Accepted util-linux 2.41.5-0+deb13u1 (source) into proposed-updates

Debian FTP Masters <[email protected]>
Newsgroups gmane.linux.debian.devel.changes.stable
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 31 Jul 2026 17:34:36 +0200
Source: util-linux
Architecture: source
Version: 2.41.5-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Chris Hofstaedtler <[email protected]>
Changed-By: Chris Hofstaedtler <[email protected]>
Closes: 1140194 1140195 1140196
Changes:
 util-linux (2.41.5-0+deb13u1) trixie-security; urgency=medium
 .
   * New upstream version 2.41.5, fixing CVE-2026-53612, CVE-2026-53613,
     CVE-2026-53614. (Closes: #1140194, #1140195, #1140196)
   * Drop patches from upstream which came from the stable release branch.
   * Pick upstream patch from stable release branch:
     loopdev: use openat2(RESOLVE_NO_SYMLINKS) for backing file
     Fixes CVE-2026-27456.
   * Pick upstream patch:
     libmount: restrict source path canonicalization for non-root users
   * Avoid installing new bash-completions.
   * d/gbp.conf: setup for trixie.
Checksums-Sha1:
 af0f23320ed30c50ca540273f6f659b152be2c6f 4988 util-linux_2.41.5-0+deb13u1.dsc
 aad638b4dea74be6227238f5e6398a8f54daefb4 9474992 util-linux_2.41.5.orig.tar.xz
 44d5f01ef357eca57a89f86125392fed89a8b14b 107604 util-linux_2.41.5-0+deb13u1.debian.tar.xz
 e1a4a4babe3a090556795e6cda72f4bfef1fa142 23830 util-linux_2.41.5-0+deb13u1_arm64.buildinfo
Checksums-Sha256:
 43e9b2cbebd10fdc598c4ad10217c8202c28de53af6eafc892c8e9b5cbf3a3a5 4988 util-linux_2.41.5-0+deb13u1.dsc
 f586e35d320ff537aab3ffeca37e9ecd482ccbe013590db4429a414d8aa6a728 9474992 util-linux_2.41.5.orig.tar.xz
 5b327ccd22f0f4ed28a389870aa51d04ecedb8693e52a1d122850f2b3188cbf6 107604 util-linux_2.41.5-0+deb13u1.debian.tar.xz
 35b9929ffddd91485990543ea3ad8e5956f49774dc426b706bd3b8259a5fce8d 23830 util-linux_2.41.5-0+deb13u1_arm64.buildinfo
Files:
 e94323857b46a3767dc452496d2bd5c4 4988 utils required util-linux_2.41.5-0+deb13u1.dsc
 c21a3cb29f510f019ac3da929819ffbf 9474992 utils required util-linux_2.41.5.orig.tar.xz
 5265eba63ec6002d90959e435dedbac7 107604 utils required util-linux_2.41.5-0+deb13u1.debian.tar.xz
 a8e6707e827e1f63009759e97060e840 23830 utils required util-linux_2.41.5-0+deb13u1_arm64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEfRrP+tnggGycTNOSXBPW25MFLgMFAmpsxNMACgkQXBPW25MF
LgPDTQ//WhQ4Livwek5ms+NNkgVc7Xc/HV1lHa3p2hsMRZoa0ty43AOzKNvxCDb8
JCvSFFWMBoBloU5wGFGhhGe5VH7Wmy4dRz15tAx7z32ZKqSauyTya3norGIC8JPC
vLnabArGm3SARvhydbWvBepLNG72pGUC2ibhy83O1RHSf10SDNVJKFAFIZLLDjGn
f7iFupAq6IlUwDpq6HITvY4tIQpwKXYoU0LHKwPJCzz5MTgaCOh4PKglA9R1ye4t
3xrY1QR/Ai6IJ3+AdxW+qteIMUrYfu9BuZGKcmknNcy3laooVNy7mTXE5xvNhvpq
eweqX1K1/GE875kGyblJ+hFI6kyiPLSJCr7oTpN+fz+kVUvIONz/p6Y+B2hwWXl0
zVxlRG85xhQEbdJkzVgs09wCioiCWIBz3Jjr0OtDWy1bUXHJJ+BV6KgX+U0u69nQ
Oh7ivPLs8sqwH3K8ecJe0uP66Q+wYOj0IOsaVgx96ruSmG9ZvXkzkHXiF2SEirx5
gmUz0H+WzyKPXqE6YeH2hPyay/EeurRXPQ+hVJTe6kHyL7d+Fb9B5pgprCOqvw7p
Lg03sz5hkzlj6jysQedlBNXvw1Ig2x3MbqjrjLQzAd0/DXD5AOuraPCn+D+wMRPb
GQf0Q7ijJ/0VjcDwYpbT3djzJ6DZDM2FKKQ569yWhk4uaKFMYG8=
=MgIi
-----END PGP SIGNATURE-----
signature.asc (application/pgp-signature, 228 B)
-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaoTTNgAKCRCb9qggYcy5
IXAcAPoCSZXgZ8AtzEZxrXBoAggS0+ICSHnlhLqO/JCgW1TPxQD6A4+CG8zhgJ4I
TRP/3DZw7v/01Mo/t85uYrRpwnpszAc=
=51dT
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.