-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Jul 2026 22:00:37 +0300
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym liblzma5-udeb xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: amd64
Version: 5.8.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 liblzma5-udeb - XZ-format compression library (udeb)
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1132497
Changes:
 xz-utils (5.8.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-34743: Buffer overflow in lzma_index_append()
     (Closes: #1132497)
Checksums-Sha1:
 628481d2a028ed8970d40d40241635975d2ea6c1 348120 liblzma-dev_5.8.1-1+deb13u1_amd64.deb
 66ddd01b64a96df7d32cc85c090ba4f079dbfbca 280684 liblzma5-dbgsym_5.8.1-1+deb13u1_amd64.deb
 51bc367c1dd19081775df95f221a6db91e99bad7 90280 liblzma5-udeb_5.8.1-1+deb13u1_amd64.udeb
 5d0e0ef32b670ea1783583ea18c75eb1b4f71071 309492 liblzma5_5.8.1-1+deb13u1_amd64.deb
 e1d86607efc0415236d602a85b2ff274dbc2b2bd 113520 xz-utils-dbgsym_5.8.1-1+deb13u1_amd64.deb
 007ec3c3587659e6bc6b769e99ecb4ceaf7470e5 7917 xz-utils_5.8.1-1+deb13u1_amd64-buildd.buildinfo
 4979f0e9421eff39878d78d09c701f082e3a4685 659488 xz-utils_5.8.1-1+deb13u1_amd64.deb
 158e70ec7a005314d8d624918b90bbd81b8d30e7 117736 xzdec-dbgsym_5.8.1-1+deb13u1_amd64.deb
 cf0046c3e8f9e40f2d3eefefcdd1fa8262c49db5 257268 xzdec_5.8.1-1+deb13u1_amd64.deb
Checksums-Sha256:
 adb39ccf80b0a4347e303920a0b2c4e4f9bbca318f68e8c768dfec8029013c7a 348120 liblzma-dev_5.8.1-1+deb13u1_amd64.deb
 2a501ccc3bf6d56aba5401fdef64440812065b0c5e5b13060700fe76b4e52ab2 280684 liblzma5-dbgsym_5.8.1-1+deb13u1_amd64.deb
 c5b83008c9224f43bac6ebd734f17132bc2b093ccdd3c2a2ac3b85530684ce08 90280 liblzma5-udeb_5.8.1-1+deb13u1_amd64.udeb
 1cfcc6e0dc36f438a79b6e2189facdb9d150b08f57d190a60e01c98075c7f896 309492 liblzma5_5.8.1-1+deb13u1_amd64.deb
 df876a9a25226b479240ae9c74b857e9b8123834e389126708d6314253889e2e 113520 xz-utils-dbgsym_5.8.1-1+deb13u1_amd64.deb
 2cc41db0ebaaf091796b4fba5a174cb9be117934b51c2f6963f5ecb5e91e3f5f 7917 xz-utils_5.8.1-1+deb13u1_amd64-buildd.buildinfo
 9e0a39d95373afdaad3c9dfaab3c8b0beb9a2c4654e6be10b4bcf458509a3217 659488 xz-utils_5.8.1-1+deb13u1_amd64.deb
 e69e557659aa2bbf5096287f3d8b05c98e195804b5d43339349301abe69d4945 117736 xzdec-dbgsym_5.8.1-1+deb13u1_amd64.deb
 97572cf64f7120bf2214c6e3c178b4b3db75d57be59b6a7e38d517e02f6be615 257268 xzdec_5.8.1-1+deb13u1_amd64.deb
Files:
 4931a1d967f0a5ed818ee368cd0c92d4 348120 libdevel optional liblzma-dev_5.8.1-1+deb13u1_amd64.deb
 8f78ea216c344bf212ca4a724d415be1 280684 debug optional liblzma5-dbgsym_5.8.1-1+deb13u1_amd64.deb
 44d986aae4911dda3548a60e2dfc3c44 90280 debian-installer optional liblzma5-udeb_5.8.1-1+deb13u1_amd64.udeb
 9060e24182fb79f353c1e2175da7fe94 309492 libs optional liblzma5_5.8.1-1+deb13u1_amd64.deb
 7aaccb0d833083e11eb3458f5e87caa8 113520 debug optional xz-utils-dbgsym_5.8.1-1+deb13u1_amd64.deb
 8ef92f42d1abb90bc18d7b48b4a2df31 7917 utils optional xz-utils_5.8.1-1+deb13u1_amd64-buildd.buildinfo
 f1d86e1ebee20b0616f055aed01a9ebc 659488 utils standard xz-utils_5.8.1-1+deb13u1_amd64.deb
 0b837bc9057cb9e2d7758cb02608a61a 117736 debug optional xzdec-dbgsym_5.8.1-1+deb13u1_amd64.deb
 4537653ca61a3a5fd221211426000f51 257268 utils optional xzdec_5.8.1-1+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=bfBl
-----END PGP SIGNATURE-----