-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 19 Dec 2025 03:42:59 +0530 Source: usbmuxd Built-For-Profiles: noudeb Architecture: source Version: 1.1.1-2+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: gtkpod Maintainers <pkg-gtkpod-devel@alioth-lists.debian.net> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Changes: usbmuxd (1.1.1-2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the LTS team. * CVE-2025-66004: priv escalation via path traversal issue - debian/patches/CVE-2025-66004.patch: make sure to sanitize input for SavePairRecord command in src/conf.c. Checksums-Sha1: 2a28fe7fff7576c86b2ab148b2affe3d9de3b511 2206 usbmuxd_1.1.1-2+deb11u1.dsc 21f68d496c31e383ab3cfdfb9925e3771579d75f 61680 usbmuxd_1.1.1.orig.tar.gz c8c9d8ef33bfc8aaac493a0a5219a02a6b0bff17 6808 usbmuxd_1.1.1-2+deb11u1.debian.tar.xz 8d999b072e8384cdc2648a7aca74b027b414c45f 7756 usbmuxd_1.1.1-2+deb11u1_source.buildinfo Checksums-Sha256: a7ec1ee6891cb79d182313097ca57e144c5cbb5d6413f7f74c8c6331d9330e9f 2206 usbmuxd_1.1.1-2+deb11u1.dsc e7ce30143e69d77fc5aa6fb0cb5f0cfcdbeff47eb1ac7fd90ac259a90de9fadd 61680 usbmuxd_1.1.1.orig.tar.gz 2c7e09c27634b02766e95afa4b16ce81cf128af147dc265e26a4d32ef97dfe8f 6808 usbmuxd_1.1.1-2+deb11u1.debian.tar.xz 41bd79a2018b96eb138fff3315c7b43380502f1b60769c95cfadeddf669dec71 7756 usbmuxd_1.1.1-2+deb11u1_source.buildinfo Files: 9400ca92165906cb62eb6b7de29d73bf 2206 utils optional usbmuxd_1.1.1-2+deb11u1.dsc c83e97eb82287ff412211816c943bedc 61680 utils optional usbmuxd_1.1.1.orig.tar.gz 4542dfd77bfb203be9b79b2ef5e2c04d 6808 utils optional usbmuxd_1.1.1-2+deb11u1.debian.tar.xz 175a28fd23ecad938e4a121fa86a5a3f 7756 utils optional usbmuxd_1.1.1-2+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmlEfkMTHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLloqYD/9HTOxg+sYnAh/QL5leUlPCsOMFojEi 0A3fFQMzYw+vCY00K0k0AuqWoRjf0LbSOE8yzTpvVOKv5tlqqvJ2ENdkl19vo/Uc ovWqSV7XYh/tUP01mi7WUjg8rrzlSrrFt4Z51ADggG6ndwOTzU+6cgJSg6jA5Vqs IdH7zRdHKytvSe/pXAv92J8uCpMoG5dPEdfnZXWApKF6GCnLjjPw4fMpcBiovQy1 BvqqYkCC2GyH5jrRSc0HkyzBKr/kmTJAZS0VNN+avieFx5YQI/hKQUpVv1D3uqDv pjYXyvysJeEB8OjtvGVeLuZpd28doKBti4etNWm1Wy/6DI+l0+90cOn8GbBRYo4q XGwPUwBVeM4MvMxNivFqSPlY91C4tG3eAWgv082LQ+ythOLchojYim90p3ji4cCj Ejekar4nqE0pZYVT1j6HICCUCH0AhKHtlvc7Fq+Sc2yWDqiRLrEGmcyhnA7XZMz8 uK+1kOUnAwEP1XV1CoHBCgC4kzOyr/1bvP8eBpxr9MQNX4aUekycz9ti0w3yaygT qQgg1PwXnSX9ku4HttwNuP/7JU92XJZ4q/kOIsuZqJBclr0mTngaO0y8/Fu6ilAY +Pvrx47NJK6QI7sToAIS5tByr7yK+nLB0XdPf7Bxh8ym844HGlGpFKrsHl7a+Z/b b82fn47NNY7/ZA== =82jM -----END PGP SIGNATURE-----