-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Jun 2026 18:23:21 +0300 Source: dhcpcd Binary: dhcpcd-base dhcpcd-base-dbgsym Architecture: armel Version: 1:10.1.0-11+deb13u3 Distribution: trixie Urgency: medium Maintainer: armel Build Daemon (arm-ubc-03) Changed-By: Martin-Éric Racine Description: dhcpcd-base - DHCPv4 and DHCPv6 dual-stack client (binaries and exit hooks) Closes: 1140767 Changes: dhcpcd (1:10.1.0-11+deb13u3) trixie; urgency=medium . * [patches] (Closes: #1140767) + Cherry-pick upstream fix for CVE-2025-70102 (commit 117742d). + Cherry-pick upstream fix for CVE-2026-56113 (commit 5733d3c). + Cherry-pick upstream fix for CVE-2026-56114 (commit 2f00c7b). + Cherry-pick upstream fix for CVE-2026-56116 (commit 708b4a5). + Cherry-pick upstream fix for CVE-2026-56117 (commit 78ea09e). Checksums-Sha1: 40d4ab60e7f4a863ac361726526c59fa29fdb9d1 459656 dhcpcd-base-dbgsym_10.1.0-11+deb13u3_armel.deb 61838ab811f1b979d444ce59e0cfdd0b056a770c 178308 dhcpcd-base_10.1.0-11+deb13u3_armel.deb b0017166b036aca281cbf27234157ac4a0070720 6079 dhcpcd_10.1.0-11+deb13u3_armel-buildd.buildinfo Checksums-Sha256: 9dd3180caada509da0bf6cee023b35f968ba458b0589b08b1c77b97ee4af0912 459656 dhcpcd-base-dbgsym_10.1.0-11+deb13u3_armel.deb a345294aa8d94d43ef924b076d9a213a9a0cc2ea5b5da4950a030dc2c6704168 178308 dhcpcd-base_10.1.0-11+deb13u3_armel.deb 9dd551154b44ec5f77927662b925a73670bd8816796627236c83e1c6e0842bcb 6079 dhcpcd_10.1.0-11+deb13u3_armel-buildd.buildinfo Files: 494741fc50dc45786adb69bb43c1b9a5 459656 debug optional dhcpcd-base-dbgsym_10.1.0-11+deb13u3_armel.deb fc9c203850deb77580753f7b10244094 178308 net important dhcpcd-base_10.1.0-11+deb13u3_armel.deb b6d5274a8dd95d4fa70f8027a1217489 6079 net optional dhcpcd_10.1.0-11+deb13u3_armel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmpEVtcACgkQvzDqKQSG l8U9NxAAlKuBo1e1yn9pseXMjq0bfl2FxnxqLV9pIH4MoCTB8+gjgUOuutXYdeej PJWRPuMrySvrdtnq6ir5imz2SaYsCDiXCVXvCHbwkzmejqKrKrOFhyaQL25NTC2E V6N4oMVxmx/mNYuWiI8Dt3S+/vIVmPbpv9Y2GjjbbCMnI/JawnMJntA+k4Qw++xT cg7f6vKybG1AGQK5U6uOZMjLMyDIz7V3NKvZJQG7UgnVgLFBxqZTGAt6zYjJjJ7+ suPQIcZfAMQIH4zEd05w/rQTZt6Gjd/Re/pmF6cnbzCOKf46BXBjndRb/eeIt6t/ kr54M8vp1CxLdkE/V5/k8JiLqu2gq1zNFthGCrB4YPXlh8AHf3tG2Cgr5fpBmQl4 C2Ihfc7GSsXt4bp9U624APC0hjov9XWCLvbpzmtpibikVfIpoBqgQ8TdvMJ4kHay WLazK9pOVFOTWklNCP+A2YUqXmaNEpYZgbsOY/vI2PWPVH/DD9kJ4H2HV1sukXG0 O9oHIJQr0SdHpuskXvzEwDiIzWpoq9C7IlBBoJ6xBx2FJxSuDlwk5HRbydQGhI5m YlX9v/1ly2x4FR1KbspglZpYKWnrJhBXy09E/VxlcdWjPZ242PCNrKmIetNHrhA+ WpJGMpykf6YTYCsmk/j7qVXcEx5bogolZCNL3U9XFm5Qj6PX+/Q= =96qP -----END PGP SIGNATURE-----