-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 29 Jun 2026 23:53:15 +0200 Source: acl Architecture: source Version: 2.4.0-1 Distribution: unstable Urgency: medium Maintainer: Guillem Jover <guillem@debian.org> Changed-By: Guillem Jover <guillem@debian.org> Closes: 1141110 Changes: acl (2.4.0-1) unstable; urgency=medium . * New upstream release. - Refresh local patches. - Remove upstream patches included in this release. - Update upstream OpenPGP signing certificates. - Update symbols file for new upstream release. - Fix symlink traversal vulnerability [CVE-2026-54369]. - Fix time-of-check to time-of-use (TOCTOU) race condition vulnerability [CVE-2026-54370]. Closes: #1141110 * Remove build dependency on debhelper (>= 13.10) implied by debhelper-compat (= 13) since Debian bookworm. * Remove build dependencies on automake, autoconf and libtool implied by debhelper-compat (>= 10) since Debian stretch. * Switch to Standards-Version 4.7.4 (no changes needed). * Refactor common synopsis into a source stanza Description field. * Switch debian/watch URL to use the one not affected by mirroring, as that has delays of up to a day. Checksums-Sha1: 1f33524e3b5a3204d856b50dfea0c5259f8f5d7e 2624 acl_2.4.0-1.dsc 194272659d2cfad5180a4cf7eb9a4b3c28a6afe9 384828 acl_2.4.0.orig.tar.xz fef7b419cb2145cd7a38444e3a1d2af707547441 833 acl_2.4.0.orig.tar.xz.asc aefd347db668ae1231688034d1d5179d2a056d19 47932 acl_2.4.0-1.debian.tar.xz e8efae03b63549bcdb8d5829c837b19eb7ed008a 7194 acl_2.4.0-1_amd64.buildinfo Checksums-Sha256: b987ebbeb3d498794bad29cd65301b77384978493d8765c94dba8bad8fa325b6 2624 acl_2.4.0-1.dsc e661131456d2708a01c614a0f400e11d7d1bfaeb6f3e74b75bb980b72f0161a3 384828 acl_2.4.0.orig.tar.xz 5f4f0b9b78821764fe6b88e32aef6ec519628522c211c36706bcb78d6f3f036b 833 acl_2.4.0.orig.tar.xz.asc 65931c2fb3e821bda67f8d8d72d77e99ac61502748dcdf38b6805fe89339085e 47932 acl_2.4.0-1.debian.tar.xz 79d9fed2c06c422f5ac6d8196aaf41a6651ee12036d26de0fd1a20194f79067d 7194 acl_2.4.0-1_amd64.buildinfo Files: ca4b57f6628d7988b8136afbda546f9c 2624 utils optional acl_2.4.0-1.dsc e289f370161698a96f50b2a3fdadf411 384828 utils optional acl_2.4.0.orig.tar.xz 4960e8d2777b7fda213c732481fb2bbe 833 utils optional acl_2.4.0.orig.tar.xz.asc f612f0d0529429b83ad8ce48f2a774ab 47932 utils optional acl_2.4.0-1.debian.tar.xz 927da5e6be863de0b51d5c7357bfbd87 7194 utils optional acl_2.4.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- wsG7BAEBCgBvBYJqQun4CRC5cr8+pK5Xo0cUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmcx9r1BvhkEczGo41B023mWSQqnLtpgupyJQf5T051u vRYhBE8+dPQ2BQwQ9WlldLlyvz6krlejAABC1hAA3/PdyEXiseMkikzsATR9aoLJ NLXE7N1U4PW85kAfcFzyN5BpZi66mDLePFxRIOX7M7FVAAh8jrguEEYqe0w7lzOP sBaesnqIUfAz0yWnT20QMxwp439QacI98O83kJyaFtRWbIoDBA7rvt0nneZdysqF 88z1kpOL1e8B2Wy/wj/5G6GKXOi5VSdBx8yx/oWpSJfxM3Lg4tSkSLcMEfqGd9cx uEsyUyz+kiFYVXjsdm+3n9fkaE7VPvtLgI6qYzWnjNZBJAD+ch4xfD8aVRT+5ZTq xu+o86wffrC+qZ17PCK1IUVt/Bd0xIlAhO8she0BXacDsP2QMVci6FBeajC9IaEH lSb0ACF8nDU/KVe1HZ3ie9PXySxVcHyr4M3WAFPmSd/zW5GDDyn6qL1/5GGQYQOd Hmstz+RYYjiqHVS/BfbhedRZhZzH6+V32MuSKL8qYWFSQ2W6l94cBEoVnujeTHF5 arPn5J+vyj40RlwuZkMuEd6xwwN49HU1p66dfTQmAK/HORWHbw/c7WckfL4CB/gE i+Bjs1gM9C/tVwWlxUlYpeUV0Wwx87m3vgks5VMG9x0OwTCMFeUq9p1vr8tE7/S7 T+Z2X1zwSZJr6PXpZFdGE5t6nz8iac9F6ub2bOAklegSxHcYQbvp+owpWgc00Axz yelEqaqfw7Ko+On/5F0= =uf26 -----END PGP SIGNATURE-----
