[From nobody Sat Apr 25 11:51:05 2026 Received: (at 1132939-close) by bugs.debian.org; 25 Apr 2026 10:50:42 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.7 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PDS_BTC_ID,PGPSIGNATURE,SPF_HELO_PASS, SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 81; hammy, 150; neutral, 182; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:59744) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wGaaw-000QlA-2X for 1132939-close@bugs.debian.org; Sat, 25 Apr 2026 10:50:42 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wGaav-00HAo9-1Z for 1132939-close@bugs.debian.org; Sat, 25 Apr 2026 10:50:41 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=UnUYiNOOc/htUgBuuz5Q13GyoklsSZfCirtjoPwBx+Q=; b=fJc9ZMDPtCjbkuzSGSHQHuAhZz eOZqLtN/EnTByCip9FWkJef9xl+mEXEueojC6y17mb44fUQPOKyNy1bMmJUQ2/f84uA+3gmu1O0y9 JB2seBt8GuxJRk6h4kRn3ffMzuiYopXryXaLJmTSY+lvzxIFVd12k+e7iaMOvV6yleOe0GVINu0OG TKtz1Rjf2KtqEZIEjnIlk+7KaDuMv/WleT6qu8V8HFrz/zXqMKeT3OJ6umCSYUgjSfKQqp5HwCQaT 7RiKkBqacZRAtcoxSxZH4JBaDDD+UE/xZi60E7lxlAL8nV+1o1rSm1dxlpq1tJp5BHcW6MHx33Hhc VGxe+9MQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wGaau-00000009zdF-2DuQ; Sat, 25 Apr 2026 10:50:40 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Simon McVittie <smcv@debian.org> To: 1132939-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: xdg-dbus-proxy Debian: DAK Debian-Changes: xdg-dbus-proxy_0.1.4-3+deb12u1_source.changes Debian-Source: xdg-dbus-proxy Debian-Version: 0.1.4-3+deb12u1 Debian-Architecture: source Debian-Suite: oldstable-proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1132939: fixed in xdg-dbus-proxy 0.1.4-3+deb12u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8335557937074383716==" Message-Id: <E1wGaau-00000009zdF-2DuQ@fasolo.debian.org> Date: Sat, 25 Apr 2026 10:50:40 +0000 --===============8335557937074383716== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: xdg-dbus-proxy Source-Version: 0.1.4-3+deb12u1 Done: Simon McVittie <smcv@debian.org> We believe that the bug you reported is fixed in the latest version of xdg-dbus-proxy, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1132939@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Simon McVittie <smcv@debian.org> (supplier of updated xdg-dbus-proxy package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 15 Apr 2026 20:27:48 +0100 Source: xdg-dbus-proxy Architecture: source Version: 0.1.4-3+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debi= an.