97cf30e0cbb0224 66248 debug optional xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_armel.deb d09d9564016ff76ba722e0b2189627c4 22456 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_armel.deb ec9901c381c4f73d8b896ce827e6bc86 12680 admin optional xdg-dbus-proxy-tests_0.1.6-1+deb13u2_armel.deb ee1bb649339b7cd9c51a4949293ad8ea 8781 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2_armel-buildd.buildinfo 828c47e524c5a0f958d08016dbe12fc1 22484 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBOUsBrtd5lcy6oRfutMAkCxKbL0FAmp7P6IACgkQutMAkCxK bL1eHA//eVq/ZT3tUMEuGLvqjCfJgwcqnWcq4cS/8R8pvdD02BdI7A/EwuaORQZV 0Txc2/5E4E8uOHUisUjHY4f5vB6Deg4t0873DMa9jNEe/WHiOKEfOVhJNoANp5sI Dyi8YeNWgc7BjfOeRPvShjL222R1VW0XD2i+lFMAhvvUsc2wsj6MtHd6FlXNAkt2 YjkOBZ0nFMzh0xYH/bySF+uDaVmlv4wiFeU8XyN360ExYb0cBhH0QYVHmg1D+KA8 avNj8SXxpfXXYahKrZsBR78l85dij5Glwj4LDxsH1/qwj/6cJCES0vmGajCOjbP/ B23uBFhgzO349/AOMU0IvMxBdJ3dIAswFXMb/VOFKTJfp7U8u3hMgYM05xpV+oCe 92wiXq8Sh+qO1fgeAXoDfT+lbfCUvR+UHjpKVVyP68CESHhASNYQYMTrMwOplbrP BLMqVUHExlyfh1uKv6GokHZn8eKHLTKAJNh4DWYrkBWJv0RBXycXp7TsxBT8ByXj aRInibI2Juc4c62xx/RQA4NI63aDcuzgB/S1ocyjRsR/wj4rWcl4otMzI42OQKK3 cJS+bdvpnJVkTpHh0awIiTV9S7EfUfn9CvIl7gPJVDdSVpCkSwT43IcVaR4Ztcki QglunnRdSz0bO+mhJLZM8OF3YngujGX4llCuFtJols0Kl0c/WAE= =QX1o -----END PGP SIGNATURE-----