-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 06 Jul 2026 03:44:17 +0200 Source: dpkg Architecture: source Version: 1.20.14 Distribution: bullseye-security Urgency: medium Maintainer: Dpkg Developers <debian-dpkg@lists.debian.org> Changed-By: Guillem Jover <guillem@debian.org> Closes: 1061404 1065575 1107971 1108192 Changes: dpkg (1.20.14) bullseye-security; urgency=medium . [ Guillem Jover ] * libdpkg: Handle tar long GNU names and links not being NUL terminated. Closes: #1061404 * libdpkg: Do not segfault when adding triggers in no-act mode. Closes: #1108192 * dpkg-deb: Fix cleanup for control member with restricted directories. Reported by zhutyra on HackerOne. Fixes CVE-2025-6297. * Perl modules: - Dpkg::BuildDriver::DebianRules: Fix uninitialized Perl variables. Closes: #1107971 - Dpkg::BuildDriver::DebianRules: Fix R³ dpkg/target/<target> values handling. * Localization: - Fix typos in Swedish man pages translations. Closes: #1065575 Checksums-Sha1: 1a1bcc3f073814046c26f76e9ae31576d08d1382 2153 dpkg_1.20.14.dsc fa52af9e7ccb483314353f5c37b60653eb005566 5012820 dpkg_1.20.14.tar.xz Checksums-Sha256: bcb06af48e098073827aabc02bf44a3ac4437c656328d8401806ef41375d0d40 2153 dpkg_1.20.14.dsc df5ae60b17c85e43e71dbfdb9de2530bb30772e5c0220bd6ba830b4d7380df5d 5012820 dpkg_1.20.14.tar.xz Files: 1775e7a29a0af638a270b1c2e3c5d50c 2153 admin required dpkg_1.20.14.dsc 26016354ed373aef66d70fab0412b051 5012820 admin required dpkg_1.20.14.tar.xz -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEE0Kl7ndbut+9n4bYs5yXoeRRgAhYFAmpN0xsTHGFybmF1ZHJA ZGViaWFuLm9yZwAKCRDnJeh5FGACFpgGEACCBXMtWw48/PLlTS2eRXt9eiM462n3 oQSspxm0zt7H0w+ezrnPGOFZJO3oSrtX4omfWWXpEiJaHNTaIFKPGTiMsuv2DbJ8 AWQ3jv238lc9HCGSCCJQYqkX+MlEiohvs6O9w5dgMSoRV1JycY+KhjMPujy0QD5I ZiPAr5owvbfaM3bErwKqJWGVUwmM8wz1tBaRZdpNYlMdcObXQX98LGRIjqFhdApL 72VreAl3SvY/f5IonnmO3nP5+ga1J2CweXqeqDnaYvi8HgH8AoPlx4iuSFusju/t 09g17UUTMy8jD1ssD27gqSkah2YjvIf0uFkSNcyGMFEkE4TXqYCVct0J3bfczS/e FPbw+spVd5BEdrWK/Xuj8l3mWo7nnO2EfhKKIxEBU6O6Sel5DiEX4t0HRPfPVF0F 1m233iXazPa/e3XzHMQ3RCN8c3H8Jbs10exkjlTqYp3oB1wXeeRJS2wRTXcT7WnN PhdV4PiTHqvnRukRy0MZ0OuM0pWH4fkAm+DE1aMrRRy/liImJYvJNihials2Gxun IBp2tOF3vuwsowgt/6gOrz6fAWZYo9O7QkrQe7JB5ySwLHqKSQyMojurG0OkwGVo dflhFgWYlU3Bvh1f8373xlfo1qFIvcZWGCCFci4j9HH6VyWXrM4a27/ogckiSG3L +tWMNJ3J1EKk7Q== =MtuY -----END PGP SIGNATURE-----
