-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Aug 2024 10:04:08 +0100
Source: bubblewrap
Binary: bubblewrap bubblewrap-dbgsym
Architecture: s390x
Version: 0.8.0-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 bubblewrap - utility for unprivileged chroot and namespace manipulation
Changes:
 bubblewrap (0.8.0-2+deb12u1) bookworm-security; urgency=high
 .
   * d/gbp.conf: Use debian/bookworm packaging branch for Debian 12
   * d/p/Add-bind-fd-and-ro-bind-fd-to-let-you-bind-a-O_PATH-fd.patch:
     Backport new --[ro-]bind-fd feature from upstream release 0.10.0.
     This is necessary to resolve CVE-2024-42472 in Flatpak without
     introducing a potentially exploitable race condition.
Checksums-Sha1:
 a13fbb9e08cb5b1d5cdc0253951b99292ed517ff 74628 bubblewrap-dbgsym_0.8.0-2+deb12u1_s390x.deb
 a325d54f65a70cf9f73d9ad90e1d472924994c1f 7370 bubblewrap_0.8.0-2+deb12u1_s390x-buildd.buildinfo
 f5535c02551a7b091981569fd515490ea6f86643 45064 bubblewrap_0.8.0-2+deb12u1_s390x.deb
Checksums-Sha256:
 cb2e446031e2dd7dbbc95d0c8cb02682e72fa1365b3781546ad317dc494026b5 74628 bubblewrap-dbgsym_0.8.0-2+deb12u1_s390x.deb
 1e5497336f43c97a4e1dc0353e5d341a375a14670d3d99a6c9949125fded623e 7370 bubblewrap_0.8.0-2+deb12u1_s390x-buildd.buildinfo
 36ae723411316d30685f7bd18bbe26c1259b820f77274e8e1c044cdbd1b6ce19 45064 bubblewrap_0.8.0-2+deb12u1_s390x.deb
Files:
 c7b17394994583eddd6671de0e852e63 74628 debug optional bubblewrap-dbgsym_0.8.0-2+deb12u1_s390x.deb
 aeff8b1e8c03c6b96d43ed15916ac47b 7370 admin optional bubblewrap_0.8.0-2+deb12u1_s390x-buildd.buildinfo
 88aa8bca8864172a96357af1db613d08 45064 admin optional bubblewrap_0.8.0-2+deb12u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=Oy4R
-----END PGP SIGNATURE-----