-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Nov 2026 06:57:53 +0100 Source: zlib Binary: lib32z1 lib32z1-dbgsym lib32z1-dev libminizip-dev libminizip1t64 libminizip1t64-dbgsym minizip minizip-dbgsym zlib1g zlib1g-dbgsym zlib1g-dev zlib1g-udeb Architecture: amd64 Version: 1:1.3.dfsg+really1.3.1-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Salvatore Bonaccorso Description: lib32z1 - compression library - 32 bit runtime lib32z1-dev - compression library - 32 bit - DO NOT USE EXCEPT FOR PACKAGING libminizip-dev - compression library - minizip development files libminizip1t64 - compression library - minizip library minizip - compression library - minizip tools zlib1g - compression library - runtime zlib1g-dev - compression library - development zlib1g-udeb - compression library - runtime for Debian installer (udeb) Closes: 1128336 1146895 Changes: zlib (1:1.3.dfsg+really1.3.1-1+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * Check for negative lengths in crc32_combine functions (CVE-2026-27171) (Closes: #1128336) * Fix buffer overflow bug in non-blocking gzwrite (CVE-2026-85091) (Closes: #1146895) Checksums-Sha1: ebd5612d5360cc50f9ffe67c077fb29068e61b64 107444 lib32z1-dbgsym_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb b01b65827c38af17919b635d4c6854e5ffe62523 87340 lib32z1-dev_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 4296d1d3756e93b1cca9309187ee3d20b2be870c 84516 lib32z1_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb cb1deee8fc977c414009c12c8550a8ea47097a22 60892 libminizip-dev_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 51e077e83173227044bb596edcbdfd37482b55be 67492 libminizip1t64-dbgsym_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 1d97cb043ed3c25101bb63ad1271484d06deee11 53208 libminizip1t64_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 19f4b715407c624ab6b403329b07c21c035bd255 24044 minizip-dbgsym_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb bf4a2596c007a9713e0125c660f79e2a2228af10 43868 minizip_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 964cf7ff3965f2673f49da16626b8e14b4a43792 120812 zlib1g-dbgsym_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 54908248c74eecbf9107c47458ae8019db79b79d 919568 zlib1g-dev_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 07451214a9028f1889f2565a186adef79e29558e 71188 zlib1g-udeb_1.3.dfsg+really1.3.1-1+deb13u1_amd64.udeb d2eca18b98f94b9179c90e09da4760a27ad1e107 88720 zlib1g_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 905f9eabdfcaddbb06fae89a8c427651efd1a938 10191 zlib_1.3.dfsg+really1.3.1-1+deb13u1_amd64-buildd.buildinfo Checksums-Sha256: 2197d98aeae4f92314d613ccf9495a6131e228049a2fae72bb691f36a804677f 107444 lib32z1-dbgsym_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 9ad8639ce912bf6f7fd4ef39a65a6eb68c9e4d881dc9c363d4304cc385f2e83e 87340 lib32z1-dev_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 3ec7fe3b0192357c66a1fce2c0400b9f69d29e8ffec40580303ba171d5481b1c 84516 lib32z1_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 89fc08d25a3f0feadfe75c874a4e9b093da0dedf091d896e018abc231aae9085 60892 libminizip-dev_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 4127bd43e70f3e0e8144c538f09fbe4fd3ff9f55089cc312fee02864aa73fd99 67492 libminizip1t64-dbgsym_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 141c00221b2e65e289729649b3d7fbab5231ac0339b8e3ad7aaca67e92d62f67 53208 