From: Raspbian automatic forward porter <root@raspbian.org>
Date: Tue, 19 May 2026 08:52:44 +0000 (+0100)
Subject: Merge version 1.21.22+rpi1 and 1.21.23 to produce 1.21.23+rpi1
X-Git-Tag: archive/raspbian/1.21.23+rpi1^0
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=32b1cfe0af0abd721f7e681cfdb398f9943bebf7;p=dpkg.git

Merge version 1.21.22+rpi1 and 1.21.23 to produce 1.21.23+rpi1
---

32b1cfe0af0abd721f7e681cfdb398f9943bebf7
diff --cc debian/changelog
index 88ffaaf2,ced31341..f6b76de8
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,13 -1,35 +1,46 @@@
- dpkg (1.21.22+rpi1) bookworm-staging; urgency=medium
++dpkg (1.21.23+rpi1) bookworm-staging; urgency=medium
 +
 +  [changes brought forward from 1.20.5+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sun, 02 Aug 2020 12:08:02 +0000]
 +  * Hack up Vendor.pm so it doesn't fail
 +    (see https://lists.debian.org/debian-dpkg/2020/08/msg00004.html )
 +
 +  [changes introduce in 1.21.17+rpi1 by Peter Michael Green]
 +  * disable testsuite.
 +
-  -- Raspbian forward porter <root@raspbian.org>  Fri, 02 Jun 2023 07:43:27 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Tue, 19 May 2026 08:52:44 +0000
++
+ dpkg (1.21.23) bookworm; urgency=medium
+ 
+   [ Guillem Jover ]
+   * dpkg-deb: Fix cleanup for control member with restricted directories.
+     Reported by zhutyra on HackerOne. Fixes CVE-2025-6297.
+   * Perl modules:
+     - Dpkg::BuildDriver::DebianRules: Fix uninitialized Perl variables.
+       Closes: #1107971
+     - Dpkg::BuildDriver::DebianRules: Fix R³ dpkg/target/<target> values
+       handling.
+   * Code internals:
+     - libdpkg: Fix varbuf memory leak in pkg_source_version().
+     - dpkg-deb: Initialize threads_max in no-uniform-compression mode.
+     - libdpkg: Handle tar long GNU names and links not being NUL terminated.
+       Closes: #1061404
+     - libdpkg: Do not segfault when adding triggers in no-act mode.
+       Closes: #1108192
+     - libdpkg: Terminate zstd decompression when we have no more data.
+       Reported by Yashashree Gund <yash_gund@live.com>. Closes: #1129722
+       Fixes CVE-2026-2219.
+   * Build system:
+     - Build gitlab CI images for bookworm instead of sid.
+   * Localization:
+     - Fix typos in Swedish man pages translations. Closes: #1065575
+     - Update Swedish translations.
+       Thanks to Peter Krefting <peter@softwolves.pp.se>. Closes: #1070010
+ 
+   [ Helge Kreutzmann ]
+   * Localization:
+     - Update German man pages translation.
+ 
+  -- Guillem Jover <guillem@debian.org>  Sat, 07 Mar 2026 13:15:41 +0100
  
  dpkg (1.21.22) unstable; urgency=medium