[Pkg-utopia-maintainers] bubblewrap_0.11.2-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 23 Apr 2026 12:25:34 +0100
Source: bubblewrap
Architecture: source
Version: 0.11.2-1
Distribution: unstable
Urgency: medium
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers at lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv at debian.org>
Closes: 1134704
Changes:
 bubblewrap (0.11.2-1) unstable; urgency=medium
 .
   * New upstream release
     - Fixes a root privilege escalation vulnerability if bwrap has been
       made setuid root locally (CVE-2026-41163, Closes: #1134704).
       Most Debian systems have a non-setuid bubblewrap and therefore
       are unaffected by this.
   * d/rules: Temporarily allow bubblewrap to be setuid root.
     This configuration is a security risk and rarely necessary, so the
     option is deprecated, and a future upstream version will
     unconditionally refuse to run if it detects that it has been run
     setuid root.
   * d/README.Debian: Update to reflect deprecation of setuid-root bwrap
   * d/NEWS: Mention deprecation of setuid-root mode
Checksums-Sha1:
 fbc9e7a54ab37f026b282ab29559f222020f7acc 2427 bubblewrap_0.11.2-1.dsc
 ac91654c2d5563cb512f5f4f2963664e31d82d26 116336 bubblewrap_0.11.2.orig.tar.xz
 2439262de549a5da4c584ed8320ceabd018b2250 13004 bubblewrap_0.11.2-1.debian.tar.xz
 de325b1460f4b143fa6418207022fa737ca29b8c 7300 bubblewrap_0.11.2-1_source.buildinfo
Checksums-Sha256:
 ffa604cd84eb4bd47e17c6369ca473816c5aab7f838f22b8fc5997ba780f7a4b 2427 bubblewrap_0.11.2-1.dsc
 69abc30005d2186baf7737feacd8da35633b93cf5af38838ecff17c5f8e924f6 116336 bubblewrap_0.11.2.orig.tar.xz
 ae5a41479277ebf5c893a75dfae9334aa57eba80cfc6aa21dfcd0981c70310ff 13004 bubblewrap_0.11.2-1.debian.tar.xz
 98be11bbcfd30fb0a6333940510ea76fc186d9a39f49fce1dfacc22fdd6a464a 7300 bubblewrap_0.11.2-1_source.buildinfo
Files:
 3b37d9616a9b1bf83acfafcd6820277b 2427 admin optional bubblewrap_0.11.2-1.dsc
 6376255e2e505100e01b20c2dafa7faf 116336 admin optional bubblewrap_0.11.2.orig.tar.xz
 cc43a86a8cf7f466622bf22260f3469e 13004 admin optional bubblewrap_0.11.2-1.debian.tar.xz
 483dd999e248743b2c5c9b9d38ff4dd9 7300 admin optional bubblewrap_0.11.2-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEegc60a5pT6Jb/2LlI1wJnT6zMHYFAmnqBVgACgkQI1wJnT6z
MHanJA/9GTh/l+UI3FSd40tdAlFsz2ttCgE8NTwT5qDPeH8rtIuU95ER/NBNu42b
trpRo0aPis1W7aT5a81zpMU+lOZUt/35LUKyOmms2pDMlIPGPa6fg/+z/+ZFxYw3
YaupR7bu/NGgxDqvwQffZte9JLZ6mrngpIEOxUpZtLQGrbTT39HjDQLzJ1oe/L/T
u/kYzjS/PQJeR7Zbkt1YopkUBYf0KMejTSDA5ywYIZU6zCqOWakaeUN4TnX+HRjd
YR+47sELGKDkxJeRAPGzE014o3f86CSvoeq8jFTHXIx4cF1iRYRIGmSXGr8NjdgL
KKXifGLZAuPWE9U7iLIvT5hK1DQgD1rGPB4gb/5M+C7HTTtysINWX33Podrnlv4N
3pbRoaQqqI25zX5mShtODzPTBxnhrsusOn3I6hXNUotYIvrrt2FqnMle8nKN+vle
mtsnuQS9MYIs9ydiNBKlzt6s6dNOpvlfin6dYyx/wvx608F5wIj7/NLn+OZmmlkr
rTqIkV8kg7vkkUM8PaK/DbeO6Vi4sjR+gXaSYGnV2V5okbeDkdVuDWiTHbn+ZNo6
prIgVfg5px4dFYWIFn2PZL20yk3G5b1mX1nK0JiZCYFqWYUcq6abgpjU2xbkhJWt
pBaFl+HHjVIzXCnX+DQjmKPofbcgtqB+dDP+GkuQuKq2y4/sdWw=
=pwqS
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20260423/fc45f057/attachment.sig>