-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 29 Oct 2026 17:22:30 +0100 Source: patch Architecture: source Version: 2.8-2+deb13u1 Distribution: trixie Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) Changed-By: Laszlo Boszormenyi (GCS) Changes: patch (2.8-2+deb13u1) trixie; urgency=medium . * Backport upstream fix for CVE-2026-115207: prevent creation of out-of-tree files. Checksums-Sha1: 8e77a37f1ed32f6a1208f64f7a31881eae781a00 1724 patch_2.8-2+deb13u1.dsc 19271118f4d08ff58088689bd44eeaa3514d9d33 10248 patch_2.8-2+deb13u1.debian.tar.xz Checksums-Sha256: 239b26af3faed4f0c3efa65a9a288c19764ae5b8050b0fc3ce2bfdad1dcf5bfc 1724 patch_2.8-2+deb13u1.dsc c52f4a6086db53d8efd31485c7ec71047759a2a7a257da8643410e01ceef6587 10248 patch_2.8-2+deb13u1.debian.tar.xz Files: 51106f6ddff2f3be76c771e9d338ceb5 1724 vcs optional patch_2.8-2+deb13u1.dsc 8a8c832c5edbef3dd52a4ca848491c77 10248 vcs optional patch_2.8-2+deb13u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmruU3wACgkQ3OMQ54ZM yL9etA/9EPLk9rE7OWiHRfawUP/rK/Ai1AV4m0UJ307twv219XYyr8GrMIIBc42R sPGzcv6U5kajvcpha+bsoQdMVTKx47w+L4lqYcYdPlqiGoDPmmDYy3LYzPsv67aU sUkvDVlrmdBI5cPxaTudOXlPUHmDIN5SCHBWvMAmk2XvjYYcjf9WIIyk0vJhJJwj BrJzKUgSsZVJqfLpOnBSbsN6z6zsYSuwcNOE92OKRYWr7TzOLQYb+0dAkVBprGax AAsnyHfIVtwnbNHO4MZ98PCWgO0OSXWj18R2VoTCchdZ8di7S2NcWMjjktw1ctYq oOxMutBulHyfCuKRJDn3GeHHE9GK3E31siYS7Ce7JopRSg22drxutDKw49WroU09 5/T4fSCSaornsf6JnIkEjLD8hDFvLG0pnkaXpteTPHVXN28SjWSTJL8eWcs27xa4 yg46j+jFhw2YxCgsJXLUja9+zszym8yuUGHIvgF0CKllCrny6TkOyzHasp/78kX/ 4cc01uu5FA3r5EC+Mu13HCGsDolRBPd11fEV5kcpTSSsXSzeW7ZI1vB8Kp4hAxFz XXzuAF/IgHdQuUngFR8dPcyZzxje/sRKZHtoNhCTjgF5oeOCW2I4vWpYKtCKyC7U XQHrzmjZAiW0nYdyo7GHRnmktxJwV/k4fs+onJFxGx4YP6dOPiQ= =Avq9 -----END PGP SIGNATURE-----