-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jun 2026 13:13:13 +0000
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: s390x
Version: 5.4.1-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Otto Kekäläinen <otto@debian.org>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1132497
Changes:
 xz-utils (5.4.1-1+deb12u1) bookworm; urgency=medium
 .
   * Backport upstream security fix for CVE-2026-34743, for which upstream states
     it's likely that this bug cannot be triggered in any real-world application,
     see https://tukaani.org/xz/index-append-overflow.html (Closes: #1132497)
   * Additionally backport related fix in xz to prevent an integer overflow in
     --files and --files0
   * Add myself as uploader and prepare gbp.conf and salsa-ci.yml for easier
     maintenance of this package in Bookworm (and later potentially in LTS)
Checksums-Sha1:
 9ffbb496ac8d6c515f191189826be7ff3b9a7eb5 254968 liblzma-dev_5.4.1-1+deb12u1_s390x.deb
 5fbcb65a5420fd5fe3c28c233ef3857698be79d9 250540 liblzma5-dbgsym_5.4.1-1+deb12u1_s390x.deb
 40cbc883592a2c42f10a44f91a5c9fe0a205dc3a 200564 liblzma5_5.4.1-1+deb12u1_s390x.deb
 e3a218e10518fb22f8b6facafc3c6c314eb1dd4e 87236 xz-utils-dbgsym_5.4.1-1+deb12u1_s390x.deb
 7d4c6255106a268822a58d627f31a92a5f61adb3 7834 xz-utils_5.4.1-1+deb12u1_s390x-buildd.buildinfo
 ed35585a5f438ea30642d8e1d6d8d290f1424b5c 468800 xz-utils_5.4.1-1+deb12u1_s390x.deb
 317c86d7b3fb634bba6680cc8236ce46538f09bd 110224 xzdec-dbgsym_5.4.1-1+deb12u1_s390x.deb
 7b0455b79eb7bd6427a7ccd62e44002ae88a5537 157016 xzdec_5.4.1-1+deb12u1_s390x.deb
Checksums-Sha256:
 00d3da1c5e5d73379f3e3ff2d68cce0e5a223fcf3c82ac5fb9a1796a26388529 254968 liblzma-dev_5.4.1-1+deb12u1_s390x.deb
 25325c152c614377048ee919b20212929059b534aeb665072bc5b3afb2d04398 250540 liblzma5-dbgsym_5.4.1-1+deb12u1_s390x.deb
 4f9d0f49b63233d36623ef550cbd3d0f2f4879463322e587473e22b862827fdb 200564 liblzma5_5.4.1-1+deb12u1_s390x.deb
 470594d544beddbc5c2b33b7d6ef909338a1e28c8e2664299a7c5df00a6adabf 87236 xz-utils-dbgsym_5.4.1-1+deb12u1_s390x.deb
 f1292da4c972c24df11f04c6d165d6552397e27e3097873ebdf349b8b14b0766 7834 xz-utils_5.4.1-1+deb12u1_s390x-buildd.buildinfo
 2e276e7787ba8ea91a2b4eb795d1a7bd7ad67cc8b08c22fe3b94dc2983171b9f 468800 xz-utils_5.4.1-1+deb12u1_s390x.deb
 e01cc010a29a1c5297618e5a3fb4ea3aa847b8d7712c71196e1094b854c893ea 110224 xzdec-dbgsym_5.4.1-1+deb12u1_s390x.deb
 3097e040f4a993b3213dc7705a57b8f400e88f99d6afff9604bfe4aaced1c22c 157016 xzdec_5.4.1-1+deb12u1_s390x.deb
Files:
 3b2f697b36c796906458c5bce8c99c45 254968 libdevel optional liblzma-dev_5.4.1-1+deb12u1_s390x.deb
 fb98846e7139974342afa28320a95552 250540 debug optional liblzma5-dbgsym_5.4.1-1+deb12u1_s390x.deb
 c7cf9b809b4eee781362a49ddc6d6e48 200564 libs optional liblzma5_5.4.1-1+deb12u1_s390x.deb
 d24be3b36eee29099cd850b9e4f53d0e 87236 debug optional xz-utils-dbgsym_5.4.1-1+deb12u1_s390x.deb
 e4c9987faf981396475f41f71d861357 7834 utils optional xz-utils_5.4.1-1+deb12u1_s390x-buildd.buildinfo
 5ec29710b982996222064fced0f061ac 468800 utils standard xz-utils_5.4.1-1+deb12u1_s390x.deb
 ae19b033169f3288935f5b8a1948e572 110224 debug optional xzdec-dbgsym_5.4.1-1+deb12u1_s390x.deb
 cbb5059f59a2b922b8c7ce7d7ff1e2c8 157016 utils optional xzdec_5.4.1-1+deb12u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=j4gM
-----END PGP SIGNATURE-----