-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Nov 2026 18:23:16 +0100 Source: lomiri-download-manager Binary: liblomiri-download-manager-client-doc lomiri-download-manager-common qml-module-lomiri-downloadmanager-doc Architecture: all Version: 0.2.1-3+deb13u1 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Mike Gabriel Description: liblomiri-download-manager-client-doc - QT library for Lomiri Download Manager - client documentation fil lomiri-download-manager-common - Lomiri Download Manager - Common files qml-module-lomiri-downloadmanager-doc - Lomiri Download Manager QML Plugin - documentation files Changes: lomiri-download-manager (0.2.1-3+deb13u1) trixie; urgency=medium . * debian/patches: + Add 0001_src-downloads-dont-run-commands-when-privileged.patch and 0002_src-uploads-downloads-daemon-conf-deny-access-to-system.patch. CVE-2026-96424: Fix incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) that allows arbitrary user to read arbitrary file as root over DBus Source. CVE-2026-96425: Fix incorrect DBus policy for lomiri-download-manager that allows arbitrary user to run arbitrary command as root over DBus. * debian/control: + Add to B-D: libcap-dev. Checksums-Sha1: 4a687f182bfef6d4d2d59c3a898c2b9b51a1cbbe 2587996 liblomiri-download-manager-client-doc_0.2.1-3+deb13u1_all.deb 45a68714481f7e294ec922cc5cfd0fb4f2b383c5 23504 lomiri-download-manager-common_0.2.1-3+deb13u1_all.deb 7737bb2883ea7c1bab6413620efbb3e1e7d58a2e 20101 lomiri-download-manager_0.2.1-3+deb13u1_all-buildd.buildinfo 5241be0cafc251a7dad572c13a977c8c02076696 23060 qml-module-lomiri-downloadmanager-doc_0.2.1-3+deb13u1_all.deb Checksums-Sha256: 5c07cf08aa3a6db905196feca23bf13bae34f299e1a2456ab79292d2e7bbc673 2587996 liblomiri-download-manager-client-doc_0.2.1-3+deb13u1_all.deb d34b1dfc630247708c44d12bdde661550aecd2b73d44734326bb6799002be321 23504 lomiri-download-manager-common_0.2.1-3+deb13u1_all.deb 3f83e4cbc7eb6fa9a306ae245e683901f852287f83ae9ed18b4400fcf65bfe51 20101 lomiri-download-manager_0.2.1-3+deb13u1_all-buildd.buildinfo a5e38d83ce353be30096de2ad4892e6535f69d4f9cbdd242149698b664f671d5 23060 qml-module-lomiri-downloadmanager-doc_0.2.1-3+deb13u1_all.deb Files: 3928c2735013c5c33c9b75bbd316e776 2587996 doc optional liblomiri-download-manager-client-doc_0.2.1-3+deb13u1_all.deb 3c2f93b5d1bd73719f375015b792041b 23504 net optional lomiri-download-manager-common_0.2.1-3+deb13u1_all.deb b14a1d925ecc9ae3548b44487cea2348 20101 net optional lomiri-download-manager_0.2.1-3+deb13u1_all-buildd.buildinfo 81f663b4b509ae9eff64afc336a82d9b 23060 doc optional qml-module-lomiri-downloadmanager-doc_0.2.1-3+deb13u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmr4ToMACgkQN8Ugyu9d QiTvphAAwOpTDMRwejDdYneY1oGRItcdivZij+jqTTyRzRWh5GLRA2MVAm/1M+/x ZeqeFO68RPLacoMAmYxTNMFlJLSMhP1iooD1EuFUa7cyV02XLICmx/OE/Jr0yAqM XT8l9tU19EGB4a+sbi4ZTk34hoCehs5yoI7pNiRHT8QMV9CNiDvl7WiKktv56ME7 S/F7ZWs+26nuLSQ6d7LeMQRBvoHGLcvwetPrBQfKe+EIGqvLfFiiCeJeXWNExELj +lIYN0jqVuMV6T/l57P6nb3+vlgjeN/oJE9Dym+2elHFnDOROo09iIyNLrJEOQCs JMRFmgMgpMUigUfC51HeoQDPGqqyV5c05qtXyxo5GU1wUQMhzytMN+lPpVeuZTbl VrowAL0lDd2dSd/aud/5NBrsPXOQVIk0L9lIibEpN7TFeMF/40XooAxT53+C16ff +4LvhKJtBy3DEwuHmqXfo9OHzKlHxAO2dRwHUkvMFr0+j0sLHXdnBm2733y86oHs jjemG+4z9AkzmGhhNhhVyv+M0x45sHC25NgQO393OTLDWOoDKOGB1UOqiza87dJf C1D3BC/QwvnRqAYdXGV/PmOn9llfb8lE51bpz+MP8ynicU8CDd6SD01jzk/OJ7f4 3oOB2s+iMUUKzoDGcIKGOG0HDjJV2WkwA+gfydCJ84rm0r9GA98= =2q8P -----END PGP SIGNATURE-----