-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 27 May 2026 18:18:12 +0300
Source: crun
Architecture: source
Version: 1.28-1
Distribution: unstable
Urgency: medium
Maintainer: Faidon Liambotis <paravoid@debian.org>
Changed-By: Faidon Liambotis <paravoid@debian.org>
Changes:
crun (1.28-1) unstable; urgency=medium
.
* New upstream release.
- Addresses CVE-2026-47766: do not follow rootfs /dev symlinks.
- Drop patch use-system-blake3, fixed upstream.
- Replace YAJL with json-c.
* Drop autoconf and libtool auxiliary files from debian/copyright. It adds
too much noise and is standard practice to not document these files in
every package.
Checksums-Sha1:
b21f0683cb760f2515a69e0518c15371593b5b41 2341 crun_1.28-1.dsc
506075a2ab8bcdab95e0b1ab08e32a906d73cbc8 1585077 crun_1.28.orig.tar.gz
6ebd4de96e2c0010c8fe2809c914243b489696b4 488 crun_1.28.orig.tar.gz.asc
7858097e071944491635f32c3e6672940309b54f 18660 crun_1.28-1.debian.tar.xz
37663555d8f9f24d2ef12844cf7ca1d8e6542e58 7367 crun_1.28-1_amd64.buildinfo
Checksums-Sha256:
a66a87857925869fe82de75d9c0948229b34f247ebb7e315faac2c525a04de3b 2341 crun_1.28-1.dsc
eb8fe73ffe44d868b14bb94fa6c295bd57e8bf023de43b61579da826c07cc406 1585077 crun_1.28.orig.tar.gz
d2a42cf63cd71d645aa714f52afb389aa462b860917b8ab866e2c9e22aa7f53a 488 crun_1.28.orig.tar.gz.asc
a2ffc0d994843f288a67510d9cf93c3661352e64d8325f92210b240f017391ea 18660 crun_1.28-1.debian.tar.xz
13ffa4e7838fd06250e147d876b956e523655865ba571877553c8df1b234adb7 7367 crun_1.28-1_amd64.buildinfo
Files:
1ede251a64fa4e1b8190605dcc2d8c74 2341 admin optional crun_1.28-1.dsc
7fe44a161448e986da13648a3d625d67 1585077 admin optional crun_1.28.orig.tar.gz
fbfcc2dc27b26186a867d72bbc32b73f 488 admin optional crun_1.28.orig.tar.gz.asc
ea41d7944e5b6ae369e9dfefe567b177 18660 admin optional crun_1.28-1.debian.tar.xz
2ded9cde5ffb0b181cbc8454cb9e434c 7367 admin optional crun_1.28-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=FDln
-----END PGP SIGNATURE-----
