-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Jul 2026 22:00:37 +0300
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym liblzma5-udeb xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: i386
Version: 5.8.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 liblzma5-udeb - XZ-format compression library (udeb)
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1132497
Changes:
 xz-utils (5.8.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-34743: Buffer overflow in lzma_index_append()
     (Closes: #1132497)
Checksums-Sha1:
 278c35b382686996691870d28aa915c057868376 362252 liblzma-dev_5.8.1-1+deb13u1_i386.deb
 be1ef8ad3e33563e679f0cd0cf70608ed956a082 263788 liblzma5-dbgsym_5.8.1-1+deb13u1_i386.deb
 78f7ce80991012ce563b33eb8259abbc725684d7 100872 liblzma5-udeb_5.8.1-1+deb13u1_i386.udeb
 7fd9f2e51981094c8374841ad33f2dd6e02717ab 319756 liblzma5_5.8.1-1+deb13u1_i386.deb
 3f628c46e2bcd006739416c5ecc7c83ffcd9e1e7 99932 xz-utils-dbgsym_5.8.1-1+deb13u1_i386.deb
 ae69af2fd037c25d323bc07b37a89283cbaafd4c 7800 xz-utils_5.8.1-1+deb13u1_i386-buildd.buildinfo
 6ed219fb9155ae1cfde2484a0ce06896104a9ef3 663860 xz-utils_5.8.1-1+deb13u1_i386.deb
 e556423328abd35e886e82f3e1df06ce252e0462 114116 xzdec-dbgsym_5.8.1-1+deb13u1_i386.deb
 4a12c7a3b92cece89eb33c5020f906615cd24725 258736 xzdec_5.8.1-1+deb13u1_i386.deb
Checksums-Sha256:
 5f6ba6e8593af012b737c0942cad66aa780ea192f8694808c324065a11d9e210 362252 liblzma-dev_5.8.1-1+deb13u1_i386.deb
 a5e3ca10342586cab2f60abf87a5be6a76f8a9bc9d8d8a8f680e953303f50ff5 263788 liblzma5-dbgsym_5.8.1-1+deb13u1_i386.deb
 2100b6693ebc8aab537ba4cbd2d162f58cd63ae8a3d7f0b5b6b7cf0924fdbad3 100872 liblzma5-udeb_5.8.1-1+deb13u1_i386.udeb
 d686140b257bdc58e342a22ab5006c9d0327553a3ac273838109ef9ddf55621c 319756 liblzma5_5.8.1-1+deb13u1_i386.deb
 112b0b78d494177bf60530fe34eb2bdeec6c4727dd4addff6a4c2b407b820cdf 99932 xz-utils-dbgsym_5.8.1-1+deb13u1_i386.deb
 89d970cf32fd5545bb18f3c17d62a473e28366fe25b23bc9a735a624b48eec31 7800 xz-utils_5.8.1-1+deb13u1_i386-buildd.buildinfo
 e73a11c10211a6a1a12e2f4fa965936e922296cc2e99c5f7a5e0d7323e855ee0 663860 xz-utils_5.8.1-1+deb13u1_i386.deb
 602f4339c59661630b61a09a200ffcac8d3a0fad077e51802a0f1113c330908c 114116 xzdec-dbgsym_5.8.1-1+deb13u1_i386.deb
 ac1e76c471aaff9127a0fcb151ed38caa65de7d2b8713c2951696d30baed3f93 258736 xzdec_5.8.1-1+deb13u1_i386.deb
Files:
 1c6882a5bb4b8694b1e748bff2abf2fb 362252 libdevel optional liblzma-dev_5.8.1-1+deb13u1_i386.deb
 89c71fcdca606840b1b8155b5f9cc2b5 263788 debug optional liblzma5-dbgsym_5.8.1-1+deb13u1_i386.deb
 5022e272206517ac203109df423d09f7 100872 debian-installer optional liblzma5-udeb_5.8.1-1+deb13u1_i386.udeb
 20e261c1ef2b30aa59f6ea8482f33cd4 319756 libs optional liblzma5_5.8.1-1+deb13u1_i386.deb
 a0cdfbe63c4bd634f0747fffa997b1e5 99932 debug optional xz-utils-dbgsym_5.8.1-1+deb13u1_i386.deb
 d02762a08d941bde487b980a7e6765ad 7800 utils optional xz-utils_5.8.1-1+deb13u1_i386-buildd.buildinfo
 d4e75b02ef85d4b0b9c260b2f155f1eb 663860 utils standard xz-utils_5.8.1-1+deb13u1_i386.deb
 17e7c28b2ef8612f61fe6251dd5e9b30 114116 debug optional xzdec-dbgsym_5.8.1-1+deb13u1_i386.deb
 701a1d7cc302635d9d0884444931d196 258736 utils optional xzdec_5.8.1-1+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmpJBvoACgkQf2INRiCd
aWLE3xAAi8hEm82F8un6BK8B/p/ZbF0+xtbPGZxeaU6IlVO/6sE2pv6IEyobXMDr
iqrIsx8EpWA1be14k1Eillb3Lpj/O+B/sUkt1DEdwBwa1dUVPE1vaQVbd1bDJ8kx
FW6rE1f+vuqn/uv7FkIM9hCm26tdyFh1eWzaFHuP1H931a8pZrfi9QAOFZf61MQ3
y+Rj8GXJ1q5ne48caTjYPBtsRk/n9+xFYqzutgt6x7P2xCXIogWOkiYOR7dzWBbk
F35tbigatDzZnlUYQBVbeW1j/5n7gGTOd1LUaoIGy3y2H0iWcbT+cO+FvOxwQvsf
BaU7/Mpe9SX/vNfhDwULOJVMJ0eHN27Y8WIIxM4tkll5XWNeLwwuJAq8TkyG1W4r
fvyTLXsB/58nXh4YYJmZNASAC5VsRkGh97MBsc1DT0tnvpvDrEjW47KMxm9mVGWL
7VPXS53s1o6DRyPIU8gNOU48/Fj+Sd20sQ2yiS1cBs7AcUf9cgjAVMdluIIRfpDL
rmW3Wv/+aAeuaBPdGaNamZHtxO8i6vdi0yxC32LqcOjB45V6wEKNJahj+c1wCckW
PirV2CDD/EvDBbqj43LbeVCbGCfPJ3itljIcPICK0zO1Epfxoi0kg/gF2iAP9uDZ
ENFUZ5a4SJvtlCqhFc1fPSDdiKLGxINyW2CnzooqCxeRCJfyHPk=
=saDS
-----END PGP SIGNATURE-----