-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 16 Jun 2026 22:06:36 +0200 Source: packagekit Architecture: source Version: 1.3.6-1 Distribution: unstable Urgency: medium Maintainer: Matthias Klumpp <mak@debian.org> Changed-By: Matthias Klumpp <mak@debian.org> Closes: 1138711 Changes: packagekit (1.3.6-1) unstable; urgency=medium . * New upstream version: 1.3.6 - Resolves an information leak by not following socket symlinks (Closes: #1138711, CVE-2026-10294) Checksums-Sha1: ad5437ff71a1dd377558b3791705d8bfb830cc87 3215 packagekit_1.3.6-1.dsc c0f13d642d36c344d18c82a05c279750f1cacd1a 2981140 packagekit_1.3.6.orig.tar.xz 9865e246fbd12410c6189c6e80b30e9ebe44518a 833 packagekit_1.3.6.orig.tar.xz.asc 5f2ac8e32c244c6558543b2546742fd89b629d5e 25832 packagekit_1.3.6-1.debian.tar.xz f825c491cdf488682950ce9496ccd3d78a2fb1c4 19326 packagekit_1.3.6-1_source.buildinfo Checksums-Sha256: 3d71676f5c69355fec84280bb1b4e6661f9bd80bf41ccad3a236174117d2afd3 3215 packagekit_1.3.6-1.dsc a3458173efd3c3d0e2d049b95be26300f37c96219314164da2bd6778546a3d51 2981140 packagekit_1.3.6.orig.tar.xz 79ef06c3cc59dff2d104c8ddd8da591d1a1a6837b88318b46442f485eea59cb6 833 packagekit_1.3.6.orig.tar.xz.asc 571230ceb8ed2b76cfd05a3f29db5f42b046839cd42a5b55a4cfa975db6a9409 25832 packagekit_1.3.6-1.debian.tar.xz 5601d04c19d8be903ff48497ac660c080d43d06e10f59292f7042c75377d8bb5 19326 packagekit_1.3.6-1_source.buildinfo Files: 69f8c06589fe9277923733d0944ec2e6 3215 admin optional packagekit_1.3.6-1.dsc 232ce76a1c3b9aef9bc25142183791e4 2981140 admin optional packagekit_1.3.6.orig.tar.xz ce1ac227474b54569e92cf5f1beb7c56 833 admin optional packagekit_1.3.6.orig.tar.xz.asc 6a393c035dbd32aea9df14a426f10d93 25832 admin optional packagekit_1.3.6-1.debian.tar.xz e49c3ef1c0b447d07b1c535611f0105f 19326 admin optional packagekit_1.3.6-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJDBAEBCgAtFiEE0zo/DKFrCsxRpgc4SUyKX79N7OsFAmoxsEsPHG1ha0BkZWJp YW4ub3JnAAoJEElMil+/TezrcREQAItQQ+rx5pftZdigPnJ9xInmO5HZwfw1FxwP 5vzYAqfRJBZZfum5QveKB8ySZvtDuD7fQmIliHsCmXcDF96IAW3WI8Ez/7ZUDLRH AQLfpGHfVeEQwRzmUnH5458DqLwRugYxH8k2FNohhnJ8M9+lST/t6nv480X2qgYm KBc8YB0lTtws0ejDoEObG/EZei0Wax+mZoXNxB+MEgVWss1wAVYpIa0tILIkOegY jCi3l9L9++p3dLg8n4r3uNTArL5wiuAE1cApzZEA+nFFcsUGtbfqDQkGA7unoPo8 t/fF8s8J+ndxwNTi8ZhGzXcO77eQs90wP9MxXgo8EU2md5a5ZDfirLlU/RewGCAo ZNtR3h2LL7/4CoaYCIbOjFiUFHJdIF0uAk99JWIB2NLbGyA+RPUkFOp9bNMY5a/+ s4xjhB++2wuS5exsvYzSfTyknmq1PeCke5LdhzDZhCQahJx3Islz0VJACgu5hoIJ wUmTFMR/HSmlf0tgpEdKGk7Dw7K8FCUIewU2cuTk8YW7718YhOollwQKxIpt0Coy UdD81ZQXM7/RFMx1lxyFyYqtL0KHD/2Fi9tHSGXHpsT8OPYd23atVloBINLpNu9K jBeHCmYsZISg0QHMKxC2pAsRKquNBOn/RbtoIKxsRFpUZYs7FOthaw3dMvWQ6J74 S7nFDnge =uOIa -----END PGP SIGNATURE-----