-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 23 Sep 2026 13:16:29 +0100
Source: xdg-dbus-proxy
Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym
Architecture: ppc64el
Version: 0.1.6-1+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-conova-01) <buildd_ppc64el-ppc64el-conova-01@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 xdg-dbus-proxy - filtering D-Bus proxy
 xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests
Closes: 1148782
Changes:
 xdg-dbus-proxy (0.1.6-1+deb13u3) trixie-security; urgency=high
 .
   * d/p/CVE-2026-94422/*.patch:
     Apply patches from upstream release 0.1.9 to fix message filtering
     bypass vulnerabilities.
     A malicious or compromised Flatpak app could use these vulnerabilities
     to escape the sandbox and execute arbitrary code on the host.
     (CVE-2026-94422, GHSA-2cgv-pwcq-wvpq, Closes: #1148782)
   * Mention CVE-2026-93676, #1144129 in previous changelog entry
Checksums-Sha1:
 a851b1d3004fbb063dbeaa145b101d8a5ae028df 72788 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u3_ppc64el.deb
 b3a791cc052354f680fedd41f7585a8747623e19 27784 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u3_ppc64el.deb
 98d0e69841d3d779a2917d3cb0232eefaa6b3bd6 15304 xdg-dbus-proxy-tests_0.1.6-1+deb13u3_ppc64el.deb
 5099712133289393a88a9a7484c84f9b2532112e 8995 xdg-dbus-proxy_0.1.6-1+deb13u3_ppc64el-buildd.buildinfo
 c469e347f5b4f3136b3f3d64953d98fe04808119 28960 xdg-dbus-proxy_0.1.6-1+deb13u3_ppc64el.deb
Checksums-Sha256:
 9f5daf4966e5ebcbd90c7c83babdf7557ded5b64ed875e944aa9d88ef37f9a2d 72788 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u3_ppc64el.deb
 3844aa6daf67c092a43af67261c84db881c083fb48f3b79fd04290c7a0865cc3 27784 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u3_ppc64el.deb
 c7acd82d6aa03c01b74ab1fb10432bb5560df9d651cdd0005bc1191717b68565 15304 xdg-dbus-proxy-tests_0.1.6-1+deb13u3_ppc64el.deb
 47224e89d57b72c922161d5625b2ee8a71e3f5f691180477acbe476007f21fe3 8995 xdg-dbus-proxy_0.1.6-1+deb13u3_ppc64el-buildd.buildinfo
 8382872e7deb96345cd7783385df8ce90c9857448942576091b4d9b02676bb59 28960 xdg-dbus-proxy_0.1.6-1+deb13u3_ppc64el.deb
Files:
 fb149e4745a285725faafcd550488086 72788 debug optional xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u3_ppc64el.deb
 0a8c478bd36ebe64786425c49a138b94 27784 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u3_ppc64el.deb
 59ad70d9c13e88c4af07cec85e11a147 15304 admin optional xdg-dbus-proxy-tests_0.1.6-1+deb13u3_ppc64el.deb
 6820383492eff07d56e47b4dff1f9416 8995 admin optional xdg-dbus-proxy_0.1.6-1+deb13u3_ppc64el-buildd.buildinfo
 841e2bbe5741d7d2bd14321b0dc55ca5 28960 admin optional xdg-dbus-proxy_0.1.6-1+deb13u3_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=uJuw
-----END PGP SIGNATURE-----