-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Jul 2026 22:00:37 +0300
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym liblzma5-udeb xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: armhf
Version: 5.8.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: armhf Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 liblzma5-udeb - XZ-format compression library (udeb)
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1132497
Changes:
 xz-utils (5.8.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-34743: Buffer overflow in lzma_index_append()
     (Closes: #1132497)
Checksums-Sha1:
 7b3053b94b5bdf2b653672fd6b920809efca142a 335948 liblzma-dev_5.8.1-1+deb13u1_armhf.deb
 130f43d81f9d7828dcce0898d6fdbe64586aef53 263468 liblzma5-dbgsym_5.8.1-1+deb13u1_armhf.deb
 3d2ddcbc2f99561fe39dff8e5ab28bf968f69630 77344 liblzma5-udeb_5.8.1-1+deb13u1_armhf.udeb
 1fbceca5523eb653320d0a9bddcf26f671e70efb 296084 liblzma5_5.8.1-1+deb13u1_armhf.deb
 1692d7c1a93912dbe117f3c799c71db85b99a6f4 112764 xz-utils-dbgsym_5.8.1-1+deb13u1_armhf.deb
 6970cbbec2c640da3bca3e52a3b01b17fe39ec35 7783 xz-utils_5.8.1-1+deb13u1_armhf-buildd.buildinfo
 ad80f40d23a84d11c55a9e1c301c49b7d66cb406 657448 xz-utils_5.8.1-1+deb13u1_armhf.deb
 625af324fcf307f7002d5a56e1e280e5b760e1f8 113140 xzdec-dbgsym_5.8.1-1+deb13u1_armhf.deb
 5a468b05c249ca8414d34df821052103295f5a1b 253632 xzdec_5.8.1-1+deb13u1_armhf.deb
Checksums-Sha256:
 afad617963ecfcd8f798ea0436f7f06193d967d7a9a876562d896a19ad89ddc9 335948 liblzma-dev_5.8.1-1+deb13u1_armhf.deb
 93c72beb63027f0fc5e8a8d8bc3d5f8d5a002319b39566670f4581e9a111c97c 263468 liblzma5-dbgsym_5.8.1-1+deb13u1_armhf.deb
 ae53430a618aca46b2245839ad041b21d7d00bc7c5b21da1abb6daaec5bf0458 77344 liblzma5-udeb_5.8.1-1+deb13u1_armhf.udeb
 a79a1f9f0fc939636a9ec227b27a50395b051ea98e1df87f1fa412a90724fab0 296084 liblzma5_5.8.1-1+deb13u1_armhf.deb
 aef69ed14baf517b9880576a2525d9fd015d22d5b90bfacc42072b6a9daece1a 112764 xz-utils-dbgsym_5.8.1-1+deb13u1_armhf.deb
 a18b5b475fce31b8cc4fdaa28dd34cdd50c3aa2c2f246c8c3ad7614ff5815e79 7783 xz-utils_5.8.1-1+deb13u1_armhf-buildd.buildinfo
 0222fcd51c399150a11a3a9930c2510f699f7848942a27d22be14d48c03c623f 657448 xz-utils_5.8.1-1+deb13u1_armhf.deb
 93f943351e00ef8133a5d395d1e28031d5d347231d8f0dbc807a9c6edc6ba008 113140 xzdec-dbgsym_5.8.1-1+deb13u1_armhf.deb
 ca9e77bf7e3d721b3f7637addfb3965e68bd558d24a330e813b66cba8b2596bd 253632 xzdec_5.8.1-1+deb13u1_armhf.deb
Files:
 6d52bda3344b7960ae67e8a131126095 335948 libdevel optional liblzma-dev_5.8.1-1+deb13u1_armhf.deb
 6b2f34a28bb5a1c2ea972a38478dc223 263468 debug optional liblzma5-dbgsym_5.8.1-1+deb13u1_armhf.deb
 577b713da68197a7184ad6a5291ea91b 77344 debian-installer optional liblzma5-udeb_5.8.1-1+deb13u1_armhf.udeb
 62b25319fd90bedb4f95a87e59bb078f 296084 libs optional liblzma5_5.8.1-1+deb13u1_armhf.deb
 48386096768f2f5526bf4e0cf6f03302 112764 debug optional xz-utils-dbgsym_5.8.1-1+deb13u1_armhf.deb
 572a1cb4860ed238d75438bf96726d16 7783 utils optional xz-utils_5.8.1-1+deb13u1_armhf-buildd.buildinfo
 23daff56dae9b01080330859d2bbd528 657448 utils standard xz-utils_5.8.1-1+deb13u1_armhf.deb
 1b3e4aadf845b77807bf7bdb6652efd3 113140 debug optional xzdec-dbgsym_5.8.1-1+deb13u1_armhf.deb
 54d806883c593699aa774f56326ad400 253632 utils optional xzdec_5.8.1-1+deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmpJBrcACgkQ8U6eOZMp
j6/dtA//XZo0qQlJvpD35994EjxFSwWClJj5buqezWpVj5iycjp/R2bK+8gT7XcQ
QB/uWwRW/G9dRK/AkGgSvrnbj4TDCYfHxYjS/XhEGw3QRH+on7HiqHJx4uqce8F7
XIEQ5GHIit5oZGY6vvhkyztbaFex0m0y+9aZr5Wy4WZgve9saxrob8P/rxQoGyIj
VQO+mS7FBLV9WpjvrcqpDq+EyFs70rhdy1Zvi8W0AIMvscBpIiZbzRZaE82cZWJ0
oDDYgP4cPYjjic6ST16cmhIg/LwmdbeQt9mtjcoE6ikCz8pfIGAcz/1UrqK9Estb
twgCTYtxbXxJiZ55AE52m2MLgT72bU9hy9+s6B1fMWSvqysT0FUcNL1tNRUcQ2BO
vWjShNySi8fxT1FSTo7yOZNbjSlfCwaioc1Ov9QyIWoLg2GLChrX6WFxB8nhFgV2
sLXj4LC4uxHhIzNtrduWFf90pugQcWx7I3+5NeatV+xgdiCnn5RYmfaTiIoYEk9+
oRXYa2V06PzJqiySlT0LMo/04Ch5jq4l4DXG3K3hbUwVSXTeE+4Xqm5lWV8aWEcv
fiHgF0M+QaRbub1Zz5uNJ5L9cnRJmog3U874vVgGSiopvoBbkcsJrboJlXJJbB1E
sBxJriUeb6s+brojAmAh5zYYT5d0bpQYXmfbtzbN4o8f9fxGblI=
=sF6s
-----END PGP SIGNATURE-----