-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 07 Mar 2026 13:15:41 +0100
Source: dpkg
Binary: dpkg dpkg-dbgsym dselect dselect-dbgsym libdpkg-dev
Architecture: arm64
Version: 1.21.23
Distribution: bookworm
Urgency: medium
Maintainer: arm64 Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Guillem Jover <guillem@debian.org>
Description:
 dpkg       - Debian package management system
 dselect    - Debian package management front-end
 libdpkg-dev - Debian package management static library
Closes: 1061404 1065575 1070010 1107971 1108192 1129722
Changes:
 dpkg (1.21.23) bookworm; urgency=medium
 .
   [ Guillem Jover ]
   * dpkg-deb: Fix cleanup for control member with restricted directories.
     Reported by zhutyra on HackerOne. Fixes CVE-2025-6297.
   * Perl modules:
     - Dpkg::BuildDriver::DebianRules: Fix uninitialized Perl variables.
       Closes: #1107971
     - Dpkg::BuildDriver::DebianRules: Fix R³ dpkg/target/<target> values
       handling.
   * Code internals:
     - libdpkg: Fix varbuf memory leak in pkg_source_version().
     - dpkg-deb: Initialize threads_max in no-uniform-compression mode.
     - libdpkg: Handle tar long GNU names and links not being NUL terminated.
       Closes: #1061404
     - libdpkg: Do not segfault when adding triggers in no-act mode.
       Closes: #1108192
     - libdpkg: Terminate zstd decompression when we have no more data.
       Reported by Yashashree Gund <yash_gund@live.com>. Closes: #1129722
       Fixes CVE-2026-2219.
   * Build system:
     - Build gitlab CI images for bookworm instead of sid.
   * Localization:
     - Fix typos in Swedish man pages translations. Closes: #1065575
     - Update Swedish translations.
       Thanks to Peter Krefting <peter@softwolves.pp.se>. Closes: #1070010
 .
   [ Helge Kreutzmann ]
   * Localization:
     - Update German man pages translation.
Checksums-Sha1:
 b43419cb37dd1e05dac72ee53f3045a27c4ffc0b 1240356 dpkg-dbgsym_1.21.23_arm64.deb
 83be1a88dfee3c74d547b5ad421eee779e4bfc18 7744 dpkg_1.21.23_arm64-buildd.buildinfo
 41682243bd62d5dfbf99a084502978e76d4250f0 1550216 dpkg_1.21.23_arm64.deb
 99c363c50e3df51f20b9cc4a3b16b0bf5741da3d 260516 dselect-dbgsym_1.21.23_arm64.deb
 e96c7b702383c04512c02f3e1d16a171a5a26519 559620 dselect_1.21.23_arm64.deb
 d9a4f28e8178368f97aa6eedba5c0d1aae6f328f 356928 libdpkg-dev_1.21.23_arm64.deb
Checksums-Sha256:
 ef3c547f2d6f886260f799f5a03b2d7084e8fcf51dded1b1a262aee54c103a08 1240356 dpkg-dbgsym_1.21.23_arm64.deb
 c5935bc6ee2833e2047fe99a330f25d8907b59c0428516683584835dbd803e2e 7744 dpkg_1.21.23_arm64-buildd.buildinfo
 00b2b9d112ecbfe99d8f0c3de56dd33bc242f71c8ae51c3fd1e154ab2e2eb07a 1550216 dpkg_1.21.23_arm64.deb
 a0d4b9f62420ce7c205faacb7911f551dc67ae23c33caa287f84490283625a8f 260516 dselect-dbgsym_1.21.23_arm64.deb
 56d808138c709c097489ba127f7241014fdf2142613f698118e2954d9a56cb84 559620 dselect_1.21.23_arm64.deb
 43fa7b47d2be536f4989cfea9a46a69e38c7bdfc16330225996dffde02bd5392 356928 libdpkg-dev_1.21.23_arm64.deb
Files:
 f20d8569dab50a7f51a76f3d798a05e2 1240356 debug optional dpkg-dbgsym_1.21.23_arm64.deb
 6f6d33d491bd2d8171acc71561744ae2 7744 admin required dpkg_1.21.23_arm64-buildd.buildinfo
 cd49d943f226769a8ce7a6dacfb14a1d 1550216 admin required dpkg_1.21.23_arm64.deb
 5e9f75c2c15ec0443f0f4dbf18638597 260516 debug optional dselect-dbgsym_1.21.23_arm64.deb
 b4a2d83226b363df0d62997b74d47bb8 559620 admin optional dselect_1.21.23_arm64.deb
 19ff94d3db5dd37ceef4fa7ad2ed510e 356928 libdevel optional libdpkg-dev_1.21.23_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=VmGH
-----END PGP SIGNATURE-----