-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Aug 2026 13:32:52 +0100 Source: xdg-dbus-proxy Architecture: source Version: 0.1.8-1 Distribution: unstable Urgency: high Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1144129 Changes: xdg-dbus-proxy (0.1.8-1) unstable; urgency=high . * New upstream release - Fix a vulnerability in access control for receiving broadcasts. In 0.1.6 and 0.1.7, a malicious or compromised Flatpak app could receive any broadcast D-Bus message on the session bus or the AT-SPI bus, leading to unintended information disclosure. (GHSA-r7hp-698j-2h6c, Closes: #1144129) * Mention #1132939 in previous changelog entry Checksums-Sha1: d6799fbaa9f8a0a30d8840b19e1491b091cf41f9 2489 xdg-dbus-proxy_0.1.8-1.dsc af6ea4ef33583b518cb2945bc6d51c3d59226077 45932 xdg-dbus-proxy_0.1.8.orig.tar.xz 254da82c0ab966757adea2fac3a51d55ded73422 4416 xdg-dbus-proxy_0.1.8-1.debian.tar.xz 0cd1f3c9799f1b63f428e61111134448150524da 110888 xdg-dbus-proxy_0.1.8-1.git.tar.xz ffa7d4bc5b15d48c402f777c78241dd6305f736e 17580 xdg-dbus-proxy_0.1.8-1_source.buildinfo Checksums-Sha256: 6608f6d6ce803a431707a9f62bdc9be22fba6d7acc23425ea7f50e1dda8b2bc2 2489 xdg-dbus-proxy_0.1.8-1.dsc b6630bd24f8161b0e2546d2acbb014a3b3249f5c0d75f2a863ade898b9034d3d 45932 xdg-dbus-proxy_0.1.8.orig.tar.xz 75a01f0fdd2b358e48ed313ab5362c52ca1bb49805fa07a95437c5be26f86154 4416 xdg-dbus-proxy_0.1.8-1.debian.tar.xz dfefbbd1a17925bc3cbacbf0fd4e165948116385ca0a056ae6490f3f020d38ba 110888 xdg-dbus-proxy_0.1.8-1.git.tar.xz d027f7fc496dedef3a849972b761fe4a20ed19c005dc870b7a38129974168a77 17580 xdg-dbus-proxy_0.1.8-1_source.buildinfo Files: 1558ae5bb8cf285df6c84309279b6d46 2489 admin optional xdg-dbus-proxy_0.1.8-1.dsc 1a7b7a5f82653163495e82f7c9da7a36 45932 admin optional xdg-dbus-proxy_0.1.8.orig.tar.xz 5b8bd9111953349bcc12c8db306e90a4 4416 admin optional xdg-dbus-proxy_0.1.8-1.debian.tar.xz 8ea414b5d1871ba6decd64534c28f7aa 110888 admin optional xdg-dbus-proxy_0.1.8-1.git.tar.xz a97d8cafc5a31168b8636dfd3133d706 17580 admin optional xdg-dbus-proxy_0.1.8-1_source.buildinfo Git-Tag-Info: tag=0940799236ea1e098f48ebb170cdc3a8acd3ee91 fp=7a073ad1ae694fa25bff62e5235c099d3eb33076 Git-Tag-Tagger: Simon McVittie <smcv@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmp7HKoACgkQYG0ITkaD wHlEYg/6AjpleeeS9c20sQVqqODhmJfIJ3QhESKjopUc3rNo+5cWvcc41Tq7SiJb wB1jKmd18PkkY5Rsm3yMJkah5cAntBIHOelITsVBcTuS8IzxoG9ofY/0bFt4CqP7 9GQ3lHHTcJDv0mQlpGvuvrr1nJcD48HMUV9iue8VEjU44zuL6LGHBhTr7pEmg6+e bdt9aigB3yHlzSzhpltuJQUzjC5Mk8qNRFnlL5czUHmhwvCCCth4+pAyINlmXfVs eyP0dPEVywKKn0F73EUZdyiD2AhFuyoJ6rVaRG+jFSYjwR010UX3I7fhR36l3U2G yGIavum/90Bm6MFgnprb9ikzFfwRSJISduV1WNDT5GsNduxsx3yLsRJ9xU8CRasz x5Xw4YDAGVlBvNVVd2GolSfmwnYrJ/TyjwRJZJNt6vFcBYU7b1kA+JdiXUYYnU6d fymmapcG99lc72oro2frsoIyG0hbT4CpHFpJqdbOEzvVYzLXrh9HnS/7zKksAVKb YkWQ/c9sDDdvolzPrc0yfvItZV08Ru6P/St7qR+cKBW9ypoV2WBt5oQGvajVAfdm 833GMRNWG/jM2TMiuSjM96Z8SUGFDeNg77deLrwKSbaKdzGhKfKLnisvm82aFRnJ od37GRoWaDfKEeXQ1+TOoK/si4/2tGZePU4h7nS8DGDAFYysNRs= =//Jl -----END PGP SIGNATURE-----
