-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Aug 2024 10:04:08 +0100
Source: bubblewrap
Binary: bubblewrap bubblewrap-dbgsym
Architecture: armel
Version: 0.8.0-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 bubblewrap - utility for unprivileged chroot and namespace manipulation
Changes:
 bubblewrap (0.8.0-2+deb12u1) bookworm-security; urgency=high
 .
   * d/gbp.conf: Use debian/bookworm packaging branch for Debian 12
   * d/p/Add-bind-fd-and-ro-bind-fd-to-let-you-bind-a-O_PATH-fd.patch:
     Backport new --[ro-]bind-fd feature from upstream release 0.10.0.
     This is necessary to resolve CVE-2024-42472 in Flatpak without
     introducing a potentially exploitable race condition.
Checksums-Sha1:
 ee7481c8483dec1548d808278a761978bdc6e3b6 74644 bubblewrap-dbgsym_0.8.0-2+deb12u1_armel.deb
 96db560c8d36adfd21da4148c986ffcdab4120a7 7332 bubblewrap_0.8.0-2+deb12u1_armel-buildd.buildinfo
 3de81e08985043a52dc872391c43055f03c37e08 44664 bubblewrap_0.8.0-2+deb12u1_armel.deb
Checksums-Sha256:
 98821231512f4a9a28020c97359a856ac77ce12da8fc11bf9bc3dd730db94c91 74644 bubblewrap-dbgsym_0.8.0-2+deb12u1_armel.deb
 3cae752927b71c955eef1ea76ef40feacb88f31d37d819c02dd5105dcce33156 7332 bubblewrap_0.8.0-2+deb12u1_armel-buildd.buildinfo
 cc0fe9fbbb814d7b454b371a537fbd540b363dd52e48b8550a2897337738ec50 44664 bubblewrap_0.8.0-2+deb12u1_armel.deb
Files:
 d902a532e57f0a24a0e5475e74730187 74644 debug optional bubblewrap-dbgsym_0.8.0-2+deb12u1_armel.deb
 b4c66a4e43eae737b0e50b3aff587ac8 7332 admin optional bubblewrap_0.8.0-2+deb12u1_armel-buildd.buildinfo
 7dbb3c312d0ebd10de18155f2c64a703 44664 admin optional bubblewrap_0.8.0-2+deb12u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=rGHR
-----END PGP SIGNATURE-----