[From nobody Sat Apr 18 16:23:05 2026 Received: (at 1132939-close) by bugs.debian.org; 18 Apr 2026 15:20:44 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 92; hammy, 150; neutral, 146; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:44552) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wE7TQ-00H1RJ-0L for 1132939-close@bugs.debian.org; Sat, 18 Apr 2026 15:20:44 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wE7TQ-0081uI-06 for 1132939-close@bugs.debian.org; Sat, 18 Apr 2026 15:20:44 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=QJYLsb+JFshn10vHjw/kjAFhDk61HoJZvF2PNqacWaU=; b=qGx8TRsDxjyG8hy3RPBccRLdrk arIW5sM1yLFnthxgmPPpD+YeU/OR8rKbNcfk3T63Au/SD5AC1IefS/ZgKokTvxlhq5rvLLvw9VlYW B8OOYQP/ZekaCmCu1fdVUSCEYbF5WR36C7EIg5NR58ZFlfAenQZMjU+/zMlC/sEGm+HwdaeXkqCa1 7X9x2u3Pn8oqnntyBL27128btQdJZyFYbdst05huvfurO8jwHTHrLiBJriAsuHnd6tYdTVns9IXRD 3Qw7Qy5jc6PKvZLpjUEDy6MnGdWq1TiS9CTVL9Bt3BOYKAn8X2BQ4cU/efz8s275AHUOW1sJk5p+h JUR7Zzhg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wE7TP-0000000GaWn-0ewG; Sat, 18 Apr 2026 15:20:43 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Simon McVittie <smcv@debian.org> To: 1132939-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: xdg-dbus-proxy Debian: DAK Debian-Changes: xdg-dbus-proxy_0.1.6-1+deb13u1_source.changes Debian-Source: xdg-dbus-proxy Debian-Version: 0.1.6-1+deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1132939: fixed in xdg-dbus-proxy 0.1.6-1+deb13u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============4877288734455472516==" Message-Id: <E1wE7TP-0000000GaWn-0ewG@fasolo.debian.org> Date: Sat, 18 Apr 2026 15:20:43 +0000 --===============4877288734455472516== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: xdg-dbus-proxy Source-Version: 0.1.6-1+deb13u1 Done: Simon McVittie <smcv@debian.org> We believe that the bug you reported is fixed in the latest version of xdg-dbus-proxy, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1132939@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Simon McVittie <smcv@debian.org> (supplier of updated xdg-dbus-proxy package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Apr 2026 23:59:07 BST Source: xdg-dbus-proxy Architecture: source Version: 0.1.6-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debi= an.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1132939 Changes: xdg-dbus-proxy (0.1.6-1+deb13u1) trixie-security; urgency=3Dhigh . * d/gbp.conf: Configure for trixie * d/p/Improve-detection-of-eavesdrop-true.patch: Fix detection of eavesdrop=3Dtrue match rules, resolving a vulnerability in which a malicious or compromised Flatpak app could monitor D-Bus traffic that it was not intended to be able to access. (CVE-2026-34080) (Closes: #1132939) Checksums-Sha256:=20 a61ba827ec23029ed746364a73484d318c1763ed0eac951755013d2d81e62bb3 2229 xdg-db= us-proxy_0.1.6-1+deb13u1.dsc 2c5aa245b89b4711ebad0a1f21d581cc5a6d5e293621f045dbfb7cc53e783f71 5164 xdg-db= us-proxy_0.1.6-1+deb13u1.debian.tar.xz d1383aa7d0bc1cdc863353dd99ffd8250523288e6f42e8e60d818800692f30ac 7697 xdg-db= us-proxy_0.1.6-1+deb13u1_source.buildinfo 131bf59fce7c7ee7ecbc5d9106d6750f4f597bfe609966573240f7e4952973a1 48920 xdg-d= bus-proxy_0.1.6.orig.tar.xz Checksums-Sha1:=20 b02bd14a3f35ac5ea7a4dd31982b563d4b9f261b 2229 xdg-dbus-proxy_0.1.6-1+deb13u1= .dsc a8bf512338cf6d88998ce0469b9270b461d6d4fa 5164 xdg-dbus-proxy_0.1.6-1+deb13u1= .debian.tar.xz 1c4b1cb0104b9c6be1a72352a1180f8514f9c289 7697 xdg-dbus-proxy_0.1.6-1+deb13u1= _source.buildinfo 1792c13b329e535f4d75949cd722d5c3177552fa 48920 xdg-dbus-proxy_0.1.6.orig.tar= .xz Files:=20 861c9cd3901d028d26cdc018f0a555c1 2229 admin optional xdg-dbus-proxy_0.1.6-1+= deb13u1.dsc 43cd53ac059978a5fa088cea4fc7f722 5164 admin optional xdg-dbus-proxy_0.1.6-1+= deb13u1.debian.tar.xz dfbd6771d4bf1b8a510fb05b557c4fd2 7697 admin optional xdg-dbus-proxy_0.1.6-1+= deb13u1_source.buildinfo 6d38a1b6bba80a3134270204558ba17e 48920 admin optional xdg-dbus-proxy_0.1.6.o= rig.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEegc60a5pT6Jb/2LlI1wJnT6zMHYFAmnctEMACgkQI1wJnT6z MHYb2w//SGl5pA+JNqMHjx0pNOej8qV7okTYB2y6JkyxxtHXWBvv98+a2LTz6m8q GKNK61t+kEjD+p1OJym64QqMwG/YlD9GEf+A4HygpRtN3PQVkRs1ghxcbVQW5eSp Oi9weaDIXFxOWfX9ss+NaiVQ1oAnbmsaLEJRL5LnC9WiTMBEVERfep320SR7tu3i LbEq0+fpXt3omUkNo1M3eloirQ3HEL8RL1m/w2RDjEfJ0LcAGyjcMdb0TpLaB3Xf eGTnlUBT6yEReyHVja0CAsadTb/YkVQOsEeUEwl8Ldlov+qxh1x4hQQ6Vbtczgom DUdkA8wCsnu2bAA9pSL9CVkEIYu8WAUMk7x7hVtwovYDwYCpie0xKQncZHmbwz1F Pst2cp1baWsVYECbhb9uw9XJYVDbJcqoxcCmYgywFR/nLnwArCedpWsnEP1uztIv nDsGjpvJMYos3WBQNXv5Cl1442m+myujqXuwgtVthicfkgw7OfgdklbRP5ABMpsH 5TfKfQmWWHgElc/iW3svGAykPcikt5DbxrYBqKpEINu21IqKs9WUJQgGOcP6PXH3 TZRxonrgO1BWb+HscwqsmqHI/Bh922+sU69kOm1RD8XdKdb3TzayMlhcnnj8Alu0 t3sJu1kCyoTes8PBwoN4OnRiUUFYjfdgymF7KiUTHveCePsQ/yo=3D =3DinYT -----END PGP SIGNATURE----- --===============4877288734455472516== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaeOhSwAKCRCb9qggYcy5 ISarAP9v/VRQLHmiUVLyYbrPD2mckdpRmSrA7HxceZUkknqergD/QQDyGnINNIcR PGTVNtUfRKryxn7MYDhDJchHAYwagA0= =0z8a -----END PGP SIGNATURE----- --===============4877288734455472516==-- ]