-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 Oct 2026 01:23:46 +0200 Source: swupdate Architecture: source Version: 2022.12+dfsg-4+deb12u3 Distribution: bookworm-security Urgency: medium Maintainer: Bastian Germann <bage@debian.org> Changed-By: Bastian Germann <bage@debian.org> Changes: swupdate (2022.12+dfsg-4+deb12u3) bookworm-security; urgency=medium . * Fix CVE-2026-109399 by upstream patch and applying new config symbol * Fix CVE-2025-41259 by backporting upstream patch Checksums-Sha1: e86f8ad1062577537bb04f2db9a9d4f73904f6f9 3482 swupdate_2022.12+dfsg-4+deb12u3.dsc 2948665fea1ac2d33d2f2fdc8b8b1aaf9d4962a1 5418260 swupdate_2022.12+dfsg.orig.tar.xz faf5b3a258c672b14fff54741e7ca873edaeb8bc 25092 swupdate_2022.12+dfsg-4+deb12u3.debian.tar.xz f7db35ecd61dde5eed123afe027024f4d0fcc920 8448 swupdate_2022.12+dfsg-4+deb12u3_source.buildinfo Checksums-Sha256: 969d650d5c943d5bccb722d5b20ce143711cb506c58ce9a3d778084d7141f354 3482 swupdate_2022.12+dfsg-4+deb12u3.dsc 94584c998f171d3c46c1e3d6a35737417a28983282d90b223b30ac3f88daeae8 5418260 swupdate_2022.12+dfsg.orig.tar.xz f095ac3f1a96410dc59a33424174da5590b36c5d6ca11eb53109178158ae36b6 25092 swupdate_2022.12+dfsg-4+deb12u3.debian.tar.xz 0a9b382a6e529945166149bf41638a0a8f3c61f9cbaf946121e5630930a19b94 8448 swupdate_2022.12+dfsg-4+deb12u3_source.buildinfo Files: d25425d6bd1f8b9aec02923c483d4d49 3482 embedded optional swupdate_2022.12+dfsg-4+deb12u3.dsc 1c4ba67b29a1cebcda15746961973742 5418260 embedded optional swupdate_2022.12+dfsg.orig.tar.xz 3e1d8935aa9144710232ff2daa58c044 25092 embedded optional swupdate_2022.12+dfsg-4+deb12u3.debian.tar.xz 8a769cc9a91cf46fdb50872a6c5797fd 8448 embedded optional swupdate_2022.12+dfsg-4+deb12u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECgzx8d8+AINglLHJt4M9ggJ8mQsFAmrYsPgACgkQt4M9ggJ8 mQuFsBAAhlUy3IGwL6m3Vwkv7tVrgBsfCPqqY4aY9MRWuDidEnm1WNC635ZqCRYh C6rJqum1zRajpJufvhetzaswcEBy++Wv0JnqXxnA5dk5b70jDwOtRxKC3zCPaFBR 229LflTzu7zO96ZFiWjP4uT+m6CU4gRKt4l0f78MzCb0xu7hcG8ibBXRL4eViPhe UgED20xUXp0a178A0byHYF0lZy11sbxtlPUnpXrfpw+G+wxYS/S7z6cpA7pQla72 ysut+r7PL2llYIX8Ga4ZP/g+MAFZfWDqwGzFFa+/iQ57lc6oAgzTaV7b42FcK8mo Bvg8qoteG92K2J5fZ3WehgvwuqsoJCdsblmfEdr33fjMHpMksqvHyvqyDcdohjIw 3tUQ+OQ4tjbFcAmsjuKef9QgzQiueMV2RvgYBVGL17vLuDuRvmTS7whHA66EdSKQ qet+bf4+ZL6Mg4rDar06xC+ND14GDHjnQDF04ndo1eIf1+cZkZ0Pyx1OXCZKOkhN q8k6cuUrxGfosTIOTS52sJOVi/Xhv2RznhdhnZO1UvGW7mfDvLxMD1IIIWna6fKd 8qVQ94J1xr8LbHCReImDmFrMB9IeEGDRjrte1Zzl9vyKaIeNdMYqAhfA7fyIxSEE MFqrO2jTy4sFbEHItxwcqVNUgHXITee+8awEEF1oleksBZMRLxU= =qzpO -----END PGP SIGNATURE-----