-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 31 Jul 2026 17:34:36 +0200 Source: util-linux Architecture: source Version: 2.41.5-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Chris Hofstaedtler <zeha@debian.org> Changed-By: Chris Hofstaedtler <zeha@debian.org> Closes: 1140194 1140195 1140196 Changes: util-linux (2.41.5-0+deb13u1) trixie-security; urgency=medium . * New upstream version 2.41.5, fixing CVE-2026-53612, CVE-2026-53613, CVE-2026-53614. (Closes: #1140194, #1140195, #1140196) * Drop patches from upstream which came from the stable release branch. * Pick upstream patch from stable release branch: loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file Fixes CVE-2026-27456. * Pick upstream patch: libmount: restrict source path canonicalization for non-root users * Avoid installing new bash-completions. * d/gbp.conf: setup for trixie. Checksums-Sha1: af0f23320ed30c50ca540273f6f659b152be2c6f 4988 util-linux_2.41.5-0+deb13u1.dsc aad638b4dea74be6227238f5e6398a8f54daefb4 9474992 util-linux_2.41.5.orig.tar.xz 44d5f01ef357eca57a89f86125392fed89a8b14b 107604 util-linux_2.41.5-0+deb13u1.debian.tar.xz e1a4a4babe3a090556795e6cda72f4bfef1fa142 23830 util-linux_2.41.5-0+deb13u1_arm64.buildinfo Checksums-Sha256: 43e9b2cbebd10fdc598c4ad10217c8202c28de53af6eafc892c8e9b5cbf3a3a5 4988 util-linux_2.41.5-0+deb13u1.dsc f586e35d320ff537aab3ffeca37e9ecd482ccbe013590db4429a414d8aa6a728 9474992 util-linux_2.41.5.orig.tar.xz 5b327ccd22f0f4ed28a389870aa51d04ecedb8693e52a1d122850f2b3188cbf6 107604 util-linux_2.41.5-0+deb13u1.debian.tar.xz 35b9929ffddd91485990543ea3ad8e5956f49774dc426b706bd3b8259a5fce8d 23830 util-linux_2.41.5-0+deb13u1_arm64.buildinfo Files: e94323857b46a3767dc452496d2bd5c4 4988 utils required util-linux_2.41.5-0+deb13u1.dsc c21a3cb29f510f019ac3da929819ffbf 9474992 utils required util-linux_2.41.5.orig.tar.xz 5265eba63ec6002d90959e435dedbac7 107604 utils required util-linux_2.41.5-0+deb13u1.debian.tar.xz a8e6707e827e1f63009759e97060e840 23830 utils required util-linux_2.41.5-0+deb13u1_arm64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfRrP+tnggGycTNOSXBPW25MFLgMFAmpsxNMACgkQXBPW25MF LgPDTQ//WhQ4Livwek5ms+NNkgVc7Xc/HV1lHa3p2hsMRZoa0ty43AOzKNvxCDb8 JCvSFFWMBoBloU5wGFGhhGe5VH7Wmy4dRz15tAx7z32ZKqSauyTya3norGIC8JPC vLnabArGm3SARvhydbWvBepLNG72pGUC2ibhy83O1RHSf10SDNVJKFAFIZLLDjGn f7iFupAq6IlUwDpq6HITvY4tIQpwKXYoU0LHKwPJCzz5MTgaCOh4PKglA9R1ye4t 3xrY1QR/Ai6IJ3+AdxW+qteIMUrYfu9BuZGKcmknNcy3laooVNy7mTXE5xvNhvpq eweqX1K1/GE875kGyblJ+hFI6kyiPLSJCr7oTpN+fz+kVUvIONz/p6Y+B2hwWXl0 zVxlRG85xhQEbdJkzVgs09wCioiCWIBz3Jjr0OtDWy1bUXHJJ+BV6KgX+U0u69nQ Oh7ivPLs8sqwH3K8ecJe0uP66Q+wYOj0IOsaVgx96ruSmG9ZvXkzkHXiF2SEirx5 gmUz0H+WzyKPXqE6YeH2hPyay/EeurRXPQ+hVJTe6kHyL7d+Fb9B5pgprCOqvw7p Lg03sz5hkzlj6jysQedlBNXvw1Ig2x3MbqjrjLQzAd0/DXD5AOuraPCn+D+wMRPb GQf0Q7ijJ/0VjcDwYpbT3djzJ6DZDM2FKKQ569yWhk4uaKFMYG8= =MgIi -----END PGP SIGNATURE-----
