-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 14 Aug 2024 09:43:11 +0100 Source: bubblewrap Architecture: source Version: 0.10.0-1 Distribution: unstable Urgency: high Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Changes: bubblewrap (0.10.0-1) unstable; urgency=high . * New upstream release - This version adds the --[ro-]bind-fd option, which is necessary to resolve CVE-2024-42472 in Flatpak without introducing a potentially exploitable race condition. Checksums-Sha1: 78db591fe2db24af8acd4f1e1986ea727d295c80 2579 bubblewrap_0.10.0-1.dsc 24e59d07cdaf92d9d30d35a4c7a398fa39422ac9 119328 bubblewrap_0.10.0.orig.tar.xz 94094ed5a81150bab18d19af5ba14c771df6959b 833 bubblewrap_0.10.0.orig.tar.xz.asc 550b90cf090269a194ce62c773b7c162661af7dd 12800 bubblewrap_0.10.0-1.debian.tar.xz b5499fa34798d5265baadb16fcb42f84ff96d013 6913 bubblewrap_0.10.0-1_source.buildinfo Checksums-Sha256: 8f96ab4334a4ea89bff1ea37bc3d54335437269f94b8df28a4ac5d264190b4fd 2579 bubblewrap_0.10.0-1.dsc 65d92cf44a63a51e1b7771f70c05013dce5bd6b0b2841c4b4be54b0c45565471 119328 bubblewrap_0.10.0.orig.tar.xz f709d65d7ca83e8bc01839375fd951d214f5547b99cc3a00693103a707aa6cdd 833 bubblewrap_0.10.0.orig.tar.xz.asc 127ad3b97f2ce97de2949fe6380d9105c6f497179c4be9b98d5403c218b1da7b 12800 bubblewrap_0.10.0-1.debian.tar.xz c958b1334278e93444034ef0d1a60233a1f769d20e01e829a6771335e7706a2b 6913 bubblewrap_0.10.0-1_source.buildinfo Files: 132fe01523b1c8bf0754c82993575c06 2579 admin optional bubblewrap_0.10.0-1.dsc 85f144f6c2c28c112abbcf98bedf6137 119328 admin optional bubblewrap_0.10.0.orig.tar.xz e000671ac8cb975cd833aa33ea393f8d 833 admin optional bubblewrap_0.10.0.orig.tar.xz.asc 6352d456f40d3f90d9c91f72e4e23070 12800 admin optional bubblewrap_0.10.0-1.debian.tar.xz 1ce9b9e9b0c44b758a6dfe3b1f47e615 6913 admin optional bubblewrap_0.10.0-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAma80tUACgkQ4FrhR4+B TE9LEhAAqptOJcNxuEerVZttp7t5arPqDUHTsEIdP0mViKg1ar2eAiLk1niKGs5h dODdKjXFtERVsnfD3Kg+/lj9KhNCm16HYARMNbL5U8Cp/ekJ4jo3kvyhFwIox8+z XvSxqgf+WVSFT1/5Drvig+LW+idQcESr/zQysEd0NWovmJnrcipSwbLO8lB6jcH3 0elSnjYkP54W0ByKnGi5xajWXbyWdKYADFmrvyn0YMZOfazP9ErYDOXDOA4vkcXE 2Ru7JJVcQo1J7U4bAT1n91tFTh3OeEfVGq1Gmv6aqAghKw7zeXmYVkbeQS+VAbPG Eu1deThZ1n+bQ0MooP6cZJ+n3iuSVQ1rTLCPv0PJfSq5+kO9hUuusNsp/X2+g/TJ GpEXVONO414Kjqe2jSCHbzDomrLl8sRWcs4BQ6BQ5Hg+WyxlxSEllfnq/2v+AbHp saBnkA8slwc6k7yw8FQR8q1Nnp+403V07U8G2PCGs3/JxA8KrXWxJrywrlgnKPEi imNRUB/MVNGAXAUk32rOsUd/iiZu819foPaDpozxtLtqNKeEH9V9LZBeh8tQ7Gmu qUSIcBaxjIgBTmP3wWu+gT/eUGjqdsvxeJSdFcZg88QJxhJq3hcL4d68PN0sU+kX N29ucgWnsgeZAphiw+OGvdKsv/VK+fXPoxnPHgQOuhYkppYHt/s= =U679 -----END PGP SIGNATURE-----