-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Apr 2026 23:59:07 BST
Source: xdg-dbus-proxy
Architecture: source
Version: 0.1.6-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Closes: 1132939
Changes:
 xdg-dbus-proxy (0.1.6-1+deb13u1) trixie-security; urgency=high
 .
   * d/gbp.conf: Configure for trixie
   * d/p/Improve-detection-of-eavesdrop-true.patch:
     Fix detection of eavesdrop=true match rules, resolving a vulnerability
     in which a malicious or compromised Flatpak app could monitor D-Bus
     traffic that it was not intended to be able to access.
     (CVE-2026-34080) (Closes: #1132939)
Checksums-Sha256: 
 a61ba827ec23029ed746364a73484d318c1763ed0eac951755013d2d81e62bb3 2229 xdg-dbus-proxy_0.1.6-1+deb13u1.dsc
 2c5aa245b89b4711ebad0a1f21d581cc5a6d5e293621f045dbfb7cc53e783f71 5164 xdg-dbus-proxy_0.1.6-1+deb13u1.debian.tar.xz
 d1383aa7d0bc1cdc863353dd99ffd8250523288e6f42e8e60d818800692f30ac 7697 xdg-dbus-proxy_0.1.6-1+deb13u1_source.buildinfo
 131bf59fce7c7ee7ecbc5d9106d6750f4f597bfe609966573240f7e4952973a1 48920 xdg-dbus-proxy_0.1.6.orig.tar.xz
Checksums-Sha1: 
 b02bd14a3f35ac5ea7a4dd31982b563d4b9f261b 2229 xdg-dbus-proxy_0.1.6-1+deb13u1.dsc
 a8bf512338cf6d88998ce0469b9270b461d6d4fa 5164 xdg-dbus-proxy_0.1.6-1+deb13u1.debian.tar.xz
 1c4b1cb0104b9c6be1a72352a1180f8514f9c289 7697 xdg-dbus-proxy_0.1.6-1+deb13u1_source.buildinfo
 1792c13b329e535f4d75949cd722d5c3177552fa 48920 xdg-dbus-proxy_0.1.6.orig.tar.xz
Files: 
 861c9cd3901d028d26cdc018f0a555c1 2229 admin optional xdg-dbus-proxy_0.1.6-1+deb13u1.dsc
 43cd53ac059978a5fa088cea4fc7f722 5164 admin optional xdg-dbus-proxy_0.1.6-1+deb13u1.debian.tar.xz
 dfbd6771d4bf1b8a510fb05b557c4fd2 7697 admin optional xdg-dbus-proxy_0.1.6-1+deb13u1_source.buildinfo
 6d38a1b6bba80a3134270204558ba17e 48920 admin optional xdg-dbus-proxy_0.1.6.orig.tar.xz

-----BEGIN PGP SIGNATURE-----
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=inYT
-----END PGP SIGNATURE-----