-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Aug 2026 13:43:30 +0100 Source: xdg-dbus-proxy Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym Architecture: arm64 Version: 0.1.6-1+deb13u2 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-05) Changed-By: Simon McVittie Description: xdg-dbus-proxy - filtering D-Bus proxy xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests Changes: xdg-dbus-proxy (0.1.6-1+deb13u2) trixie-security; urgency=high . * d/p/GHSA-r7hp-698j-2h6c/*.patch: Fix a vulnerability in access control for receiving broadcasts. In 0.1.6 and 0.1.7, a malicious or compromised Flatpak app could receive any broadcast D-Bus message on the session bus or the AT-SPI bus, leading to unintended information disclosure. * d/p/tests/*.patch: Add automated test coverage for message filtering Checksums-Sha1: ca0f94acc36ceedf997f85397376aba4507332d4 67328 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_arm64.deb 2a907dac7e5e80cbc6176a0c37c88d19738303ac 23000 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_arm64.deb 45d3388f039b8927fcdd4f883b1130b780e2373b 12644 xdg-dbus-proxy-tests_0.1.6-1+deb13u2_arm64.deb 5f60d34ebb501d844fa06cfab97b7fa93a8ae1b1 8916 xdg-dbus-proxy_0.1.6-1+deb13u2_arm64-buildd.buildinfo e17ae90cda7030c786d7399f392204589641d34f 24456 xdg-dbus-proxy_0.1.6-1+deb13u2_arm64.deb Checksums-Sha256: 4843339b2779846bd5e0eb27f9529934a44668ba6b21d09fad34956f296198e6 67328 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_arm64.deb ae58d4c061555ab50e475b7331cda313e247e135bbbbb9199094880b066ec4be 23000 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_arm64.deb a832422ed75770fe4900efed1d4ba91a42b059bcb544fd1d4c26a82d8beb8408 12644 xdg-dbus-proxy-tests_0.1.6-1+deb13u2_arm64.deb a6eff50e2735dc15b25ade7587fe0be6b788e7c5a69b048ac50670540f0a7ab9 8916 xdg-dbus-proxy_0.1.6-1+deb13u2_arm64-buildd.buildinfo 0680aa77469798d5afdd4101dd9e8d8f13237f5e8e8f2d82856d0baa45ce6d7b 24456 xdg-dbus-proxy_0.1.6-1+deb13u2_arm64.deb Files: 4451f142e744af9ba8ad330de7365eac 67328 debug optional xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_arm64.deb fddfe2c64bd2df54436c6ebb485110a0 23000 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_arm64.deb 1f9f515476650bf54abda725adcfde74 12644 admin optional xdg-dbus-proxy-tests_0.1.6-1+deb13u2_arm64.deb a9123ddd39adb92c1530e9dfc9e12bd6 8916 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2_arm64-buildd.buildinfo d015ec7ea3a0b50ab1eaaf851d01d7aa 24456 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7rv+l3KtZdQea77lnwznazfjXToFAmp7P7IACgkQnwznazfj XToDuBAAimMvZWcYTHnjsOifbwb8sAHiT9OzGH2/wjbtBvo98VZTdWs+PL+rDn8t MkhGndFdVlvYg10x6wVui5dzJY8oTlKYT2fPIT0w5KRyd0r8B9WSQjD1BwW90WCx soNzSt2e5ufzPqeyv+V2zndUuFxqEs7z61VMTEnRwmbulx3i/iAseVQbzas+VVMU TDPnK6RfjpTbKe+c4j/ANS/beouVAyFUZtjpH2DguDzQvbK/gvyu6CVWReWbgcv1 bYZef8BH07fN5W8Yl5XvS2/RkgtIWKLbqJy5iXZ+tsbNWSiASggR5H8JDu8Mcg3u ZS1MCUgovMz0LTqYeV8PReryYKrUSuMfQAEkRI6vIaczBC53JPnUD354vrTjdhVP O/WRCCaAwrT1dzxBf+TRXnrb+LsHG4j4mIDnhjHI2XCTCdij6jdesYV370RqHQqm zFBBH0AmbPk9b8W8FTt3GSteIVSENCmAn095pv5d8J7WfHInWB5zKMWmXJRmpFt0 AxzM/tzWk2otw9rDrFZg4AshE9PgIdi64TdICU88zM9u61QjfdbHykoQ6oJIG/FK iZZc5tV15FCDUftYHU6XZM8xj8SDb9ClGPoYZGPku7kTLKeiRALoxXnPUHt8lJPI vmFKesvGjIVF/KRgr6A+VZnyWBpev5MuKi5+BgtXHaVxpH6sG/I= =nFJZ -----END PGP SIGNATURE-----