-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 07 Mar 2026 13:15:41 +0100 Source: dpkg Binary: dpkg dpkg-dbgsym dselect dselect-dbgsym libdpkg-dev Architecture: mipsel Version: 1.21.23 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Guillem Jover Description: dpkg - Debian package management system dselect - Debian package management front-end libdpkg-dev - Debian package management static library Closes: 1061404 1065575 1070010 1107971 1108192 1129722 Changes: dpkg (1.21.23) bookworm; urgency=medium . [ Guillem Jover ] * dpkg-deb: Fix cleanup for control member with restricted directories. Reported by zhutyra on HackerOne. Fixes CVE-2025-6297. * Perl modules: - Dpkg::BuildDriver::DebianRules: Fix uninitialized Perl variables. Closes: #1107971 - Dpkg::BuildDriver::DebianRules: Fix R³ dpkg/target/ values handling. * Code internals: - libdpkg: Fix varbuf memory leak in pkg_source_version(). - dpkg-deb: Initialize threads_max in no-uniform-compression mode. - libdpkg: Handle tar long GNU names and links not being NUL terminated. Closes: #1061404 - libdpkg: Do not segfault when adding triggers in no-act mode. Closes: #1108192 - libdpkg: Terminate zstd decompression when we have no more data. Reported by Yashashree Gund . Closes: #1129722 Fixes CVE-2026-2219. * Build system: - Build gitlab CI images for bookworm instead of sid. * Localization: - Fix typos in Swedish man pages translations. Closes: #1065575 - Update Swedish translations. Thanks to Peter Krefting . Closes: #1070010 . [ Helge Kreutzmann ] * Localization: - Update German man pages translation. Checksums-Sha1: 4c5d928883167a880737e344ee2aa2aadc881880 1172804 dpkg-dbgsym_1.21.23_mipsel.deb 756c5e8f509a6e75f9a8971d3a870e6f655bf100 7519 dpkg_1.21.23_mipsel-buildd.buildinfo a6f30b23250b722ffec66870aa7b2b6b2a9f23fd 1571220 dpkg_1.21.23_mipsel.deb f318eb6e027f1955d13e4a34cab9e95fac7f19bb 274708 dselect-dbgsym_1.21.23_mipsel.deb b0bc45017dc8655dee40f6b1b70622208dc9d027 562804 dselect_1.21.23_mipsel.deb 23f9789757a7f44c027751abf61bd614a4306771 366344 libdpkg-dev_1.21.23_mipsel.deb Checksums-Sha256: ca373a8cc31cae4c11323b8db9349beabbbc9b23b290cbe2b6d9a9cf09c79f4f 1172804 dpkg-dbgsym_1.21.23_mipsel.deb 091251242289f1ee5d796a49b6df0fed2e3cc0cb24a8a1e0663a41c95dc7ee26 7519 dpkg_1.21.23_mipsel-buildd.buildinfo f63c6aa912394b0e59b0bc8b9b2b9b469ca684bdd0817eef936d3221f5627e00 1571220 dpkg_1.21.23_mipsel.deb 9a3cb2ce0257d5729a49d01e686809ec445fec539bd289c995da59d0ecd0d5f4 274708 dselect-dbgsym_1.21.23_mipsel.deb 83b99b40113f2754ad52ab2ab586ac50cccda88b30fc41d55304af1208710c56 562804 dselect_1.21.23_mipsel.deb 02993d3c7de86c2d8e214d44c02743122fea9258b293aedb96b77205d2895fb0 366344 libdpkg-dev_1.21.23_mipsel.deb Files: 4e3b8b04fea2b9c60a21514f971e0759 1172804 debug optional dpkg-dbgsym_1.21.23_mipsel.deb 30fdbfd4d1c81797e41d59fe22fe0c38 7519 admin required dpkg_1.21.23_mipsel-buildd.buildinfo 85a3413927068c45ba88eff72bb27877 1571220 admin required dpkg_1.21.23_mipsel.deb 9d02da358733852f59523b45cd464eec 274708 debug optional dselect-dbgsym_1.21.23_mipsel.deb 59cd49501129e0d2e64d1205d811883c 562804 admin optional dselect_1.21.23_mipsel.deb f5cfd8dc9ce2396f8c6ac577795bcd6b 366344 libdevel optional libdpkg-dev_1.21.23_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4ZxaH3zEHAF/GhnCHrk2gTKeWggFAmn3xJoACgkQHrk2gTKe Wgho4Q//Vow8knPtoeb0n2qZUiyreP+GqKTn1G43e5WW3xHy06I3X5vdzxhwbJb4 4MdRbGyrrsWyxbWEiRB3VlBs2hNbCjI/DPuwUN8/fEfufdtJujuR9OH0vVFqT3Bv k4tG1uQlJfTIIZbfF/5o4LnrUsMc0VurndXn/RpJAS2C/+3a+gjOo0lZWvoi52mO hzRZH13zzu4nLqkfYzDFStoKmsNcsocczHMQo8HKxETa9MmfNK4y0sZk20Pwm615 vB9nyvb4ajsXrlJQOqJlftdnPOe3V0vE3C7RUR7dc1nielGHspFDbeVYJWBqu7CA Owm3I41a1DW3fIEzn5GSVTLW/+5spDoessZM8J0XuwjH3jQFpUnrqD4Eb68daaP6 hU2brBWFlmNisidzWE5gLMhtZIMsIjWbYE4+trMlUdYqYL3lhoBuPaUevIfGXUPq cqEfVp7Ax6aowvJkY0cbhUAGx05TvNjsTsqaYxJWp/8t9ONJOptZzJWIs4PeZ1W8 JYvOX0JAWobwgKn4YNAEQAea2VpwNoGsRwJJSE10nJfcqrKU9kgmyYqMZDF1ip0m kGXGuAZIwLNpPakpve9SjxInevyE5AZfvpMsiHOtWOFfIxcq01QK1Cr7K6p9bvLi RqG/WilHq3xhMGwIJkDEpM2q0pPGJxjAK5YM6Oi0idMKoD9gflQ= =vgYc -----END PGP SIGNATURE-----