-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jun 2026 13:13:13 +0000
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: mipsel
Version: 5.4.1-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: mipsel Build Daemon (mipsel-osuosl-04) <buildd_mips64el-mipsel-osuosl-04@buildd.debian.org>
Changed-By: Otto Kekäläinen <otto@debian.org>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1132497
Changes:
 xz-utils (5.4.1-1+deb12u1) bookworm; urgency=medium
 .
   * Backport upstream security fix for CVE-2026-34743, for which upstream states
     it's likely that this bug cannot be triggered in any real-world application,
     see https://tukaani.org/xz/index-append-overflow.html (Closes: #1132497)
   * Additionally backport related fix in xz to prevent an integer overflow in
     --files and --files0
   * Add myself as uploader and prepare gbp.conf and salsa-ci.yml for easier
     maintenance of this package in Bookworm (and later potentially in LTS)
Checksums-Sha1:
 4bc43a97f9fa08445c7ff9dbedc6575fe0e70159 265784 liblzma-dev_5.4.1-1+deb12u1_mipsel.deb
 58a36cdc7d2a21e016f4aa5f244bc6c089705bad 264268 liblzma5-dbgsym_5.4.1-1+deb12u1_mipsel.deb
 7842302203fe4d01a0f13639b1acc0e30b4fce7f 204848 liblzma5_5.4.1-1+deb12u1_mipsel.deb
 436ad99aaf029547808bcf617d11fe0437b634eb 92628 xz-utils-dbgsym_5.4.1-1+deb12u1_mipsel.deb
 e96c0a9e2d2326f954d36cb93ab0fcc5b2b1eb0b 7743 xz-utils_5.4.1-1+deb12u1_mipsel-buildd.buildinfo
 3f7903a30038f9c013fc9d3e4cebdf5a64bc0c5e 472988 xz-utils_5.4.1-1+deb12u1_mipsel.deb
 f02dee661261acca7b3f701079539bfeb7fb635c 114716 xzdec-dbgsym_5.4.1-1+deb12u1_mipsel.deb
 0110225b8d5e2af7830a3291a4058fb7c23d160c 159792 xzdec_5.4.1-1+deb12u1_mipsel.deb
Checksums-Sha256:
 63d322e7800280bb8db44fc65c5114f438a9b92d4818b74878849e13cf850536 265784 liblzma-dev_5.4.1-1+deb12u1_mipsel.deb
 18e1c32ecee3c4a63e21d9f9a6978f588375c37020e5510dbbde0860d2334e3d 264268 liblzma5-dbgsym_5.4.1-1+deb12u1_mipsel.deb
 def8eaf600e41c7051076a2099b89964644e49fbc615d13433501b7fa1076f2f 204848 liblzma5_5.4.1-1+deb12u1_mipsel.deb
 0fe2c263365a59d184bc3d7cba248da9e426f321d293d3b9e5ec9191130029a8 92628 xz-utils-dbgsym_5.4.1-1+deb12u1_mipsel.deb
 f30b9d66bc4d9bcd2c3bab0d70fec4f53515a592cf6812450ead3deb528562b3 7743 xz-utils_5.4.1-1+deb12u1_mipsel-buildd.buildinfo
 b38c0363618e9bb9fcb9d25cd7c42ca6cae7cb214edaacd7b020cdd8f4b7e44f 472988 xz-utils_5.4.1-1+deb12u1_mipsel.deb
 d33eab8ee69e7b036e1fe49ccd9dabd1cd4eb203387d0cfbbd11e30af6c04257 114716 xzdec-dbgsym_5.4.1-1+deb12u1_mipsel.deb
 de42e9dfe85ab5a58af98334bd5392b4204c0ce9719fba64a7bbc98dd590b5e9 159792 xzdec_5.4.1-1+deb12u1_mipsel.deb
Files:
 c8daec951f7d3c88457deb5ef95901f7 265784 libdevel optional liblzma-dev_5.4.1-1+deb12u1_mipsel.deb
 1bf79d463c43acbdd4743490be4d9ead 264268 debug optional liblzma5-dbgsym_5.4.1-1+deb12u1_mipsel.deb
 913a91ed610a6c99eeb9c49cae5e5d44 204848 libs optional liblzma5_5.4.1-1+deb12u1_mipsel.deb
 7113f90fc9a484e5d7bf80ff53756bb5 92628 debug optional xz-utils-dbgsym_5.4.1-1+deb12u1_mipsel.deb
 3806c52b44b0ba1b1a9f540dc9e046de 7743 utils optional xz-utils_5.4.1-1+deb12u1_mipsel-buildd.buildinfo
 7b2176edd279f0273211e7a020a20e65 472988 utils standard xz-utils_5.4.1-1+deb12u1_mipsel.deb
 de80689ebab629bb51c3e12192f316bf 114716 debug optional xzdec-dbgsym_5.4.1-1+deb12u1_mipsel.deb
 14177363dad97297ea1d7e3919bd93b7 159792 utils optional xzdec_5.4.1-1+deb12u1_mipsel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEyYUQCyzsgu940OiVpwP2OD8jZaoFAmpJESUACgkQpwP2OD8j
ZapXTA/+NNb+L/2R8ZOgTBstlGnn4vZO7DMf6T65S5jjOtropZwhMphHbEYZA8nR
71J1EQgMFAZUrxkSkZSB/rHAw1xEbt01sJ+7fjMPKV9FJbO3ElbcaF6IY0+xGILx
AheKt878N1rSJBmFdDXT+kAzbL4LOuiRC7ag2GfeoD0XYmNEAzd48cc6WR7p96eV
SbiheFTQksp22Ut2ueNCcXmxcC2o0oz/f8LGFXrMf2KvQNAewcpdGA8JqEyTk5gO
ppHwI3ida0F2IS5kg4iHjxPnSYB95ez+V1O/5WDJIE3lgfTfJD+uv3sPYdA2hwaK
bl+G3Od4SqCFsLWCrjzKboby2JDSdCekPRjPkjjT0fKA2e4TTni7bRBJ98s+YhNv
aUShgJZjhWiaQT0sKg3Gt4jLfPwA9dWOo/37aK0XUF1m5PjKB9SeEAX9n66smC7i
PzOo3gGkd2riEMI2S2uj1i/RaTL1hhqXT4ci9S5Q13OSdvYAvADHFlYN/+ky+ZMI
jjYCZCiw/lYGo6JA9hSvCYbGFxSXwm1kNaoXnr28l2PWYd9GReWTG0IfbpNr4sRF
U8LCMy+U7elpWPfQhTm8LovNZfD5bpKM1U5rvJ6pjH0zzkKKW+zJP+HjUVil3MIL
eAagoRerf8BUXXn+dWSqkPH1Djb468sbAX5aH39EqWdo4aCtGkQ=
=Zjnx
-----END PGP SIGNATURE-----