[Pkg-utopia-maintainers] xdg-dbus-proxy_0.1.8-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 11 Aug 2026 13:32:52 +0100
Source: xdg-dbus-proxy
Architecture: source
Version: 0.1.8-1
Distribution: unstable
Urgency: high
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers at lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv at debian.org>
Closes: 1144129
Changes:
 xdg-dbus-proxy (0.1.8-1) unstable; urgency=high
 .
   * New upstream release
     - Fix a vulnerability in access control for receiving broadcasts.
       In 0.1.6 and 0.1.7, a malicious or compromised Flatpak app could
       receive any broadcast D-Bus message on the session bus or the AT-SPI
       bus, leading to unintended information disclosure.
       (GHSA-r7hp-698j-2h6c, Closes: #1144129)
   * Mention #1132939 in previous changelog entry
Checksums-Sha1:
 d6799fbaa9f8a0a30d8840b19e1491b091cf41f9 2489 xdg-dbus-proxy_0.1.8-1.dsc
 af6ea4ef33583b518cb2945bc6d51c3d59226077 45932 xdg-dbus-proxy_0.1.8.orig.tar.xz
 254da82c0ab966757adea2fac3a51d55ded73422 4416 xdg-dbus-proxy_0.1.8-1.debian.tar.xz
 0cd1f3c9799f1b63f428e61111134448150524da 110888 xdg-dbus-proxy_0.1.8-1.git.tar.xz
 ffa7d4bc5b15d48c402f777c78241dd6305f736e 17580 xdg-dbus-proxy_0.1.8-1_source.buildinfo
Checksums-Sha256:
 6608f6d6ce803a431707a9f62bdc9be22fba6d7acc23425ea7f50e1dda8b2bc2 2489 xdg-dbus-proxy_0.1.8-1.dsc
 b6630bd24f8161b0e2546d2acbb014a3b3249f5c0d75f2a863ade898b9034d3d 45932 xdg-dbus-proxy_0.1.8.orig.tar.xz
 75a01f0fdd2b358e48ed313ab5362c52ca1bb49805fa07a95437c5be26f86154 4416 xdg-dbus-proxy_0.1.8-1.debian.tar.xz
 dfefbbd1a17925bc3cbacbf0fd4e165948116385ca0a056ae6490f3f020d38ba 110888 xdg-dbus-proxy_0.1.8-1.git.tar.xz
 d027f7fc496dedef3a849972b761fe4a20ed19c005dc870b7a38129974168a77 17580 xdg-dbus-proxy_0.1.8-1_source.buildinfo
Files:
 1558ae5bb8cf285df6c84309279b6d46 2489 admin optional xdg-dbus-proxy_0.1.8-1.dsc
 1a7b7a5f82653163495e82f7c9da7a36 45932 admin optional xdg-dbus-proxy_0.1.8.orig.tar.xz
 5b8bd9111953349bcc12c8db306e90a4 4416 admin optional xdg-dbus-proxy_0.1.8-1.debian.tar.xz
 8ea414b5d1871ba6decd64534c28f7aa 110888 admin optional xdg-dbus-proxy_0.1.8-1.git.tar.xz
 a97d8cafc5a31168b8636dfd3133d706 17580 admin optional xdg-dbus-proxy_0.1.8-1_source.buildinfo
Git-Tag-Info: tag=0940799236ea1e098f48ebb170cdc3a8acd3ee91 fp=7a073ad1ae694fa25bff62e5235c099d3eb33076
Git-Tag-Tagger: Simon McVittie <smcv at debian.org>

-----BEGIN PGP SIGNATURE-----
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=//Jl
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20260811/f490fafe/attachment.sig>