-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Jun 2026 18:23:21 +0300 Source: dhcpcd Binary: dhcpcd-base dhcpcd-base-dbgsym Architecture: i386 Version: 1:10.1.0-11+deb13u3 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Martin-Éric Racine Description: dhcpcd-base - DHCPv4 and DHCPv6 dual-stack client (binaries and exit hooks) Closes: 1140767 Changes: dhcpcd (1:10.1.0-11+deb13u3) trixie; urgency=medium . * [patches] (Closes: #1140767) + Cherry-pick upstream fix for CVE-2025-70102 (commit 117742d). + Cherry-pick upstream fix for CVE-2026-56113 (commit 5733d3c). + Cherry-pick upstream fix for CVE-2026-56114 (commit 2f00c7b). + Cherry-pick upstream fix for CVE-2026-56116 (commit 708b4a5). + Cherry-pick upstream fix for CVE-2026-56117 (commit 78ea09e). Checksums-Sha1: eddff2cbd5598befad0fdc1d8e6b060f56c753f8 420424 dhcpcd-base-dbgsym_10.1.0-11+deb13u3_i386.deb e9768931c78375274413071679f153e86dcbb08a 218404 dhcpcd-base_10.1.0-11+deb13u3_i386.deb 3819af592cd2b8b1f3007ebfad9f53440702946e 6128 dhcpcd_10.1.0-11+deb13u3_i386-buildd.buildinfo Checksums-Sha256: 93f3f51460d28cc8cb42e6763e31d7c48815cd7c5de736ea367abc4b85585afe 420424 dhcpcd-base-dbgsym_10.1.0-11+deb13u3_i386.deb d962657f28ca4ae8f4e879f36566057b9eed0751d9d69ba8b52cc497b1fcef9b 218404 dhcpcd-base_10.1.0-11+deb13u3_i386.deb 713e037e57dfb627576a2cbff08e9738be28dccb868d0f88ff5e99a78ccfdd3b 6128 dhcpcd_10.1.0-11+deb13u3_i386-buildd.buildinfo Files: f9211edaefac29732478381f4e1e5ddb 420424 debug optional dhcpcd-base-dbgsym_10.1.0-11+deb13u3_i386.deb e7db7e17c33b3244419a03dc36b9166a 218404 net important dhcpcd-base_10.1.0-11+deb13u3_i386.deb 41213b4e819d992ada4e698ccede500a 6128 net optional dhcpcd_10.1.0-11+deb13u3_i386-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmpEXhwACgkQN8Ugyu9d QiSTYxAAuMg+oMJGLmVfORfaMH494EaxYZfwjuPtsX0+hm3unsi0dzVYsB+FZGAP H5XkBlLMFEbsQDAh6eKizhDYWiwxRbjeO4IuBZ5+q4udAnIek8Z1x8ac3i5Q7lw8 yFTKvIiG4sp3lZ4wI7sZLGr2YJ0Femrlf2mxfc9qe5tiH2xvEvKb4/nXVTfbGnEG lvPzdofS6vVsU0SeiHqGH7+jvZ0u0z/ZdNTCUDj/HwoLtw0MmOc1smet/ql4QHFr iyXHh8oEtB/ZZv0Iy66gLBPX7enb0osUyfs+6FjhnvRRIyxaOY70Emve2LYBvgeP O3s5Sw7B/kRb2c1TaohmEtJ1OStszUXTZ1iattdaF5k7jcDpFWjr51DicNaEvniO Cumup111ltf/N0SPH7xcoByOi27Yrf6TfKY562xjC7FF8NdwP+eaqYN6wN2WoYlr LRS2UEgvGUeiefaOWM5cU1/I3Zgvfubwt+6kQJFk+0/FZpoAtaOO/cigTKbwb/TP 614Hat8As3fe+yXqa0hPP2kHVn5pV+I5G3ennL3kAA+ecxDZEmULMFMxNlU1RF7v 5Pq4QurFmxhr31sTSqVTD2/wkDy5trh7WT1IMPm8E5oJiZZfYQOwpcOvN6tMFFhQ FFdNtKGmvkecDgio08UKgxrS8GQbR+BqykNWD5h0HBCgX0PGMdE= =g8GY -----END PGP SIGNATURE-----