On Wed, Aug 26, 2026 at 01:06:01PM +0100, Simon McVittie wrote:
> On Wed, 26 Aug 2026 at 11:22:35 +0100, Simon McVittie wrote:
> > As previously discussed with the security team, fixing this in versions
> > older than 0.12.0 does not look feasible, so I'm going to prepare a
> > backport of 0.12.0 to stable.
>
> Proposed package for trixie-security:
> <https://people.debian.org/~smcv/temp/2026/bubblewrap-bug1145655/> (debdiffs
> included, bubblewrap_0.12.0-1~deb13u1_debianonly.diff is filtered to debian/
> only)
Looks good, I've uploaded your build to security-master.
The DSA will be released tomorrow.
Cheers,
Moritz
