-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 23 Sep 2026 13:16:29 +0100
Source: xdg-dbus-proxy
Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym
Architecture: armel
Version: 0.1.6-1+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 xdg-dbus-proxy - filtering D-Bus proxy
 xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests
Closes: 1148782
Changes:
 xdg-dbus-proxy (0.1.6-1+deb13u3) trixie-security; urgency=high
 .
   * d/p/CVE-2026-94422/*.patch:
     Apply patches from upstream release 0.1.9 to fix message filtering
     bypass vulnerabilities.
     A malicious or compromised Flatpak app could use these vulnerabilities
     to escape the sandbox and execute arbitrary code on the host.
     (CVE-2026-94422, GHSA-2cgv-pwcq-wvpq, Closes: #1148782)
   * Mention CVE-2026-93676, #1144129 in previous changelog entry
Checksums-Sha1:
 7a30dedfa75c1d4cd5c657711b86de45b4c25b67 69096 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u3_armel.deb
 4fa369f9d4cfcbab2e0bf309c6f4ca90a0f445ca 25720 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u3_armel.deb
 8488b0ddedc0a92c03e14843539632d752f0713b 14592 xdg-dbus-proxy-tests_0.1.6-1+deb13u3_armel.deb
 4289933eb7cccf4cb4b4a86239d605898dad05e0 8836 xdg-dbus-proxy_0.1.6-1+deb13u3_armel-buildd.buildinfo
 fd7453d49b339d90be6c07e6125d9ad20764f1cb 22972 xdg-dbus-proxy_0.1.6-1+deb13u3_armel.deb
Checksums-Sha256:
 cd88cabf539a19322847bddd17e02b1042bf2df9adf83e485adfa3c1d115c6d4 69096 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u3_armel.deb
 cd96bd6d668db73d5b448edf1b2e254c16251fc832c2db2a35a0adf4cdc82e37 25720 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u3_armel.deb
 dae48201c1c3d3cef1cba9a99282e72c382b3803932310881981156dfb4da536 14592 xdg-dbus-proxy-tests_0.1.6-1+deb13u3_armel.deb
 3710d3d0b5cb82dcca982621480f0be7ff3283ed5c240620250ec8c727148130 8836 xdg-dbus-proxy_0.1.6-1+deb13u3_armel-buildd.buildinfo
 e6a29da310a7570ea4dfb43dc62de3d96b59f7451519230126f1d4f330fe41b0 22972 xdg-dbus-proxy_0.1.6-1+deb13u3_armel.deb
Files:
 ff7fb327325ec8c19b5a00a7107931c3 69096 debug optional xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u3_armel.deb
 e486a0811fd3c615348d226e0a985ea7 25720 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u3_armel.deb
 3f0b566fb4b98c0854f8aebd62956b67 14592 admin optional xdg-dbus-proxy-tests_0.1.6-1+deb13u3_armel.deb
 4e2c4bea96aee7d15f45381af09e6097 8836 admin optional xdg-dbus-proxy_0.1.6-1+deb13u3_armel-buildd.buildinfo
 89096265aec3577272ec3b6fbbb63063 22972 admin optional xdg-dbus-proxy_0.1.6-1+deb13u3_armel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEgSZRd/+N1Ed3hy+mPMAxAOQQpzsFAmqz7ZYACgkQPMAxAOQQ
pzutQg/+PNvyFGn2RVRvxgmNM44dHweuBSLyV0xrswnD10PbKrSSA6xL/pcLm7xj
T84Cv8sFhz6fNKX7v6IsDbkExZS09sOky6olWQNlQ0A7FkukDSiCqJxo6tYP+9Dz
pu8dS0rf1sPOxs2wP+Wd7qtz+ei7E1IqqKPyzIAF9cZMsAG9WGodOvUvzI24Sul+
hppHmtzgxL1ILQ3k3V1fDqnlJxLSoKJ/u0ewTrDKDS0HppNXR3an6OouYbSBEoX3
uJ1wXd7q1bPWi3THPP6qBUEDApsf65qUIJNN06MH0DoYJgWb4R1TvX/MgLyrulfs
CzUWtNjcxa1x1EUYYEnnp+5Am4BiiRG/+onK/sK5aOdAt77Mr6KFHIVl70Chjig8
tZz2zzNnpQ9+P4ojutWTyPHyUNEvuMxHrbIquE6Ua5wbnPEaI4VUNJhETs3zONB+
drH2h1jvAztjFDfSM4smScqxBqPO9EY/Tl57UeY3opD5ZW6zae/+IIPWd1+Swsax
z7eyrt2A/9cMXuIs2IXIU848uBm+9G7T1p42K99qq72TXdA9HWs4zd+Wz3LSCn59
7bVI3HS95m2qZN/9geiV2UIS4FepZKEE5Hk6XK55hEeOKthpw+DPB10bWypYgg1P
iqH2f/udsGtUoM/FNx/gslQlIkE66HAAoVh8mm64guoJtYqcIqo=
=Uxcc
-----END PGP SIGNATURE-----