libminizip1t64_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb c0022f8bd6b1cd3987de0cf20137637cfa92b6995df660efc4598c3f8660c248 24044 minizip-dbgsym_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb c99b6968e0d88b13ea40843eb307d7ebd183bc9fef0d4c48ed08b78641d6d70d 43868 minizip_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 4aeb1e9e179154d60ee543bad51a7f3bb33472566901c5157f29225a0c39677b 120812 zlib1g-dbgsym_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 88ebb839a7a54c97dceb647e2a2bfa2451d6f440801ceef3d56f654022637eb9 919568 zlib1g-dev_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 060e86756ef6f24d73ab03345a614033b6f7bbab1150e111c81264b779131e56 71188 zlib1g-udeb_1.3.dfsg+really1.3.1-1+deb13u1_amd64.udeb 8c27c342230503b73dfde629642c3b352e87b554e06d60cf58772f236a305ceb 88720 zlib1g_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb b898750bf719e0e7519ac807ed340386ba4bc6decf6ccc625c6513b542656f33 10191 zlib_1.3.dfsg+really1.3.1-1+deb13u1_amd64-buildd.buildinfo Files: 5d9a0e96b870122fce2fcea269b5c419 107444 debug optional lib32z1-dbgsym_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 72b587afd62933e4050047770d542120 87340 libdevel optional lib32z1-dev_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 1d0ff3573d17d57fef54f9c14bcca538 84516 libs optional lib32z1_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 36a566d162f7c8dece292797619e95d8 60892 libdevel optional libminizip-dev_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb acdbbdd0e1c3431b4bbe28ff8c69fc4b 67492 debug optional libminizip1t64-dbgsym_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 7206ecbcd213b98d4bb1240f5ad96f53 53208 libs optional libminizip1t64_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb df0f36eb2471410850290d8dd42bfa9d 24044 debug optional minizip-dbgsym_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 95d05a7d2df1d61308c3843ab34b19be 43868 utils optional minizip_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 0c0e5199f33b1c8e7bb1de210cfe10fa 120812 debug optional zlib1g-dbgsym_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb f0cb22f190ff480a56f53f74b6793626 919568 libdevel optional zlib1g-dev_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 2988769301332f35d453956f09b4367b 71188 debian-installer optional zlib1g-udeb_1.3.dfsg+really1.3.1-1+deb13u1_amd64.udeb 6c51ada7eb3cee56eb17db4689a030ac 88720 libs required zlib1g_1.3.dfsg+really1.3.1-1+deb13u1_amd64.deb 8a2cdfa0f1bb7c0b2e2aa4b17f0e86fc 10191 libs optional zlib_1.3.dfsg+really1.3.1-1+deb13u1_amd64-buildd.buildinfo Package-Type: udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmrogqkACgkQN8Ugyu9d QiQAgQ//apIbtDeXz6L3uxzbleJ1EOpdXLYHR/nNSj/xVnNPY/gEhqkzll4Foc8q QLvso9i9+M7ij/iOhm0UVIw3eXN1mbFN0LrsoiptXb6jPbjSkALO8I4dSJofvFJY sCtTDINc/UfZ7Whtu0LHEHGRZY0n6ZGPZ16aZDBNtI5VWdPksmZs+NjJeF1yVram qNXmn90T2xiMZx3qXjiQvJp6mUV07VivnnS0USWJnjQ8LmXUd93Iv+ZiOPGYGhvj +S4X7q3RAy542/aqTkI8zs9+LGbPKhufEy/SpYy1kuo9IKRv5/djsgkmswkrVhat 5639fxNreGq9KVr/HkpO3AyC9o6zz5Mh6F6K/tszkBeppTfDuRjdCkR5tcL2teh3 MlYa7xDmTMjxIvtKKzU1VWqANl9XGLVpSviGX4djUcpol4Vd8CuINqAxQjGqpnqX /H0yrr2EEY+b9n778JFnkyFdLnQ3HIl1hJKIkWk9CdEyxMNAe7nCcrDaT7mCsrZg Ymma91QhnUL3h7W7oXQ+xGHnxCXdgUj2cCOVRwoAU1agdd/iF4NT3GfRaio+6wV2 bbA2ASpM+p2jIiFHcsheYARWq3Nf2sHnU9seUFPvC6rZXBgz7kF7MkAkUBYe3bOR 5Od0rBUfBqERJ4n5ApyD4Gywwy7j1X8indgWyK0PLRgRIf0khTk= =YGjf -----END PGP SIGNATURE-----