-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Aug 2026 13:43:30 +0100 Source: xdg-dbus-proxy Binary: xdg-dbus-proxy xdg-dbus-proxy-dbgsym xdg-dbus-proxy-tests xdg-dbus-proxy-tests-dbgsym Architecture: riscv64 Version: 0.1.6-1+deb13u2 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-osuosl-03) Changed-By: Simon McVittie Description: xdg-dbus-proxy - filtering D-Bus proxy xdg-dbus-proxy-tests - filtering D-Bus proxy - as-installed tests Changes: xdg-dbus-proxy (0.1.6-1+deb13u2) trixie-security; urgency=high . * d/p/GHSA-r7hp-698j-2h6c/*.patch: Fix a vulnerability in access control for receiving broadcasts. In 0.1.6 and 0.1.7, a malicious or compromised Flatpak app could receive any broadcast D-Bus message on the session bus or the AT-SPI bus, leading to unintended information disclosure. * d/p/tests/*.patch: Add automated test coverage for message filtering Checksums-Sha1: 9f3f044e56a7b7208afb52b514b192c279cdc465 65140 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_riscv64.deb d8e9c0f7613bc557bb08668ef038aa56ceec36fb 22496 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_riscv64.deb cb6ab4b3ad8e73b1439d3e33deff6fe6109c3ac9 12520 xdg-dbus-proxy-tests_0.1.6-1+deb13u2_riscv64.deb d9aaa612c48d5fb1a9b770180b8b105dcfd41904 8885 xdg-dbus-proxy_0.1.6-1+deb13u2_riscv64-buildd.buildinfo b96835cf1b323adbe6b549bec69273e00fe68f93 25260 xdg-dbus-proxy_0.1.6-1+deb13u2_riscv64.deb Checksums-Sha256: e16572a52c8ac50b584b87aab16465f000968d9ce3884aa87eebb2c0efcd9b97 65140 xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_riscv64.deb fb972103a00377d324e7620e11e10385382d6638b8ace46eb7297e3695965b0d 22496 xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_riscv64.deb afba94f7ff41ceb2adb569aa544fe1d6c28b82c2d2ca33ac117dd0abfc273db4 12520 xdg-dbus-proxy-tests_0.1.6-1+deb13u2_riscv64.deb ea3f69156d0a619f4d9b62d201382b0b750d0f5f45d222aa3ade6c58509731ea 8885 xdg-dbus-proxy_0.1.6-1+deb13u2_riscv64-buildd.buildinfo 03406370773ac0dd01332db72c7fedacfcee43ed2b36b2feaf863fba30268c25 25260 xdg-dbus-proxy_0.1.6-1+deb13u2_riscv64.deb Files: 9afc383875c65683a3d38db3bd61ad30 65140 debug optional xdg-dbus-proxy-dbgsym_0.1.6-1+deb13u2_riscv64.deb 639e42a6980698110eb9d085c671e23a 22496 debug optional xdg-dbus-proxy-tests-dbgsym_0.1.6-1+deb13u2_riscv64.deb 1d056e3028e7b722868a48dee935ecd2 12520 admin optional xdg-dbus-proxy-tests_0.1.6-1+deb13u2_riscv64.deb b0f63f7e8642fbe2469edfa6b52842d3 8885 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2_riscv64-buildd.buildinfo 2e14ba1a961e4b7eb2e211ae51fa4d1d 25260 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEExv8RwtKAmv8J56r/6ETk30hvxtkFAmp7RNQACgkQ6ETk30hv xtm3Kg//cbBsZq4jsXKhGCJ1e/KppWgh8AYwb8tEwL+9Lh9OqhFx28xkLsfKaN2W XcF3jZtRfMWQ0bZFgn8weRMRyhOR/K02Yoh6E3V/5aIs7fO7ciqyv45THJGBuVAT rze8NeWNVqi5UefQ9dygi/mr0MQUjiollT1h/9W+8HPZKUDc8bQpkiAc7/rtAkWL 8zcoyaMm9NaheehzUVeEW0y0psE7S4DVbN5S1AodKGR6tAnY3gcd6WZIaHY2OQKX dlDw7icc7DiMZUECcAE8x5qIFTColg50YDyeE03qiHXlwM6MRk4gCCTgeXO/cN+r aKCOvNJ9dxCLvwRHAFF8qGhKoP4WApx7Xqz0MhRiIhFz4pRe+Jaj/cPzTdGjontJ VQGWDdu/s5V8jBi1GTGB71Bfd1hvJgDzCEBdopT/3PSA84V1Bl4yRtiYayDtQB5j G5G3vxj47HYDrT1mNOeEPZ4032IniT2Zxo/Wj+aE9OPFi7d/3vSdgxUa075Mf2Bg pD9IdF2XYWgR2OxHMcXPGcq2YmcyBuc8WHAPUCAeaVFkZ6NSUaJ9OIMl3Uzbo7kN xaM70E2FL9JTHKgMZlgTQgWupauO2CG//S84xoxOClS3wP9tjH5Zrh3oXVxyoTWW +Uhtq9hAvbN5BRJrvCLmyUZzIZdqSGD8JECAsZ3hRxGuUG2hssc= =IZ3i -----END PGP SIGNATURE-----