Format: 1.8
Date: Tue, 11 Aug 2026 13:43:30 +0100
Source: xdg-dbus-proxy
Architecture: source
Version: 0.1.6-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Changes:
 xdg-dbus-proxy (0.1.6-1+deb13u2) trixie-security; urgency=high
 .
   * d/p/GHSA-r7hp-698j-2h6c/*.patch:
     Fix a vulnerability in access control for receiving broadcasts.
     In 0.1.6 and 0.1.7, a malicious or compromised Flatpak app could
     receive any broadcast D-Bus message on the session bus or the AT-SPI
     bus, leading to unintended information disclosure.
   * d/p/tests/*.patch:
     Add automated test coverage for message filtering
Checksums-Sha1:
 0637b39563f4518ba5e28da413ed650ab433150c 1349 xdg-dbus-proxy_0.1.6-1+deb13u2.dsc
 d88efeb7f219417e545e545e58c7ff3828bc1e28 13136 xdg-dbus-proxy_0.1.6-1+deb13u2.debian.tar.xz
 528c62c7394843f1f9090ed8e5a0a162907bc160 6896 xdg-dbus-proxy_0.1.6-1+deb13u2_source.buildinfo
Checksums-Sha256:
 0228c6e9674a413bb8f402776c99a9d2d7f6617c3a707918a06521dbfc4b15dc 1349 xdg-dbus-proxy_0.1.6-1+deb13u2.dsc
 bb5a6e8e997a022fda2efaaebf770a784cb30571d572df4945882bb747f9fca8 13136 xdg-dbus-proxy_0.1.6-1+deb13u2.debian.tar.xz
 1c863fa6c228097b2a00c60d8716908f46f437d8bfa72891e52b0f6471c037ad 6896 xdg-dbus-proxy_0.1.6-1+deb13u2_source.buildinfo
Files:
 d230c944df960f19ec5638d82caf37c5 1349 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2.dsc
 a6487c6623de5d900ea4bffb2053d518 13136 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2.debian.tar.xz
 b8371b4aa7b9a626398164644d7089e0 6896 admin optional xdg-dbus-proxy_0.1.6-1+deb13u2_source.buildinfo