-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 Aug 2024 10:04:08 +0100 Source: bubblewrap Binary: bubblewrap bubblewrap-dbgsym Architecture: mips64el Version: 0.8.0-2+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: mips64el Build Daemon (mipsel-osuosl-01) Changed-By: Simon McVittie Description: bubblewrap - utility for unprivileged chroot and namespace manipulation Changes: bubblewrap (0.8.0-2+deb12u1) bookworm-security; urgency=high . * d/gbp.conf: Use debian/bookworm packaging branch for Debian 12 * d/p/Add-bind-fd-and-ro-bind-fd-to-let-you-bind-a-O_PATH-fd.patch: Backport new --[ro-]bind-fd feature from upstream release 0.10.0. This is necessary to resolve CVE-2024-42472 in Flatpak without introducing a potentially exploitable race condition. Checksums-Sha1: 8e1dfe69a06098685bf86a791913a3ba46924be8 79224 bubblewrap-dbgsym_0.8.0-2+deb12u1_mips64el.deb dac70155e4b853421f4701fa20da5002821094fb 7311 bubblewrap_0.8.0-2+deb12u1_mips64el-buildd.buildinfo d619a9ccc666746a6028c7779cc12c12cbf1ae89 46356 bubblewrap_0.8.0-2+deb12u1_mips64el.deb Checksums-Sha256: f5478d0121bbf4f4ba2319635a20588778d7e26055c2f5075fc0b1e2c38d8c82 79224 bubblewrap-dbgsym_0.8.0-2+deb12u1_mips64el.deb 2042e8631e4b8f2b8b9973fc379a6fcca3067cbf2f4b21cfe55ed5039c432439 7311 bubblewrap_0.8.0-2+deb12u1_mips64el-buildd.buildinfo 213d2583c78cc46ff10fba1811202bb058b15c8992aeae718a5dfd8402b693b7 46356 bubblewrap_0.8.0-2+deb12u1_mips64el.deb Files: 2cb4a493f56909c8fa1a76ff930b8c35 79224 debug optional bubblewrap-dbgsym_0.8.0-2+deb12u1_mips64el.deb a088f95da95b5cc6830b196cfdcccaab 7311 admin optional bubblewrap_0.8.0-2+deb12u1_mips64el-buildd.buildinfo 3460963425b94d9df1cddeeeef4fe525 46356 admin optional bubblewrap_0.8.0-2+deb12u1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwOi7AjfMfAOkP0DckzO9iVHf454FAma87LIACgkQkzO9iVHf 457UMw/8Co8CkANxPeuKISxwIO7rtJEVneLpw1K1Tm0+cmDnu2c58xmcE70Uf1Lr fbGrb9ZfNVF/PQs297bnjkvGIJm7tu2akdo6hc+p+s3npSnyM8X49Fv764dX8TC0 IGeK6iiWGeyVXIQCrBrvloI+S8tsrEqtrEpytbd7Q+gNXsGKRMv/iKaRgVmets/J VxX8EnOny0rVojUuYUSeLYLxAC5WC1x2tB/cHeGyYhFiJkZ5lHxOx7JXLJxSraAk RdRsg0WlXMKgEdalux6PeGXnduATAb7ZNFK06KCmKXoFPv93yHs8z+m2tGT2WAvE GC6tYH9hJ28auPzNtBjZOP8+NLAHDb0a0hhzS8C51VSBf83wncGRjBVL1g36lGz3 VXqY/95GPZnmIYk6XU6f2KT2O66UrodM9j3W9mo5UVZZPLncwNt8LdyiVz/arhnD HL7uv1ApTsNjZYKkQNAgEkiqXa2ZfAG2otp0Cyf3XrGYQQJxUDnEKHZukSsm8mmS EO3o42KG6RZOIUzx68YHrlhDov62VGwgUpyx+GFlM+ra7IkV7nFLo1JYaTb2KRCt cl3qmHHEbf6BkR7fofJ+jhjEMfWZC4sIOHPTBGfFD7Wx4pGBLl+wqqU7+qwYL13t 6aMmqJ9peKJX3WKkgXbzAJWcs8cwtxbTfO1stVXrnedzHqIfSIY= =teSP -----END PGP SIGNATURE-----