From: Raspbian automatic forward porter <root@raspbian.org>
Date: Sat, 28 Mar 2026 19:40:18 +0000 (+0000)
Subject: Merge version 3.18.1-1+rpi1 and 3.18.2-1 to produce 3.18.2-1+rpi1
X-Git-Tag: archive/raspbian/3.18.2-1+rpi1^0
X-Git-Url: https://dgit.raspbian.org/%22http:/www.example.com/cgi/success//%22mailto:kde%40ewsoftware.de/%22/%22http:/www.example.com/cgi/success/%22mailto:kde%40ewsoftware.de/%22?a=commitdiff_plain;h=ea179bc86995cb9e9a68b6becb7c99643dd455a6;p=fuse3.git

Merge version 3.18.1-1+rpi1 and 3.18.2-1 to produce 3.18.2-1+rpi1
---

ea179bc86995cb9e9a68b6becb7c99643dd455a6
diff --cc debian/changelog
index 43beed9,74bf4f8..36ed665
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,8 -1,12 +1,19 @@@
- fuse3 (3.18.1-1+rpi1) forky-staging; urgency=medium
++fuse3 (3.18.2-1+rpi1) forky-staging; urgency=medium
 +
++  [changes brought forward from 3.18.1-1+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Thu, 05 Feb 2026 13:20:17 +0000]
 +  * Link with libatomic on armhf too.
 +
-  -- Peter Michael Green <plugwash@raspbian.org>  Thu, 05 Feb 2026 13:20:17 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Sat, 28 Mar 2026 19:40:17 +0000
++
+ fuse3 (3.18.2-1) unstable; urgency=high
+ 
+   * New upstream release:
+     - fixes CVE-2026-33150, use-after-free vulnerability in the io_uring
+       subsystem,
+     - fixes CVE-2026-33179, NULL pointer dereference and memory leak in
+       fuse_uring_init_queue() .
+ 
+  -- Laszlo Boszormenyi (GCS) <gcs@debian.org>  Sat, 21 Mar 2026 08:16:43 +0100
  
  fuse3 (3.18.1-1) unstable; urgency=medium