-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Jul 2026 22:00:37 +0300
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym liblzma5-udeb xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: arm64
Version: 5.8.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: arm64 Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 liblzma5-udeb - XZ-format compression library (udeb)
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1132497
Changes:
 xz-utils (5.8.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-34743: Buffer overflow in lzma_index_append()
     (Closes: #1132497)
Checksums-Sha1:
 12b84afd274e1810011918c3a01125a01178fdfb 344328 liblzma-dev_5.8.1-1+deb13u1_arm64.deb
 f616b87e63e88cfc9175c7e5e69ad5d8f11f3cde 264568 liblzma5-dbgsym_5.8.1-1+deb13u1_arm64.deb
 98e3850090891fe6ecbe731f50cdd9695aea16c5 84036 liblzma5-udeb_5.8.1-1+deb13u1_arm64.udeb
 4398f62fa153a6db623b0ce60b0c6bb3b8179dde 302720 liblzma5_5.8.1-1+deb13u1_arm64.deb
 ab66e1d14e6a511d23237dccb0616cdbeb5690c3 110332 xz-utils-dbgsym_5.8.1-1+deb13u1_arm64.deb
 af65bb4ae1318569f3531c5f33ed3d14c4636f8d 7901 xz-utils_5.8.1-1+deb13u1_arm64-buildd.buildinfo
 4b8104754f6cf5a526a276994683f56202b6fdea 657732 xz-utils_5.8.1-1+deb13u1_arm64.deb
 04b41dcbc227e63ce759a0eb036b4f4397d6380c 117060 xzdec-dbgsym_5.8.1-1+deb13u1_arm64.deb
 a7c2f7021b750d8ca98dbadfa559dfd72eb3f4ed 256352 xzdec_5.8.1-1+deb13u1_arm64.deb
Checksums-Sha256:
 f2221a443ac294ce1db663497b9e7946a82fdb958b8cc85058489d8353c2f06f 344328 liblzma-dev_5.8.1-1+deb13u1_arm64.deb
 4f066e691d37892494dd44b3617680dafb38e03121551fc1db202d8d0494cbfa 264568 liblzma5-dbgsym_5.8.1-1+deb13u1_arm64.deb
 c2e9246845b98c395bfd7346c48e461c085ecf66734e9e6baab659ce6db07f8b 84036 liblzma5-udeb_5.8.1-1+deb13u1_arm64.udeb
 6a7b98005f84fc26d66a45e432f70d0793646a734f8c44cd1626b3ffa8edd7c6 302720 liblzma5_5.8.1-1+deb13u1_arm64.deb
 f2a1b064b59255f228d3cd019e01bce19dbe86d6dbe05f265e46304a6151a969 110332 xz-utils-dbgsym_5.8.1-1+deb13u1_arm64.deb
 3ec0526e4623881a4de19fdab454952db1f7d451263561e482e562421b848f78 7901 xz-utils_5.8.1-1+deb13u1_arm64-buildd.buildinfo
 07b6145c6c934d744c712c252b293ce506d427ea127c7f77b711c518aead54b3 657732 xz-utils_5.8.1-1+deb13u1_arm64.deb
 bb7fc5acf827fe220114ff15dbc4772b3f3e9db72af11453ceccda5ab94ebb00 117060 xzdec-dbgsym_5.8.1-1+deb13u1_arm64.deb
 b0d37695cc1f97eeb6eb53213981e0d52ed139ec4fd5018dd02e5c1dea1e5a30 256352 xzdec_5.8.1-1+deb13u1_arm64.deb
Files:
 cc46cd36d686eec55bd8ca50929f50b5 344328 libdevel optional liblzma-dev_5.8.1-1+deb13u1_arm64.deb
 f5c80be36ea2f9c6dcd25002f83a78ea 264568 debug optional liblzma5-dbgsym_5.8.1-1+deb13u1_arm64.deb
 e84143f51e4958fa16b1efd57107312c 84036 debian-installer optional liblzma5-udeb_5.8.1-1+deb13u1_arm64.udeb
 442ae1a890e7c5eb5d63a82bed5bff98 302720 libs optional liblzma5_5.8.1-1+deb13u1_arm64.deb
 4ec563b2fa4419525984dcc5a57ab839 110332 debug optional xz-utils-dbgsym_5.8.1-1+deb13u1_arm64.deb
 2f8fe0cc5e35eabd70a416a2296834a0 7901 utils optional xz-utils_5.8.1-1+deb13u1_arm64-buildd.buildinfo
 95ea7560fbeda3859daf75eb6a10526d 657732 utils standard xz-utils_5.8.1-1+deb13u1_arm64.deb
 cbe68d787078f12ece3f28a0c01b34b9 117060 debug optional xzdec-dbgsym_5.8.1-1+deb13u1_arm64.deb
 93ee3c558f8c6ca25312ea07c9546edf 256352 utils optional xzdec_5.8.1-1+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=lxL7
-----END PGP SIGNATURE-----