-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jun 2026 13:13:13 +0000
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: armel
Version: 5.4.1-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: armel Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Otto Kekäläinen <otto@debian.org>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1132497
Changes:
 xz-utils (5.4.1-1+deb12u1) bookworm; urgency=medium
 .
   * Backport upstream security fix for CVE-2026-34743, for which upstream states
     it's likely that this bug cannot be triggered in any real-world application,
     see https://tukaani.org/xz/index-append-overflow.html (Closes: #1132497)
   * Additionally backport related fix in xz to prevent an integer overflow in
     --files and --files0
   * Add myself as uploader and prepare gbp.conf and salsa-ci.yml for easier
     maintenance of this package in Bookworm (and later potentially in LTS)
Checksums-Sha1:
 be3d9695fb6ef647d4376e95f4f5b6a46e82d000 249448 liblzma-dev_5.4.1-1+deb12u1_armel.deb
 f305216328009559a699b38d630ab51677d86b98 244296 liblzma5-dbgsym_5.4.1-1+deb12u1_armel.deb
 58b0adbb971727dc86cde3e91d203c60fa193057 193832 liblzma5_5.4.1-1+deb12u1_armel.deb
 d9d13c8203b336d47521cde49f8f6f16d9256a89 88712 xz-utils-dbgsym_5.4.1-1+deb12u1_armel.deb
 0c4c52584786a1c97cd7775e16bdc5ec9da342fd 7804 xz-utils_5.4.1-1+deb12u1_armel-buildd.buildinfo
 5f58171b0015142f39285bb927710da04858b8a9 469928 xz-utils_5.4.1-1+deb12u1_armel.deb
 ede8ba006fab63c41deddd1b9475a13869743554 107276 xzdec-dbgsym_5.4.1-1+deb12u1_armel.deb
 10aa14d02e4fa882df1c2666836531e43f6fed9b 154092 xzdec_5.4.1-1+deb12u1_armel.deb
Checksums-Sha256:
 ebc8264bfd5b9cd8063f2ea66b32c330b5d8eca97776e664cc763f54564b7df5 249448 liblzma-dev_5.4.1-1+deb12u1_armel.deb
 f87c93d5f77681c984c0ad586881167c59792f7438c5e4e98cca879af603df85 244296 liblzma5-dbgsym_5.4.1-1+deb12u1_armel.deb
 e70cf47ae962af4eb2a26201f8d397ff66d88e7125d089b521ce94293bd98b13 193832 liblzma5_5.4.1-1+deb12u1_armel.deb
 b8ea5f38b96a152529756c8e3755eb41d2f2f7db2611afa7598bbf26af62de2a 88712 xz-utils-dbgsym_5.4.1-1+deb12u1_armel.deb
 a886d7e268a638d38e7bb92c0f44c4cfbd45b4a90b796e61746a1b3ac20721f2 7804 xz-utils_5.4.1-1+deb12u1_armel-buildd.buildinfo
 373822e180f2a10d52f98416f3cfd60dedef6b2fa277527a8437965fb915f16c 469928 xz-utils_5.4.1-1+deb12u1_armel.deb
 32d4c21570fc2b2a7777513660e1d9e729a8cb91ada151d59c14031acf791572 107276 xzdec-dbgsym_5.4.1-1+deb12u1_armel.deb
 2e6f1635db158a5664ea70fb139bb6bf98419e0003852b2fcb8b0e0c756fef0b 154092 xzdec_5.4.1-1+deb12u1_armel.deb
Files:
 55544bac79efd9b5c793e850abadef53 249448 libdevel optional liblzma-dev_5.4.1-1+deb12u1_armel.deb
 b095ce9ef942d00381ab09107b357fa6 244296 debug optional liblzma5-dbgsym_5.4.1-1+deb12u1_armel.deb
 ad4b984f77e32b9eeeb499c17bee7257 193832 libs optional liblzma5_5.4.1-1+deb12u1_armel.deb
 06645d14861b90574a1e8699bf540f33 88712 debug optional xz-utils-dbgsym_5.4.1-1+deb12u1_armel.deb
 851d6fe8cf20f988d83b58d67435805d 7804 utils optional xz-utils_5.4.1-1+deb12u1_armel-buildd.buildinfo
 7ae957f1feb0bac934eb316cf1c106be 469928 utils standard xz-utils_5.4.1-1+deb12u1_armel.deb
 ff1a60c8a9ee1971fdb55e00fe735d58 107276 debug optional xzdec-dbgsym_5.4.1-1+deb12u1_armel.deb
 de18884f19a83512e3c5a069c4d2a939 154092 utils optional xzdec_5.4.1-1+deb12u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=rVDB
-----END PGP SIGNATURE-----