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1132939 Changes: xdg-dbus-proxy (0.1.4-3+deb12u1) bookworm-security; urgency=3Dhigh . * d/gbp.conf: Configure for bookworm * d/p/Fix-GVariant-reference-leaks.patch: Add patch from upstream 0.1.6 fixing some memory leaks. As well as being a desirable bug fix, this is necessary for the fix for CVE-2026-34080 to apply cleanly. * d/p/flatpak-proxy-Use-g_autoptr-in-validate_arg0_match.patch, d/p/Improve-detection-of-eavesdrop-true.patch: Fix detection of eavesdrop=3Dtrue match rules, resolving a vulnerability in which a malicious or compromised Flatpak app could monitor D-Bus traffic that it was not intended to be able to access. (CVE-2026-34080) (Closes: #1132939) Checksums-Sha1: 3d0cd110f4ecb9df6654b9be45d554dce25a4fc6 2232 xdg-dbus-proxy_0.1.4-3+deb12u1= .dsc b64d4c4d2c3e947b7edbe5b423eddcc5d2fbdcfb 122112 xdg-dbus-proxy_0.1.4.orig.ta= r.xz 584dae99326803af581dc579ddf7a28a2cfb72fd 6984 xdg-dbus-proxy_0.1.4-3+deb12u1= .debian.tar.xz 984c83abeb4cf3a17f80b3cb09c3e071988a7d6a 7691 xdg-dbus-proxy_0.1.4-3+deb12u1= _source.buildinfo Checksums-Sha256: 5e4de92871f60585ef9c23241476ab8d651f3af169fb82c095f3e3f82e28b9cf 2232 xdg-db= us-proxy_0.1.4-3+deb12u1.dsc 1ec0eab53d1e49966d722352bcfd51ac402dce5190baedc749a8541e761670ab 122112 xdg-= dbus-proxy_0.1.4.orig.tar.xz 40d561da6af2b94cffcf99bbcde771231a1fbdaf724d52fe2a5ae778d43b6fdb 6984 xdg-db= us-proxy_0.1.4-3+deb12u1.debian.tar.xz 9f5ffd782fd9e4ea2550cf2e04f9f5740e91de7c24cb80f5853850db3e5a768b 7691 xdg-db= us-proxy_0.1.4-3+deb12u1_source.buildinfo Files: 1748f34fa84d9a181941c856c83d4d44 2232 admin optional xdg-dbus-proxy_0.1.4-3+= deb12u1.dsc 89d166170e871b3288e8980aee599ae4 122112 admin optional xdg-dbus-proxy_0.1.4.= orig.tar.xz a202a42543a11466aaf370da4e814774 6984 admin optional xdg-dbus-proxy_0.1.4-3+= deb12u1.debian.tar.xz a18a658489660ea4989a99d555b3f521 7691 admin optional xdg-dbus-proxy_0.1.4-3+= deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEegc60a5pT6Jb/2LlI1wJnT6zMHYFAmnnNCAACgkQI1wJnT6z MHYoTw/9FnWgx0NoF3gyKQLMTlS26gg4PRAlUWfpIPUU19JsLHzFFf0F6drAlqcX Mwp+6YR1j+zImKXJ8Xom5oWjKekH1kwiBPjW5pDqIz0kjULFTGhwEMZqIQTzZ82Z jt30ii3w94ubqVJEeaaBrbot70znJTfbmEBPrX/iX/1Eo1WJK/J8nZ2JTVhk1YxG LGxLXTM9X9TBz18CwI9/hrWCRm8bmnvjc+F5/7gZU6hQmhgHb3UTVi9Fffxpn8Cy dWgfVePewFLw4OyZPNSM6p961ST5yutOmGheUPZYd8dJl9e4vjYX5wm6Jv3SCdXN ygQucBOJM7hn0o/pBcA1QR5lRm75bUVRtdavjE7xy1TcUmHZK0N+wm8hW3ypcyuV cTn0wdIUYwvx1spYNBo9goBwRf/0Pq5cafcFiz06H+ywZ4c89oM6vef7pfdjCUyV l/qCF7QjyZnwF/q/vhFRcrzEd62YyG61sXI/Fwn8BfV4hWnSSZ3lt1BDTOblmYHk KXrzrX7RrjozBG3R5SuGiDc7tFXcjh0+lQzfBkPkgLzlzmUqojO3bqJpETVy/tBi 4/NAAnwTopsa07GbGHnV1J91g59mKyaFMFuhbX2ljgq2L5S1LtHce8Os/ry33K7K cBtFpxuuZ4x4DPNJQqzfOI76hdtRuwKPN3N7MbSUExjnMFovOLQ=3D =3DNcQx -----END PGP SIGNATURE----- --===============8335557937074383716== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaeycgAAKCRCb9qggYcy5 IWuNAP4hmgiwHNdgqr2xp1iGO6g6e5eZ1vrTrgmpQux8hN6NNgD/UJXQOVcyPObN JnXDnxHXjqDUz/SJqZGtspC98gPCGwY= =YZxn -----END PGP SIGNATURE----- --===============8335557937074383716==-- ]