-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Nov 2026 21:33:41 +0100 Source: bluez Built-For-Profiles: derivative.ubuntu noudeb Architecture: source Version: 5.88-1 Distribution: unstable Urgency: high Maintainer: Debian Bluetooth Maintainers <team+pkg-bluetooth@tracker.debian.org> Changed-By: Jeremy Bícha <jbicha@ubuntu.com> Closes: 840013 1150900 Launchpad-Bugs-Fixed: 2172906 Changes: bluez (5.88-1) unstable; urgency=high . * Team upload . [ Jeremy Bícha ] * New upstream release - SECURITY UPDATE - Out-of-bounds read vulnerability in the btmon tool + CVE-2026-105460 (Closes: #1150900) * gatttool is no longer provided * Install additional manpages * Update Homepage * Remove patches applied in new release * Cherry-pick 2 commits that landed after 5.88 . [ Kai-Chuan Hsieh ] * Cherry-pick proposed patch to fix mpris-proxy segfault during OBEX file transfer (LP: #2172906) . [ Petter Reinholdtsen ] * Add AppStream metadata file to announce support for bluetooth (Closes: #840013 Checksums-Sha1: c6b46c74203ac6c2315f089d3eef9ed3840a47d8 2854 bluez_5.88-1.dsc 84c8bbad2dd312c7e4910c8b3da166d6e6c2a528 3733004 bluez_5.88.orig.tar.gz 32997599f5bff49b0fa6a6c178984ff1db2539bd 41572 bluez_5.88-1.debian.tar.xz 0d1df9ad54fd5d4ebf4a55eec8d2936ee0d8f0b1 8249 bluez_5.88-1_source.buildinfo Checksums-Sha256: 397b84d2fd6f6bedc0a0b2196d7ae17da315234bb7d35c6c30626674a53212bc 2854 bluez_5.88-1.dsc 2babca2cd0d36368da22f76512c0ce0d8409471b0f518f5f95e2709992b5329e 3733004 bluez_5.88.orig.tar.gz cf358448651117a274f856a73b9463dbf49e04b4e322cda77c47fcdd6bc4dd7a 41572 bluez_5.88-1.debian.tar.xz c6937693ca5d8b5a20a865efcaab72012c08057691b8f02f8ab110034890c263 8249 bluez_5.88-1_source.buildinfo Files: d6cc93a40e4b38c4a1d7e8cd1a22f954 2854 admin optional bluez_5.88-1.dsc 0ab110041f0be38bbe861111590b6f39 3733004 admin optional bluez_5.88.orig.tar.gz 0710b1946cd98f06725ea56cd4862ae2 41572 admin optional bluez_5.88-1.debian.tar.xz 16283b1eb4cdff5304116a0a249c746e 8249 admin optional bluez_5.88-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmruPZYACgkQ5mx3Wuv+ bH22KQ/+KSfeCFPaSa7OqghLA7brpmWHPL9VuEP0+41Mqil0KqHLxT84yDnwlUek ZCTxfjGK/LSM4iRaUDuUqQmElQWBmJ8C8sYrYAiIZtVP0Q4DYss4dVGOhLsCXySH ewexWFwuUk35WBTXAKoXo/t8OYUPu9/ZNXwVwWPRAjNaX4PJ6UPRmmts1Kxzdpsq Y36h0PQE112fxdunAKMliy6rXgAGpHDGNezgjGe5II3cjfI3HLEWX7Fp8Yw6lu30 67ohGnmiMSgnQaJKC5kU/7+h4DHlCt8zN6Fv9iomEQhbvM1QmEFAEK7h40XDLaZP cK8R8l9QpEgxDahaKD7gYzs01hl9gZxv97qF+Jks5EKy2er42tGyB5fXcE+fgj6N ivFCqAiNfsTp31asTW/xFP9yYsG8iQJP5hiIp+ihcES3hIQhb+C+s3Fjyf6Y5iK/ puBSKPVPfekfUbUleV4CA1CfCkIQGY+Q5qS+XHQEmRHp08M80AxA+jzJBWCsGVfy CYLUJ5bxRtcoFzwSLeIWlFENwy4z/YswBUn+527Tgfxlh3b1EcFeg9nGEz45UeNf /sX/aKxUAWg5a6t3OPY4NFJumKeSBqDxG+GqPCRJtWAABQy9S3I2+GmSxrbHSer3 lpnTiH1jQZjcEm+iQxhoUgd6hBOVxesOmJhptHMOB/E1rhsK6jU= =+J5i -----END PGP SIGNATURE-----