[From nobody Tue Aug 11 14:21:05 2026 Received: (at 1144129-close) by bugs.debian.org; 11 Aug 2026 13:18:51 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-112.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,MONEY,PDS_BTC_ID, PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS,STOCKLIKE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 94; hammy, 150; neutral, 166; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:37756) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wtmNX-00Ayub-2L for 1144129-close@bugs.debian.org; Tue, 11 Aug 2026 13:18:51 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wtmNW-004lvQ-1L for 1144129-close@bugs.debian.org; Tue, 11 Aug 2026 13:18:50 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=hw1CObRag4tqUlOticCqYBIAVnnCtWQZGDfYRkYg5+w=; b=NQIvfafNBCKzojOWnZOeCOFO7P rahsNTLhzDFxOU2zwFWXVH0GJxCh4a6ApICQ8+7sW3ErqOCFDmMQDS2oC3fJ2d+WyU+AMyjUMxFH7 554MMHOqUN6P87XlI0xqoRMiLf0+LmeyG+q/lJhywaNzxZktCun3MzV+LcG1gFpCq+L8BizoTvOFt DhJGNKY1Yb0Q38fvqtTCxlCxC8l7faAaKX6o8boFXhE/EoL7+yY0ZgN4JzOQn9/CwSVDn62HC3IcE GU3nDUbRLVSoGOp5MgsihSN6XYODeZxpJRhA0KLLQY7iB3UeDV5i3kc20sktoYz2GTrDXN9yN8sdk OBc7OAag==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wtmNV-000000068PY-2DS4; Tue, 11 Aug 2026 13:18:49 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Simon McVittie <smcv@debian.org> To: 1144129-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: xdg-dbus-proxy Debian: DAK Debian-Changes: xdg-dbus-proxy_0.1.8-1_source.changes Debian-Source: xdg-dbus-proxy Debian-Version: 0.1.8-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1144129: fixed in xdg-dbus-proxy 0.1.8-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2561469027279684159==" Message-Id: <E1wtmNV-000000068PY-2DS4@fasolo.debian.org> Date: Tue, 11 Aug 2026 13:18:49 +0000 --===============2561469027279684159== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: xdg-dbus-proxy Source-Version: 0.1.8-1 Done: Simon McVittie <smcv@debian.org> We believe that the bug you reported is fixed in the latest version of xdg-dbus-proxy, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1144129@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Simon McVittie <smcv@debian.org> (supplier of updated xdg-dbus-proxy package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Aug 2026 13:32:52 +0100 Source: xdg-dbus-proxy Architecture: source Version: 0.1.8-1 Distribution: unstable Urgency: high Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debi= an.