-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Jun 2026 18:23:21 +0300 Source: dhcpcd Binary: dhcpcd dhcpcd5 Architecture: all Version: 1:10.1.0-11+deb13u3 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Martin-Éric Racine Description: dhcpcd - DHCPv4 and DHCPv6 dual-stack client (init.d script & systemd unit dhcpcd5 - DHCPv4 and DHCPv6 dual-stack client (dummy transitional package) Closes: 1140767 Changes: dhcpcd (1:10.1.0-11+deb13u3) trixie; urgency=medium . * [patches] (Closes: #1140767) + Cherry-pick upstream fix for CVE-2025-70102 (commit 117742d). + Cherry-pick upstream fix for CVE-2026-56113 (commit 5733d3c). + Cherry-pick upstream fix for CVE-2026-56114 (commit 2f00c7b). + Cherry-pick upstream fix for CVE-2026-56116 (commit 708b4a5). + Cherry-pick upstream fix for CVE-2026-56117 (commit 78ea09e). Checksums-Sha1: e7bb0cb11a26b858dca33b09863e4b1132781bb4 11712 dhcpcd5_10.1.0-11+deb13u3_all.deb 2b8c1994df620396a5e4c0a84496eb48e8adda1a 6143 dhcpcd_10.1.0-11+deb13u3_all-buildd.buildinfo 05dafa23184fa6c06dc95a844e9bf620045dc49c 14136 dhcpcd_10.1.0-11+deb13u3_all.deb Checksums-Sha256: 3935cc5a2876d0be8592593d3de3e0e29b1e466d0c0b4cee6afd20d9e8a34655 11712 dhcpcd5_10.1.0-11+deb13u3_all.deb 95789f88c2c14552f7fa86015138f8b63f81ef2d68cc7b3f76ce60fd230cb874 6143 dhcpcd_10.1.0-11+deb13u3_all-buildd.buildinfo 32a18bb945407f622f09270dd54d87f26dc318fac04b7e7cfca868a57ee4aa28 14136 dhcpcd_10.1.0-11+deb13u3_all.deb Files: 77357ebb5129fba51ca70d011e786002 11712 oldlibs optional dhcpcd5_10.1.0-11+deb13u3_all.deb a488c30f7f82ecbe5eb369ba7596a23a 6143 net optional dhcpcd_10.1.0-11+deb13u3_all-buildd.buildinfo 3809141a4f8c204fda57302da5e95fa3 14136 net optional dhcpcd_10.1.0-11+deb13u3_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmpEWxgACgkQN8Ugyu9d QiQmmw//dB5hHUYe35ftvGvAFiSM57B+rsoa2AVJ1fQyv2Xp46+QdqsHD2q3Cny3 cvnIGMvMi+LG2ATByzqCypDU3d9PhN1js3JNoQkXxWTDeejQHtjenKFTZ3G2xZPg 8LaEy9hrfBAQEET8UHwfuojsymnNbXWqOps4HGXEClXvC4jwcVddBZ26egchhimI 6XctrzR3v0XtxQaGWj/jFKuWRcG6W5RZYxy6G6UDMvoawuoTgBo6GjyY+QMVX2sR N+VcsMe1xqSgAh2yCj20nCm34qaiWzbDo7Yyp6JzbikKIR4YQfg420EU7VB2Lgfe icxvXq3Y2bZmQeqc8pSzauav3Q/OsjL3Vbllbklesab44lysExtxrg8cXIxkiWUP 89ELO8XH/OdvypOnzR827/HfQGzn3xZqk7B62JWago82ElEU4+eeNBPof7lcUAnw gCQzRloMjFSSB53/ZDqo9bqiJGHVRuDxXOjS54PUGeP4HfFUkdUYTMMPgnk8HdIz n0K7eXxaGL+t3f3l2/6sAnkdmq/xaY597zyxBWHNZC4cY6oXW723ViczRQG7DXvJ uF3JrN1QyEukAQy1UqirFZxa1p0I2syqNn/NasntGaO3Y5dsJgxvqlgcODDjKeWz J8drl0WV0JLSGJ6vlYdKWZNNVsGOug2chDwlFCdB7FMPYNXdKOU= =GiU9 -----END PGP SIGNATURE-----