-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 23 Sep 2026 13:16:29 +0100
Source: xdg-dbus-proxy
Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym
Architecture: s390x
Version: 0.1.6-1+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 xdg-dbus-proxy - filtering D-Bus proxy
 xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests
Closes: 1148782
Changes:
 xdg-dbus-proxy (0.1.6-1+deb13u3) trixie-security; urgency=high
 .
   * d/p/CVE-2026-94422/*.patch:
     Apply patches from upstream release 0.1.9 to fix message filtering
     bypass vulnerabilities.
     A malicious or compromised Flatpak app could use these vulnerabilities
     to escape the sandbox and execute arbitrary code on the host.
     (CVE-2026-94422, GHSA-2cgv-pwcq-wvpq, Closes: #1148782)
   * Mention CVE-2026-93676, #1144129 in previous changelog entry
Checksums-Sha1:
 0349e06573a0fad11c3f515b73891b85581f5c90 69160 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u3_s390x.deb
 b09a8e67f48635db3f95caae031970b3d58c6ea7 26188 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u3_s390x.deb
 d10f34251326a4c0da4597f9c9bfacdfa9c9c1f8 14360 xdg-dbus-proxy-tests_0.1.6-1+deb13u3_s390x.deb
 dba695539936364dffafe60f9fd2a830e432e818 8846 xdg-dbus-proxy_0.1.6-1+deb13u3_s390x-buildd.buildinfo
 69ca004bedfa6b82095d985e781fb4b913845425 24980 xdg-dbus-proxy_0.1.6-1+deb13u3_s390x.deb
Checksums-Sha256:
 6b8616db2b6fdf381743d144b418aa2349b7c3de78321638f3c96076bce5fe3d 69160 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u3_s390x.deb
 9b0cb4c28752a88fe1aed14bc9797bf04db600f69066854e2200eb6284eaa8c8 26188 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u3_s390x.deb
 850b4976b07807bc135f1de467ec58f4b12bd747bc270dde9bf6074929dcaf88 14360 xdg-dbus-proxy-tests_0.1.6-1+deb13u3_s390x.deb
 c772b1a777c841699e6a521795234624ca52e7c567f14d2085d0562e126fc637 8846 xdg-dbus-proxy_0.1.6-1+deb13u3_s390x-buildd.buildinfo
 eb396c593376c4c33959414df4b17079be7024f26b56534a6138f6819325b260 24980 xdg-dbus-proxy_0.1.6-1+deb13u3_s390x.deb
Files:
 8a54fe1c37de237293181a0d5d9b90e5 69160 debug optional xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u3_s390x.deb
 4bbee4ea99f368c0c10cd7900a4f9774 26188 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u3_s390x.deb
 1b08ced364d34a8e1bec6791515a301b 14360 admin optional xdg-dbus-proxy-tests_0.1.6-1+deb13u3_s390x.deb
 271aa31a5b436cfa0cc2ad6963a68911 8846 admin optional xdg-dbus-proxy_0.1.6-1+deb13u3_s390x-buildd.buildinfo
 703cb34cf5f45b883ad75ecefa271a65 24980 admin optional xdg-dbus-proxy_0.1.6-1+deb13u3_s390x.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmqz7X0ACgkQMWUFebkH
noSurBAAj7liUmiF4oNX7BrNhsitySaxRJ8Q0AT4Mgx7/dOzNwfEFni8fGJM9SM4
tpZUu2BhvoO4r2V/ZIP2UhLkq72sEJdBiCh9fvzi3p0t7VEGBv9MK+oPwQH/eYra
ew0jIQm36NBRBP0jQ+g6TLlBstw8EpUL+oDoC5UaupHqOaOMdgDw9khko5MS8MiY
zVe/QfPfFaLdcZbgJ6ARvM0ZwnIhIAVzcUsHGVUmbwhUGHXRKGcc0Rd1prOyTLEu
gvWdAOoXjy8qS5l4VfItcTPm6Zi7dxuCxmli+3z93RMywZNyFAZaD3SCGzW1H83B
bnRKhaAxlt4BGIIaxKfzBfF9UNWRG/tJ1oVAqRqd0+8qpt7mW47x85fvMWmOwH9h
vq6l1dU8QwsNTGsveM7fgXs55G87iWkmFMtbNk08/6G/zNVYl/HPu13bp3RniNWT
rDr8m618Z2bDB22prxWG09XewN+L9JJLh7j8nY4sE3VCVFWzhbEz0aqUyEFDhDsu
WO0BwxNZ7wD/4dulHSACh/NB5C9PYh4BgCrrztVqUxBWb0IflBXFcsNbAKQ+ScbC
coNpRGXpcz9tWETEaG4PmsbUp3mFD2amTH3kR0ySQqlFF5w0ZWOwArdFR8QzlsK7
MmVzyoHR0TGwVT/0xCvUCW4Kc5b41cqV2EDsOsx3L1luRigQHhc=
=Dfnq
-----END PGP SIGNATURE-----