-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 24 Sep 2026 06:44:56 +0200
Source: cockpit-files
Architecture: source
Version: 45-1
Distribution: unstable
Urgency: medium
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>
Changed-By: Martin Pitt <mpitt@debian.org>
Changes:
cockpit-files (45-1) unstable; urgency=medium
.
* New upstream security update:
- Fix arbitrary file ownership change with crafted symlink with "Paste as
owner" in privileged sessions [CVE-2026-91202]
- Fix symlink race in privilege mode when changing file permissions
[CVE-2026-91203] or creating directories [CVE-2026-91205]
Checksums-Sha1:
9bfb05e64094f2dbf1d74b1471e7357b12132e84 2258 cockpit-files_45-1.dsc
8b7c3b45c31050860b5923f3b8b117a1b9c3bcfb 38562152 cockpit-files_45.orig-node.tar.xz
df43e50f6e8e88407d1402c10e0279fadd594d7c 811800 cockpit-files_45.orig.tar.xz
7b2d3ecddaf3d2b729d017b62c50b81ab7295b44 6976 cockpit-files_45-1.debian.tar.xz
1e5feb7dc1a2cf6585138dc002fd08cb7b22154a 5152 cockpit-files_45-1_source.buildinfo
Checksums-Sha256:
8ae159af89c78473eb62e4a131ae93bd5e666fc7050a6e211722b3a89e4e8a32 2258 cockpit-files_45-1.dsc
050e9acf1844695345603e4c1bdabf422eb6371aeea15c3f4561653ddc92f429 38562152 cockpit-files_45.orig-node.tar.xz
cb4a7746b240148716e18d9fea42a5a4602155377a609765efc993651e691802 811800 cockpit-files_45.orig.tar.xz
6c90a9697e3111a44d77b802a08bccf8710e468f629209f673e115898dfcc4f9 6976 cockpit-files_45-1.debian.tar.xz
971e697a79dc607c6b98c55ed4ffbe3a00a41cb5c35466c8b8f2f8f7e65c7b94 5152 cockpit-files_45-1_source.buildinfo
Files:
7d61ce81dfa24cb5dcbce9b237cfd8fb 2258 admin optional cockpit-files_45-1.dsc
c59ac3de294b2c4f29cdc6ab6ff7d1f0 38562152 admin optional cockpit-files_45.orig-node.tar.xz
b04de5eaf15b4970560559e476f54fac 811800 admin optional cockpit-files_45.orig.tar.xz
bba5bd3256e265ef9b98bd3c00dd395f 6976 admin optional cockpit-files_45-1.debian.tar.xz
e86497f09170c2d99cdb0b79ddff9421 5152 admin optional cockpit-files_45-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=ujC8
-----END PGP SIGNATURE-----
