-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Aug 2026 13:43:30 +0100 Source: xdg-dbus-proxy Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym Architecture: armhf Version: 0.1.6-1+deb13u2 Distribution: trixie-security Urgency: high Maintainer: armhf Build Daemon (arm-conova-01) Changed-By: Simon McVittie Description: xdg-dbus-proxy - filtering D-Bus proxy xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests Changes: xdg-dbus-proxy (0.1.6-1+deb13u2) trixie-security; urgency=high . * d/p/GHSA-r7hp-698j-2h6c/*.patch: Fix a vulnerability in access control for receiving broadcasts. In 0.1.6 and 0.1.7, a malicious or compromised Flatpak app could receive any broadcast D-Bus message on the session bus or the AT-SPI bus, leading to unintended information disclosure. * d/p/tests/*.patch: Add automated test coverage for message filtering Checksums-Sha1: 7f30140aead0fecaf9b3da7164a2f27640072bfb 66392 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_armhf.deb efc158c6b73c57f5af2379456034cf06b76725dc 22604 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_armhf.deb 0f38e8b44ad7e4834d362cb4fc4d216420e3199b 12640 xdg-dbus-proxy-tests_0.1.6-1+deb13u2_armhf.deb 9e6e760bc53e9e44848db62ae381d26350aae3c8 8795 xdg-dbus-proxy_0.1.6-1+deb13u2_armhf-buildd.buildinfo f4646d104115dcf3cbdc6b965bd253f1fa7fd336 22576 xdg-dbus-proxy_0.1.6-1+deb13u2_armhf.deb Checksums-Sha256: 9d15ce15609afbbe6668b56dcc95c538f413d8ed81f001e9bade331dedc5c43c 66392 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_armhf.deb ceb78c1f1c7bd2d27439c2b0a12d7a62f3685c7c59510670ec25f572aac8926d 22604 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_armhf.deb d3cde9a14b9e5ab5ea4319adf631a82fecbbfdc71ad87e55c685e1bb0bd08bf7 12640 xdg-dbus-proxy-tests_0.1.6-1+deb13u2_armhf.deb 1fad60de308ff3c2dd5bcac3a776601f5e217bf8b84debda5961049c33666917 8795 xdg-dbus-proxy_0.1.6-1+deb13u2_armhf-buildd.buildinfo a6c87b4fcdd6808fd6bf2631afd3198091e618a9466f1041af0d5f1533d9d82b 22576 xdg-dbus-proxy_0.1.6-1+deb13u2_armhf.deb Files: 75472a42e3c479710df810e4150dfb53 66392 debug optional xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_armhf.deb 6a3ff98774823d6514e8f38b09de340c 22604 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_armhf.deb b39faf1556262a69d485e5a31a9cf11e 12640 admin optional xdg-dbus-proxy-tests_0.1.6-1+deb13u2_armhf.deb bc2ed87c7c1cbb38acfe4cfa52f82ee8 8795 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2_armhf-buildd.buildinfo bdb1ebf4ffdf86efae80435b6aac3042 22576 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmp7P5kACgkQ8U6eOZMp j69wVhAAnxXLVhAyR5QYnzstUYx09DDi3OBAjPOiVttYKDV6TkOFyR1hjuM6zlCW ppA4xhc94cDx+T82q3GrX7Qc3ivJ1s44MgElcgRRBX0g1ttanfWhGs0rFb9D5Nx9 +3KfrBI9b2ZPiC8rEoxrDiZhzEGZ5Hg6SKHoAtevQcB+wlHdhuhVwpdp9Ofcy0ay m4qFDdNoAYQ1XiLJUh5qz6FzxR9AQxVZT17TUxUobHrSDI3bs3jfhHdogfWXlrOu 4s50H0fAMb6Wnz/l5ORrWj38TMFrunZ0MWoXKtfrNFDJLikGutzOqyX+rSGhJRO8 iANoRvvgZLddhPw84eS32TedudK0bwqkF11XDIFjavq3Kbbb4dZWb6Ly3/W+il58 XZtPtSbRKwfE9xigo+P0KjMVhFmYAtAJqtS0wHotQzuftDEeXkTyICSjr+fp7JSy BHRcizBMAwZChHJj8PnQJGH8CwoiNiKXvHkpdeADPJ59MC+dKdMHN1u3oqK7ZMK/ m0rV7z4OCn2H57g0sbTTbonqE8wbMeIrwMUIV1SZ2/vpfmz/O7/3YetEmTcUejSo llL+OI2imjc3rtKvmmd6UgS7CiW8qG3o1iEGEtU8sWJIegc1X0S0CSkV2uxPmrNv KdIt6GwqzzSpNBIcXY4MSwITFnuRrnxLqx3f1zMe72bc+w/v0CI= =NQ7q -----END PGP SIGNATURE-----