-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Aug 2024 10:04:08 +0100
Source: bubblewrap
Binary: bubblewrap bubblewrap-dbgsym
Architecture: mipsel
Version: 0.8.0-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: mipsel Build Daemon (mipsel-osuosl-05) <buildd_mips64el-mipsel-osuosl-05@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 bubblewrap - utility for unprivileged chroot and namespace manipulation
Changes:
 bubblewrap (0.8.0-2+deb12u1) bookworm-security; urgency=high
 .
   * d/gbp.conf: Use debian/bookworm packaging branch for Debian 12
   * d/p/Add-bind-fd-and-ro-bind-fd-to-let-you-bind-a-O_PATH-fd.patch:
     Backport new --[ro-]bind-fd feature from upstream release 0.10.0.
     This is necessary to resolve CVE-2024-42472 in Flatpak without
     introducing a potentially exploitable race condition.
Checksums-Sha1:
 fb2333f7d3fadde341a5bb2efc1918d15da1196d 77836 bubblewrap-dbgsym_0.8.0-2+deb12u1_mipsel.deb
 ed046f3a44f7ddca425aab95ceb6c5a8978a8c66 7288 bubblewrap_0.8.0-2+deb12u1_mipsel-buildd.buildinfo
 78881fc61b6ca616614ecaf181dcc6c46736b768 45884 bubblewrap_0.8.0-2+deb12u1_mipsel.deb
Checksums-Sha256:
 dfb5a0ac8077d13068c173fd3bedcac8ffcf2f22699f65efcfae65b82b423d6f 77836 bubblewrap-dbgsym_0.8.0-2+deb12u1_mipsel.deb
 93c6657e8a615620d92f1bba646ece61f3b1a38ba79075bc15b553899c6931a5 7288 bubblewrap_0.8.0-2+deb12u1_mipsel-buildd.buildinfo
 90a112ac734d7df239df0c192229db15e3e6af0639155047364ef523d07b21b6 45884 bubblewrap_0.8.0-2+deb12u1_mipsel.deb
Files:
 5e2ea97fc5b52f2c9ce38e77b216cd1e 77836 debug optional bubblewrap-dbgsym_0.8.0-2+deb12u1_mipsel.deb
 150385a3905d67667643c302de450fe0 7288 admin optional bubblewrap_0.8.0-2+deb12u1_mipsel-buildd.buildinfo
 6a271a5c7bdea1e8c4d281b270c02617 45884 admin optional bubblewrap_0.8.0-2+deb12u1_mipsel.deb

-----BEGIN PGP SIGNATURE-----
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=y/sN
-----END PGP SIGNATURE-----