-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jun 2026 13:13:13 +0000
Source: xz-utils
Binary: liblzma-doc
Architecture: all
Version: 5.4.1-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Otto Kekäläinen <otto@debian.org>
Description:
 liblzma-doc - XZ-format compression library - API documentation
Closes: 1132497
Changes:
 xz-utils (5.4.1-1+deb12u1) bookworm; urgency=medium
 .
   * Backport upstream security fix for CVE-2026-34743, for which upstream states
     it's likely that this bug cannot be triggered in any real-world application,
     see https://tukaani.org/xz/index-append-overflow.html (Closes: #1132497)
   * Additionally backport related fix in xz to prevent an integer overflow in
     --files and --files0
   * Add myself as uploader and prepare gbp.conf and salsa-ci.yml for easier
     maintenance of this package in Bookworm (and later potentially in LTS)
Checksums-Sha1:
 1845892e01e30ffea3747f72a6831cb990a6be4e 430796 liblzma-doc_5.4.1-1+deb12u1_all.deb
 31878bd6aa0a49c05179246d9eafdcb4a6cef584 6461 xz-utils_5.4.1-1+deb12u1_all-buildd.buildinfo
Checksums-Sha256:
 b6ad8f746222037bd89d7347ca034c8d720775a83c84fc7c428174e364fb97ac 430796 liblzma-doc_5.4.1-1+deb12u1_all.deb
 c9b8b474ce516f5e7971321695ee60f151ea0b969b626c8fab0f0e03758dc38e 6461 xz-utils_5.4.1-1+deb12u1_all-buildd.buildinfo
Files:
 b8a4081f7c68a7e18fd22fef78b32143 430796 doc optional liblzma-doc_5.4.1-1+deb12u1_all.deb
 51a51b4688086ec7510409fd0e363200 6461 utils optional xz-utils_5.4.1-1+deb12u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=3l6i
-----END PGP SIGNATURE-----