[From nobody Mon Nov 2 12:37:11 2026 Received: (at 1152824-close) by bugs.debian.org; 2 Nov 2026 12:34:30 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 107; hammy, 150; neutral, 165; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:42588) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xNrF8-003Lzv-2S for 1152824-close@bugs.debian.org; Mon, 02 Nov 2026 12:34:30 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xNrF8-003bcM-17 for 1152824-close@bugs.debian.org; Mon, 02 Nov 2026 12:34:30 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=hsdKwXJ9g9srZHlXTLQ7MFLHa6iAvIJ8Lk8CDVtm62Y=; b=fvjcCYgK2156+oz+T1NvdxC1DK 9hG04N1LGmA++351SQqpNtkLeiPdu2KgRCrMBanu8O4v6UnXgpe5YecNxCWDg3RDiDIVOYsg8X2Hn FXPGFlepXnSr6yCtaMndyttPJ7dg3qCF82QXg49e4lncRMYfWFsJLXA41I55csy2aGSIL9+KE1Z+3 O4qI73arAYkg9YfFG5MBdOrPelH0yGZbHwaUbV/2e7D3Xc6E6tUWFDIbazUZZT1buCPYVQO0jYYxs 6+x/lmi1Iy1U8hO21X1l1JuMl5bpX3Pojp/gebsQMVKKRf4R6iIapR9eugV+YJYrXEmnLHKYfvOX8 li4TlxjA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xNrF7-00000008yfS-2IQL; Mon, 02 Nov 2026 12:34:29 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?Jeremy_B=C3=ADcha?= <jbicha@ubuntu.com> To: 1152824-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: epiphany-browser Debian: DAK Debian-Changes: epiphany-browser_51.2-1_source.changes Debian-Source: epiphany-browser Debian-Version: 51.2-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1152824: fixed in epiphany-browser 51.2-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1472240381257524682==" Message-Id: <E1xNrF7-00000008yfS-2IQL@fasolo.debian.org> Date: Mon, 02 Nov 2026 12:34:29 +0000 --===============1472240381257524682== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: epiphany-browser Source-Version: 51.2-1 Done: Jeremy B=C3=ADcha <jbicha@ubuntu.com> We believe that the bug you reported is fixed in the latest version of epiphany-browser, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1152824@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jeremy B=C3=ADcha <jbicha@ubuntu.com> (supplier of updated epiphany-browser p= ackage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 02 Nov 2026 13:13:58 +0100 Source: epiphany-browser Built-For-Profiles: derivative.ubuntu noudeb Architecture: source Version: 51.2-1 Distribution: unstable Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debi= an.org> Changed-By: Jeremy B=C3=ADcha <jbicha@ubuntu.com> Closes: 1152824 1152825 1152827 Changes: epiphany-browser (51.2-1) unstable; urgency=3Dhigh . * New upstream release - SECURITY UPDATE - CVE-2026-118598 Allowing a Clipboard or Website-Data-Access prompt grants camera AND microphone access (Closes: #1152824) - CVE-2026-118599 XPI extraction allows hard-link targets - TAR .xpi overwrites an existing user file (Closes: #1152825) - CVE-2026-115683 TLS/SSL Error Page Bypass window.webkit.messageHandlers.tlsErrorPage (Closes: #1152827) Checksums-Sha1: f6537f8cc57a08683a5403c9b1e6135bd2194ef0 2696 epiphany-browser_51.2-1.dsc 22faa18fbdf7a07e28bfafbec0c0dc5258a902bd 4619612 epiphany-browser_51.2.orig.= tar.xz 8b79e0d131cdafb0515161d9593ae611f856cd91 44872 epiphany-browser_51.2-1.debia= n.tar.xz 05ae94f4ea2ee5b9053819acc8685f72295cfda5 11665 epiphany-browser_51.2-1_sourc= e.buildinfo Checksums-Sha256: 9c6af929963aa8c5ba9ef49154a319c8ccca0cf784151c5776b03bdfdc29bee4 2696 epipha= ny-browser_51.2-1.dsc e45d93483d62beeb26b36b39fe2f8cb5511ffe6ddccc7fedff55b1e3cc0a5c30 4619612 epi= phany-browser_51.2.orig.tar.xz ded726da11deb42f9648ed88f5f84c32a934c75248d8c19401b49284cb1c8f79 44872 epiph= any-browser_51.2-1.debian.tar.xz 81d8c52b4887fc9a6b743174ae0bc19f1adb72ecd11af8a39f60879c5bf49782 11665 epiph= any-browser_51.2-1_source.buildinfo Files: d40bce0834265cce9cc99dd77350b820 2696 gnome optional epiphany-browser_51.2-1= .dsc f83b46ec377748346f4ba3450c95dba1 4619612 gnome optional epiphany-browser_51.= 2.orig.tar.xz 8f782e96dc8e08ff33f9bb207ea476ea 44872 gnome optional epiphany-browser_51.2-= 1.debian.tar.xz c2cf51932a0732477e32bee83c283002 11665 gnome optional epiphany-browser_51.2-= 1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmrofp4ACgkQ5mx3Wuv+ bH1Oxw//ekvUeLlP83pYxTIcQCKVFZ4TMCtAulWk0+8ncUAVN7z9ompsp72ISRKL UdJqpCr0v6R72XAnVbFTHlcgrB8TSW23KswmjcwvFhz2xNW7pLJABi2DaqfchVy5 v93V3x1DV2EwWsZfjQXU4K3G5NFtjE4aE90rU/Pf4qGWJR9V6xu439L8Jdk5H5eP G32L+H6y6Y5Y2/wiFMSTdInTq1KQFvSQ+OMr6HOWPJ4d4GVQf4NB0+cDOwA5s0Du UkO37ZD2cQTxx/pO4aYPuVstfK3vFR/hZSts1IUw9XJ0ObTZ1Tjhu4oO1WT842D7 jE3LddSaDxatpADuZTM6Lhz/cQE/WsSBtMnUixaDGiSiqBEIMQDWWRrAW6UEzCiQ yZveA/INpF90ZOYhyHjIgvUdasLC4QjbpbcZX4rYsLi2L/nHv0O6CP1Zgdifyaie vdd/xuzFXaTaiMrmojTys5FosWnMCJ39tHAZFKvTZb1xctoU/dztdHV0efQ59SL/ fup1RfFBY+lJ/XddLR6VWknaL6ztXd1/lbLiurxvJ2M/zpnWWiJwckUAv0Vpcipp UCh8PLIIKiZiMmLQVlpuXApnB0Tm3cTDfNI6UDO9guprX16x/7wP7/I8qfebH7ll LV+G8jdvwO4wzUdDX8cdQVkxzLJ8F+Jq44Yx+qNZsqn890c2D1Y=3D =3Dlioa -----END PGP SIGNATURE----- --===============1472240381257524682== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCauiDVQAKCRCb9qggYcy5 IQUQAPsHVJrHklRvBPFxB4sRROFA0mY8mcJU0IqGSvEfnUgndAEA40wk+t0KR6Oh jAu36BdMSC/EkRDCddQSCWA/Gm442A8= =FwOv -----END PGP SIGNATURE----- --===============1472240381257524682==-- ]