-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Jun 2026 18:23:21 +0300 Source: dhcpcd Binary: dhcpcd-base dhcpcd-base-dbgsym Architecture: amd64 Version: 1:10.1.0-11+deb13u3 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Martin-Éric Racine Description: dhcpcd-base - DHCPv4 and DHCPv6 dual-stack client (binaries and exit hooks) Closes: 1140767 Changes: dhcpcd (1:10.1.0-11+deb13u3) trixie; urgency=medium . * [patches] (Closes: #1140767) + Cherry-pick upstream fix for CVE-2025-70102 (commit 117742d). + Cherry-pick upstream fix for CVE-2026-56113 (commit 5733d3c). + Cherry-pick upstream fix for CVE-2026-56114 (commit 2f00c7b). + Cherry-pick upstream fix for CVE-2026-56116 (commit 708b4a5). + Cherry-pick upstream fix for CVE-2026-56117 (commit 78ea09e). Checksums-Sha1: b855af2244b5a190697502cf7caffc15558bbe48 467720 dhcpcd-base-dbgsym_10.1.0-11+deb13u3_amd64.deb 3f68c014ccea891e82247692d00e226d3d3828a7 201208 dhcpcd-base_10.1.0-11+deb13u3_amd64.deb 9092fbcf46c5aff21ff6e1a3d9d30de613140ae1 6227 dhcpcd_10.1.0-11+deb13u3_amd64-buildd.buildinfo Checksums-Sha256: 7c4d139d3614b8fcec6558180ba55c8db291d0ae6680026dc36c831d0123416d 467720 dhcpcd-base-dbgsym_10.1.0-11+deb13u3_amd64.deb 554a93dee57e73da8e862360480dd7d8d6f3de72d4397494e18c0ecc724543af 201208 dhcpcd-base_10.1.0-11+deb13u3_amd64.deb 75c1b065cad1daf88d97ea87a0ed310749db60a437c0bac4c50d24b72425ab45 6227 dhcpcd_10.1.0-11+deb13u3_amd64-buildd.buildinfo Files: 6daad0b792799f3908b69d496c0a6f7c 467720 debug optional dhcpcd-base-dbgsym_10.1.0-11+deb13u3_amd64.deb 103772572c7bfdfc16c60663df768fc4 201208 net important dhcpcd-base_10.1.0-11+deb13u3_amd64.deb f5ddf4eb2068382a3882fde210f8385f 6227 net optional dhcpcd_10.1.0-11+deb13u3_amd64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmpEXJ8ACgkQPkCWRKsh 20ftZg//bw1Ho/bXbVYUXzyOTc/WOYxT1kme7Ke1ycUlttDVcqvC+5eQpDsUvyrA 3TG8pEzEglDEbB8l20IS98rMZPG6PTyFioBSGWa/eSRQk1KE7HGXK8V3H2MvqLnZ dfFbnjxxUjvRJSCtfAQLD+otGy6MyoB3Daz5HDxbTI6M2RCUvv/8rABseINjEhpV KMB9+ePi0wbmmdKScMapnq6P9xGkUWcsU5QFwrch2VUoGHTP6+az0xiE3z/7bDQf V7mqc+QKzYqZpWVYPdalpnUPIhxI88pbGGG0Esw8eBvGQdmuJTceAk0OyAOWCSCQ 9yLA7wR9vS6oIroSY12xrCQHfvi6GSHrA+ngUB79TdPKiyuiNSarqltNGZh7D6WI KPfOhzwVKPCA0xaQBs2TNbDU4NQEUnupBqErytYwX8T3l99yDM76MM/952j3lu46 LBLBsHSaD3R9tNUAb1UVXts3igvcuEbMePI1rcvDvI7v+0ktNlr2FND4hFgj6tZz eanTwa3y0U7BdhQUZPf7S3yDka6JYzGnnFrtKdEASK47xvzPtSb19uJ88gPGPutG 3N0V2uX5cf3mmMcxwoKbEamECYwY3XlRQ8McvLJwmE4EwSfzvXihG3ufImL3bida 15eoHVkZXIk3LMX3tIgXXM1EQSGR2H58wi4Mjls5vfs8NVA0iPU= =a5Xv -----END PGP SIGNATURE-----