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1144129 Changes: xdg-dbus-proxy (0.1.8-1) unstable; urgency=3Dhigh . * New upstream release - Fix a vulnerability in access control for receiving broadcasts. In 0.1.6 and 0.1.7, a malicious or compromised Flatpak app could receive any broadcast D-Bus message on the session bus or the AT-SPI bus, leading to unintended information disclosure. (GHSA-r7hp-698j-2h6c, Closes: #1144129) * Mention #1132939 in previous changelog entry Checksums-Sha1: d6799fbaa9f8a0a30d8840b19e1491b091cf41f9 2489 xdg-dbus-proxy_0.1.8-1.dsc af6ea4ef33583b518cb2945bc6d51c3d59226077 45932 xdg-dbus-proxy_0.1.8.orig.tar= .xz 254da82c0ab966757adea2fac3a51d55ded73422 4416 xdg-dbus-proxy_0.1.8-1.debian.= tar.xz 0cd1f3c9799f1b63f428e61111134448150524da 110888 xdg-dbus-proxy_0.1.8-1.git.t= ar.xz ffa7d4bc5b15d48c402f777c78241dd6305f736e 17580 xdg-dbus-proxy_0.1.8-1_source= .buildinfo Checksums-Sha256: 6608f6d6ce803a431707a9f62bdc9be22fba6d7acc23425ea7f50e1dda8b2bc2 2489 xdg-db= us-proxy_0.1.8-1.dsc b6630bd24f8161b0e2546d2acbb014a3b3249f5c0d75f2a863ade898b9034d3d 45932 xdg-d= bus-proxy_0.1.8.orig.tar.xz 75a01f0fdd2b358e48ed313ab5362c52ca1bb49805fa07a95437c5be26f86154 4416 xdg-db= us-proxy_0.1.8-1.debian.tar.xz dfefbbd1a17925bc3cbacbf0fd4e165948116385ca0a056ae6490f3f020d38ba 110888 xdg-= dbus-proxy_0.1.8-1.git.tar.xz d027f7fc496dedef3a849972b761fe4a20ed19c005dc870b7a38129974168a77 17580 xdg-d= bus-proxy_0.1.8-1_source.buildinfo Files: 1558ae5bb8cf285df6c84309279b6d46 2489 admin optional xdg-dbus-proxy_0.1.8-1.= dsc 1a7b7a5f82653163495e82f7c9da7a36 45932 admin optional xdg-dbus-proxy_0.1.8.o= rig.tar.xz 5b8bd9111953349bcc12c8db306e90a4 4416 admin optional xdg-dbus-proxy_0.1.8-1.= debian.tar.xz 8ea414b5d1871ba6decd64534c28f7aa 110888 admin optional xdg-dbus-proxy_0.1.8-= 1.git.tar.xz a97d8cafc5a31168b8636dfd3133d706 17580 admin optional xdg-dbus-proxy_0.1.8-1= _source.buildinfo Git-Tag-Info: tag=3D0940799236ea1e098f48ebb170cdc3a8acd3ee91 fp=3D7a073ad1ae6= 94fa25bff62e5235c099d3eb33076 Git-Tag-Tagger: Simon McVittie <smcv@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmp7HKoACgkQYG0ITkaD wHlEYg/6AjpleeeS9c20sQVqqODhmJfIJ3QhESKjopUc3rNo+5cWvcc41Tq7SiJb wB1jKmd18PkkY5Rsm3yMJkah5cAntBIHOelITsVBcTuS8IzxoG9ofY/0bFt4CqP7 9GQ3lHHTcJDv0mQlpGvuvrr1nJcD48HMUV9iue8VEjU44zuL6LGHBhTr7pEmg6+e bdt9aigB3yHlzSzhpltuJQUzjC5Mk8qNRFnlL5czUHmhwvCCCth4+pAyINlmXfVs eyP0dPEVywKKn0F73EUZdyiD2AhFuyoJ6rVaRG+jFSYjwR010UX3I7fhR36l3U2G yGIavum/90Bm6MFgnprb9ikzFfwRSJISduV1WNDT5GsNduxsx3yLsRJ9xU8CRasz x5Xw4YDAGVlBvNVVd2GolSfmwnYrJ/TyjwRJZJNt6vFcBYU7b1kA+JdiXUYYnU6d fymmapcG99lc72oro2frsoIyG0hbT4CpHFpJqdbOEzvVYzLXrh9HnS/7zKksAVKb YkWQ/c9sDDdvolzPrc0yfvItZV08Ru6P/St7qR+cKBW9ypoV2WBt5oQGvajVAfdm 833GMRNWG/jM2TMiuSjM96Z8SUGFDeNg77deLrwKSbaKdzGhKfKLnisvm82aFRnJ od37GRoWaDfKEeXQ1+TOoK/si4/2tGZePU4h7nS8DGDAFYysNRs=3D =3D//Jl -----END PGP SIGNATURE----- --===============2561469027279684159== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCanshOQAKCRCb9qggYcy5 IYCCAP4y8g0la508EXTcQy8vO3B1HIHqqpLZ3MhQj2ns4xoxbQEAh+vjcgSUXyiZ WRjyaAEcjrmNFbIvfqM7kcHyeK3Dvw8= =oI0v -----END PGP SIGNATURE----- --===============2561469027279684159==-- ]