-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jun 2026 13:13:13 +0000
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: arm64
Version: 5.4.1-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: arm64 Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Otto Kekäläinen <otto@debian.org>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1132497
Changes:
 xz-utils (5.4.1-1+deb12u1) bookworm; urgency=medium
 .
   * Backport upstream security fix for CVE-2026-34743, for which upstream states
     it's likely that this bug cannot be triggered in any real-world application,
     see https://tukaani.org/xz/index-append-overflow.html (Closes: #1132497)
   * Additionally backport related fix in xz to prevent an integer overflow in
     --files and --files0
   * Add myself as uploader and prepare gbp.conf and salsa-ci.yml for easier
     maintenance of this package in Bookworm (and later potentially in LTS)
Checksums-Sha1:
 3462cc2e70d5d01c81d902253db1a605af572256 255924 liblzma-dev_5.4.1-1+deb12u1_arm64.deb
 3819e6c0ccca5db616d8d65cead6154ede9c93a4 250488 liblzma5-dbgsym_5.4.1-1+deb12u1_arm64.deb
 53ac9004cdaed9d5a0d83c949e14bcb791d4e6f8 199508 liblzma5_5.4.1-1+deb12u1_arm64.deb
 8d7f2b83309e3055940a7af1de69b9aa99b2e51d 88404 xz-utils-dbgsym_5.4.1-1+deb12u1_arm64.deb
 4ee05fc75b66675c0aa1bc69e0e893de971938ef 7962 xz-utils_5.4.1-1+deb12u1_arm64-buildd.buildinfo
 f76ac27f378858b08e96a9400bd6bac7ba7338b8 470572 xz-utils_5.4.1-1+deb12u1_arm64.deb
 0fdf3a0ebc41b7e2ec1811fff8c2ff457d36d331 114900 xzdec-dbgsym_5.4.1-1+deb12u1_arm64.deb
 fdb1167fd61d0dc640d4efe4b1f26d5a09593eaa 156796 xzdec_5.4.1-1+deb12u1_arm64.deb
Checksums-Sha256:
 ecc84637fe1563bd48f1ca14ac48e0a22e8d4a151837be1df40254f40214f0b6 255924 liblzma-dev_5.4.1-1+deb12u1_arm64.deb
 90426a7cdfbfd2f8c7e2c164e4e1b0d3471320c73f77e4851003d010a46c0481 250488 liblzma5-dbgsym_5.4.1-1+deb12u1_arm64.deb
 647ce9d81e41c30071ce6ac0d3324579216a33aaa1d28971d6952315f6a95a75 199508 liblzma5_5.4.1-1+deb12u1_arm64.deb
 e4011f7b39577bde43185ab1f2de28bd53a6681d7fa30c6930858cd58ea8d353 88404 xz-utils-dbgsym_5.4.1-1+deb12u1_arm64.deb
 ba5a728d6854d7f9b4c4a42a20f529085fc03a1b150fccca2c9405f384de9b75 7962 xz-utils_5.4.1-1+deb12u1_arm64-buildd.buildinfo
 c75a1418753c03c3f8c544222381102da317bc42b251a12f46ad0227964a8830 470572 xz-utils_5.4.1-1+deb12u1_arm64.deb
 a405c20c86caf91370f21a55188a4280d6622a82c92398c3926320fbd0f3987c 114900 xzdec-dbgsym_5.4.1-1+deb12u1_arm64.deb
 ccb17215e1a98df715a772bc7a19034930e3445de8ccd12e91c92fb60bfb14ac 156796 xzdec_5.4.1-1+deb12u1_arm64.deb
Files:
 e7da41247ce1a7f35a35b41d24ddc434 255924 libdevel optional liblzma-dev_5.4.1-1+deb12u1_arm64.deb
 8f44bc95ee5064b31d95fc9411909510 250488 debug optional liblzma5-dbgsym_5.4.1-1+deb12u1_arm64.deb
 7dfb8a2d59e7f268195baa054ac2ae49 199508 libs optional liblzma5_5.4.1-1+deb12u1_arm64.deb
 40b1ef01445e4db21d14077478fef9fe 88404 debug optional xz-utils-dbgsym_5.4.1-1+deb12u1_arm64.deb
 93bcb4feb3119051c53bd18c71e772fb 7962 utils optional xz-utils_5.4.1-1+deb12u1_arm64-buildd.buildinfo
 b6055468513855796b6db231c53aeb01 470572 utils standard xz-utils_5.4.1-1+deb12u1_arm64.deb
 d6175df15b7045c4c7986d5a2f62aa9e 114900 debug optional xzdec-dbgsym_5.4.1-1+deb12u1_arm64.deb
 b8a7aa8f458e8c363d05a6376d5aed0b 156796 utils optional xzdec_5.4.1-1+deb12u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=OcEi
-----END PGP SIGNATURE-----