-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Jul 2026 22:00:37 +0300
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym liblzma5-udeb xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: riscv64
Version: 5.8.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-osuosl-03) <buildd_riscv64-rv-osuosl-03@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 liblzma5-udeb - XZ-format compression library (udeb)
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1132497
Changes:
 xz-utils (5.8.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-34743: Buffer overflow in lzma_index_append()
     (Closes: #1132497)
Checksums-Sha1:
 6677089915c5156957ba91c795577e1c31a22a1b 476780 liblzma-dev_5.8.1-1+deb13u1_riscv64.deb
 a858404efb3d8680e264407758248460866a7669 247484 liblzma5-dbgsym_5.8.1-1+deb13u1_riscv64.deb
 1d09f612a24aba665fc545cb1fba82d574101539 94016 liblzma5-udeb_5.8.1-1+deb13u1_riscv64.udeb
 27821e0ed4312b4acbfd42917fc61de25ef37849 312684 liblzma5_5.8.1-1+deb13u1_riscv64.deb
 22cad4a666858c5aecd1cc3ca1ac08d02e44e2f6 109412 xz-utils-dbgsym_5.8.1-1+deb13u1_riscv64.deb
 3bbb7c6d9c8bc9bfba83901b0a82c23dfecbbf35 7897 xz-utils_5.8.1-1+deb13u1_riscv64-buildd.buildinfo
 8427e7a3d5ac34bae89a0a845c0388c2460a6913 658936 xz-utils_5.8.1-1+deb13u1_riscv64.deb
 aa0a007f758ad2f91b2faf9b49b58a26d1674a92 108268 xzdec-dbgsym_5.8.1-1+deb13u1_riscv64.deb
 3a60ba7032d8944a96465b3c3a8df73c1a5e56f0 259416 xzdec_5.8.1-1+deb13u1_riscv64.deb
Checksums-Sha256:
 afcbbfc1456d28999013bda0a2e3fdc96b2fa311f50b171e5d0c6496bb36e33c 476780 liblzma-dev_5.8.1-1+deb13u1_riscv64.deb
 1023edb8faf4f5af4501e3c1ef0de651c4d3751e7bb0044fd9ed468c9eed8799 247484 liblzma5-dbgsym_5.8.1-1+deb13u1_riscv64.deb
 b0c1ccce1bce0afe0dd5c4ff81a198650d4b248fcc4884540615a901a8554b97 94016 liblzma5-udeb_5.8.1-1+deb13u1_riscv64.udeb
 d6b628145f0e58ff4e406cc1f6b656830a95b6ba98da538dbfac26fab672475c 312684 liblzma5_5.8.1-1+deb13u1_riscv64.deb
 5249dd3a51f6ec89b45a4e689535af752a4edae6536d19bd38be420ff5d595d8 109412 xz-utils-dbgsym_5.8.1-1+deb13u1_riscv64.deb
 24c16ee4d631085054cd39f5212713d4902ac7ba4395183643fe7cddf72b61ff 7897 xz-utils_5.8.1-1+deb13u1_riscv64-buildd.buildinfo
 7318c5d4a0fbf83cd707e032de5af696d81c689eaf67ced879201cac232c633d 658936 xz-utils_5.8.1-1+deb13u1_riscv64.deb
 b7ab5c23eb61ad3caa4fb02271b8de5b01d49d1df832c0d242491a24c0a62cde 108268 xzdec-dbgsym_5.8.1-1+deb13u1_riscv64.deb
 5b4a833da4cb811c1c3e256ae59c3fb3dee8d386787945372363084e8aeecdcc 259416 xzdec_5.8.1-1+deb13u1_riscv64.deb
Files:
 e1ab8be1b902d765ad26bc9f3acf472b 476780 libdevel optional liblzma-dev_5.8.1-1+deb13u1_riscv64.deb
 81b5ac96343fa5032d303305dfc6a862 247484 debug optional liblzma5-dbgsym_5.8.1-1+deb13u1_riscv64.deb
 aa39b8ec25e4811069618e3acbc0e2c8 94016 debian-installer optional liblzma5-udeb_5.8.1-1+deb13u1_riscv64.udeb
 e7879a01142138229148f742a4dde8a3 312684 libs optional liblzma5_5.8.1-1+deb13u1_riscv64.deb
 3769f6fbbf47e261c43e69a3d13887e1 109412 debug optional xz-utils-dbgsym_5.8.1-1+deb13u1_riscv64.deb
 c28cffcfa27d01195ecd2b23b891bbca 7897 utils optional xz-utils_5.8.1-1+deb13u1_riscv64-buildd.buildinfo
 f40214d2edfa4277dd0a5680e4f43118 658936 utils standard xz-utils_5.8.1-1+deb13u1_riscv64.deb
 b7420bd96dac24319da1a3d457e2a8d8 108268 debug optional xzdec-dbgsym_5.8.1-1+deb13u1_riscv64.deb
 8afc48a9cb9fc2c1967d72028af5813c 259416 utils optional xzdec_5.8.1-1+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEExv8RwtKAmv8J56r/6ETk30hvxtkFAmpJC2EACgkQ6ETk30hv
xtkwpg//V7dTtaJ92yS9GZvRoRvpNdjphyGxlf2YB5ViP81tOovL78y2E7X595HW
DvouwXzSwVjJqU4MotbWopzSWSqK8iCpVivJIB12XcN5C8+m36vog63wqeZq1yC4
qmJlK0vRco1RfC0uAH8I8k3CAGF973W0cn3THi/qOaRoegyTyGaD06WR3+nzZK8n
5GFEvtVkdgPu/uPSuiNAEECeqZKpufdXJzcI/8zzxEH+JBs6JWF4OHqvknMI9c6D
Gq7U/7imjJI3QeFBfi05/l9NWVtXrMmbFnIUEQaXL8VNmpJGeyDEe4FpRxNmX+GR
7q+4x7I4151oNzRaB2R0kOanniFPBNf3ayp/IyHKlQeVV5S1agOyZ1PaJVFWM4JT
OfCJzEOxa36y6bRNjDnKYTyZlyrG9/fLeGCYC/WvDBcctEqidRIUxsK0POAH085p
WF+bHFgmkdW+UnN4mcvIDUbfl80JmJJi/4tAiyBaB5NYB/agfg499LiIF8KSB7VN
yUL2TiUvTd/LlpMXa8Kzel249dKGdNst3/E5eRulPCbS9DJh0rm691yycz330S04
AnzpkeSFeEB3/z25M/cI7YIOLqvtOIVukoCF5DYbbEIa9MSMmn3IT92SuD8fBe59
Led6WY5EyZBPMzyXG5Zqzr/0hfq5yVTU6pPsNory53walFUpQ7U=
=PfN6
-----END PGP SIGNATURE-----