-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 24 Sep 2026 08:01:40 +0100 Source: buildstream Built-For-Profiles: derivative.ubuntu noudeb Architecture: source Version: 1.6.9-2+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Theodore Tucker <theodore@tti0.net> Changes: buildstream (1.6.9-2+deb13u1) trixie-security; urgency=high . * Team upload * d/gbp.conf: set debian-branch=debian/trixie * Backport upstream patch for CVE-2026-82331 Checksums-Sha1: a57ebe6831bc3d644a40ede606865239899a8bc5 2569 buildstream_1.6.9-2+deb13u1.dsc 6a75c1d10a288f096389db80586f0984811351b7 676989 buildstream_1.6.9.orig.tar.gz b612f4db40ac38562b2e64fb4c36b0878a56a319 53520 buildstream_1.6.9-2+deb13u1.debian.tar.xz af332a5e9a6bba9c30b13c49e465efe28e583a95 8294 buildstream_1.6.9-2+deb13u1_source.buildinfo Checksums-Sha256: f1ad34c40ec9c11c1e99cfc50b55dac9b79173d62f0918fee82e47f1b9b34178 2569 buildstream_1.6.9-2+deb13u1.dsc 35faccb3ff792ff6178d67e39779673391f31281b9bac493b862c5c38bc4b2a6 676989 buildstream_1.6.9.orig.tar.gz a35ff471ba69512b963849f220a52048bc3956c4f985d024facb35118ddb931f 53520 buildstream_1.6.9-2+deb13u1.debian.tar.xz e364e17d79549e47fbca251c35eb819c812d2a1c7272809633635eb566caf114 8294 buildstream_1.6.9-2+deb13u1_source.buildinfo Files: 2260b91eefe07257042053561362cb0a 2569 gnome optional buildstream_1.6.9-2+deb13u1.dsc 477547be5bd9fb50354aee6ee25a1050 676989 gnome optional buildstream_1.6.9.orig.tar.gz 5532e098ac1cc5a80442a4b17312c5c2 53520 gnome optional buildstream_1.6.9-2+deb13u1.debian.tar.xz ec4278fa3fa007bad1524431a3c416d0 8294 gnome optional buildstream_1.6.9-2+deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmrLD4YACgkQ5mx3Wuv+ bH1UPw/8DfPaHhzi12wbmY9/UX2TlpWznn678s64nc6FEF05ktQRFQz5swpwa5pK CtcbvTaBsnQVazFl/rV553/1zIJgPk1kwJl9fSJvdExont5Icm/2NZCbmiO7EvVo QrjeAvnuv0RVOf66IsC5ZGRInREhYjxokJ4it9P1oVFDiZ7+i9IbBSk0xXAEiT5z OyOA9q5K3862YmHkwnr5tYuN4tx/mqiO0bZsimrdJj3H/qRVKSmDm9lsMYiBMAn/ vv2+7M9brD4XIsgMfBn40bKJyJhHuwLe7uRqBzgQVRYosFeJKHIudAzaInxNWcc/ saur33j/o0ntbu2OPHaAL7a9enb2fxls48RT7Q9fGrtrvkpiCJQZdTEhsR0UTM1u mAsIwPgH/tKJPkPVtXztz1GxFu92jYFO2+YjnSPbWIayi/jRv8SDcbv0ZpMzkYk0 E8ZsiYOvGO5GjVHGrBUeIwbeXjr7IoFgsyzpODtHY01BtO81DzdDDcYZAGeU2J5D 7/NBUjcKF5ILesqQKrx5SakN5sZmv/m2QtMK1Df76VIxshbxElsQAt33I1ZgU28I L9TDCzrBJNELjMFJmtSkEjXLL++k75M+wwVfXEcWZm9z96eK+cijnIlvlaM2WO5K iPOHioh7eBQpia7uSTzYGS0hk5xmwAktPa6RU+r/dJih5RIXYjc= =O5sH -----END PGP SIGNATURE-----
