-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Mar 2026 04:01:23 +0100 Source: dpkg Binary: dpkg-dev libdpkg-perl Architecture: all Version: 1.22.22 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Guillem Jover Description: dpkg-dev - Debian package development tools libdpkg-perl - Dpkg perl modules Closes: 1111617 1122107 1128406 1129722 Changes: dpkg (1.22.22) trixie; urgency=medium . [ Guillem Jover ] * dpkg-query: Fix segfault with empty -S argument. LP: #2092676 * Perl modules: - Dpkg::OpenPGP: Do not run verify with no keyrings. Closes: #1111617 - Dpkg::Shlibs::Objdump::Object: Add support for "Version References" symbols. Closes: #1122107 - Dpkg::OpenPGP::Backend::GnuPG: Add missing Dpkg::Gettext import. Closes: #1128406 * Code internals: - libdpkg: Terminate zstd decompression when we have no more data. Reported by Yashashree Gund . Closes: #1129722 Fixes CVE-2026-2219. * Build system: - Build gitlab CI images for trixie instead of sid. Checksums-Sha1: b478d0d91b6c5458686983c1baf28cd347914283 1337268 dpkg-dev_1.22.22_all.deb 61fa5b50bf94e4018675cc9606b95bf62bbba3a3 6710 dpkg_1.22.22_all-buildd.buildinfo f5d219d88a8c51e2e363e90a0d80aa159847d908 650808 libdpkg-perl_1.22.22_all.deb Checksums-Sha256: 6d4020421740a70e1fb9c41b07f8bb8306d93aef6fea1a8ce11a1f839921f414 1337268 dpkg-dev_1.22.22_all.deb 3301fbdbcc233647d176d648ebb16584f0a4ce24cb9f8cbb67800e6ed9480f3c 6710 dpkg_1.22.22_all-buildd.buildinfo b41eaeb4879091023f8c1a058510844a244d3d0bd0f437e0e05d58213e36fd9f 650808 libdpkg-perl_1.22.22_all.deb Files: 0195cfec3dcf105991bb58063ef77478 1337268 utils optional dpkg-dev_1.22.22_all.deb 8b7139f647a06345f32fccf1a13488c1 6710 admin required dpkg_1.22.22_all-buildd.buildinfo 7a6bf35f7a320b598af2d9340612c000 650808 perl optional libdpkg-perl_1.22.22_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHqtYLkdKRyCY94K8fUw6/tXbAmMFAmmsnkQACgkQfUw6/tXb AmPNWA//XbNwziyGhwFJPA9mt5IIcpDBIeMaJihO1iffIP8YURQPN6UWJPfHNYeR q4kHso2ZOOt4vvOO5APBYvBzzprDA28zJVlzTYB42MrKojLVDtuNv7wMMDk2hwbO JL7SewFEt+DABIgY85FsJaJSPXfol6x2EiYfDTEBBAnTAY7hpuAwq1UiiWmdJ1gz G9rpJXlp/eUi4x8MnGVAtiPDDEguy1OP8YJN+jYa5IgdhjdkcbXjpJnDSu7ynotF qza38EHIzyOjqUBMrZaIfaX4jSbYlz+RrC3//aXvEx9nl8X13hvY0CQG+fa2Rqir +Z2b7ieFCTinmM96hMpMtG4TqY8V88zNtkQ/txOyCwkKox2ct+sleJQk6Fku/X15 ev4CK7kttW4AUEzbhc5Bx7PeaN2UUHJazxBRFt9HJk1af6aQHDp7z6IfJdpZgrP9 YVEc2tWrJBTCn7TCqPKVEg4ZRb37BFrKk06oMKVTZ087EQMxWvn5/j+BkMPrHn3o 2ae67xay0LiFEVupxixuZyV640rozjg0aP0AtxnTi/LMibXnWkDq3wLW/ZEy08WF O9S+S9dc+tPhYlMc895Pts25VYll0D842CAojIapWgyCyP8ip7UQChhqYva9C7Ed EryS6yodo7q7vDoBUnUB2OPXY7OYkA4czi1avWYaTAQ25XFRO+c= =+0tw -----END PGP SIGNATURE-----