-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Jun 2026 13:13:13 +0000 Source: xz-utils Binary: liblzma-dev liblzma5 liblzma5-dbgsym xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym Architecture: mips64el Version: 5.4.1-1+deb12u1 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Otto Kekäläinen Description: liblzma-dev - XZ-format compression library - development files liblzma5 - XZ-format compression library xz-utils - XZ-format compression utilities xzdec - XZ-format compression utilities - tiny decompressors Closes: 1132497 Changes: xz-utils (5.4.1-1+deb12u1) bookworm; urgency=medium . * Backport upstream security fix for CVE-2026-34743, for which upstream states it's likely that this bug cannot be triggered in any real-world application, see https://tukaani.org/xz/index-append-overflow.html (Closes: #1132497) * Additionally backport related fix in xz to prevent an integer overflow in --files and --files0 * Add myself as uploader and prepare gbp.conf and salsa-ci.yml for easier maintenance of this package in Bookworm (and later potentially in LTS) Checksums-Sha1: f65afc0d62d5156084761b34f904d036e22bd941 263224 liblzma-dev_5.4.1-1+deb12u1_mips64el.deb bea58a981e13af44fe8f6f1803f703d4aad60408 262492 liblzma5-dbgsym_5.4.1-1+deb12u1_mips64el.deb 0676c863bf5cc46e2e7677b66587050fdb349682 201004 liblzma5_5.4.1-1+deb12u1_mips64el.deb 4ecc2e6c5be9ea02b1db586808abeb2d35cc78e7 94784 xz-utils-dbgsym_5.4.1-1+deb12u1_mips64el.deb 99cd3dbc458facd79d80b73f3b0659a2c369b608 7796 xz-utils_5.4.1-1+deb12u1_mips64el-buildd.buildinfo 2f39accc74eed100ecd15b4a0b5a10b8167dd23a 469776 xz-utils_5.4.1-1+deb12u1_mips64el.deb 7e28e6e1707a102f4ccd42f3a25bff77daebc534 114732 xzdec-dbgsym_5.4.1-1+deb12u1_mips64el.deb dc909b9f959d32e4bfd529d596e0997e6540ec76 158892 xzdec_5.4.1-1+deb12u1_mips64el.deb Checksums-Sha256: 70d4b5379b73ffddff761a241a3f804ba191d07fd26543edb27d7d568b49b304 263224 liblzma-dev_5.4.1-1+deb12u1_mips64el.deb f75190f970ecddec3ae8541f8eff01d12b3aca5e60c8fa99407a22b25dd62bad 262492 liblzma5-dbgsym_5.4.1-1+deb12u1_mips64el.deb caee71ace023af4c7348c0b7ca4ab3f7380cef3cdb35a63da3923fdba5d21819 201004 liblzma5_5.4.1-1+deb12u1_mips64el.deb a11c9095bc8b73faf440e2b1928bb21ace6c2c0c34c77ac77a05295123c0c01b 94784 xz-utils-dbgsym_5.4.1-1+deb12u1_mips64el.deb cc1de44854bb95d5aabfbaf59000e205ac45fbee9d80127802b3d3ed137166a1 7796 xz-utils_5.4.1-1+deb12u1_mips64el-buildd.buildinfo 6008f02d4128d8567c7dbe4b1173f82bc241319b3f47c0ae18b4115fc09d1185 469776 xz-utils_5.4.1-1+deb12u1_mips64el.deb 23591ed5e30c85d25a37705ece02bcd18db4e5a8464fb20e07750e8ecc7de5b6 114732 xzdec-dbgsym_5.4.1-1+deb12u1_mips64el.deb 7d7408757aa6db0fa0f64abade6c7fb3bdf945d064bc79f15de65c1c6d1265ec 158892 xzdec_5.4.1-1+deb12u1_mips64el.deb Files: d32bd6c07faf999d4b771c75180934a6 263224 libdevel optional liblzma-dev_5.4.1-1+deb12u1_mips64el.deb 918f658d3cd66854028ecc03319ac909 262492 debug optional liblzma5-dbgsym_5.4.1-1+deb12u1_mips64el.deb f4c8459dff3e592f343d797734a3c1f0 201004 libs optional liblzma5_5.4.1-1+deb12u1_mips64el.deb 65a303fb55f67ca25f0aab6cbc2d2abb 94784 debug optional xz-utils-dbgsym_5.4.1-1+deb12u1_mips64el.deb 4316db72e2125e67411cba7917415c92 7796 utils optional xz-utils_5.4.1-1+deb12u1_mips64el-buildd.buildinfo 5b096ca1196fe53c3b39ded27c3508f5 469776 utils standard xz-utils_5.4.1-1+deb12u1_mips64el.deb 0b20c093631e017284744f8aa8377310 114732 debug optional xzdec-dbgsym_5.4.1-1+deb12u1_mips64el.deb fff7bdbfdde067bc452ac4d810073c7d 158892 utils optional xzdec_5.4.1-1+deb12u1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7sd7jtCtE5bBJ1Hx/qmHKZssfSAFAmpJEJoACgkQ/qmHKZss fSB3IRAA0yvgof1RVEY5fWPvPK2GWeL4qf6ACswiWmU6xpgfzGiYKniuVIkdiXwE 1dBrH9ez8/BYpI/q/yonAFWZAdd6OM/mJNbwQHNqsEwSltg563Eflp5Zic7xOFSq zKoMamX8TQErWe5C+M7wFM4hC20xjgkgkYnDkjzv547TDuLD6LLDcNDkZPfqdqgK +q2cz05AzWIZOyd5r51Iu+VnOS+C60kw27ozqnedrHQBLke2WgsnJTYGCdTgHLyA 3M0pKJXrSTcG59aKhpSFmfMpmHT0nfBEkdctAHPYXEXvLGSwmFzf5SwIRqhzpkoW K/XhUVxILE4RALFMNT/KYkInoahX6YwXqBr2Ixu+NY8EemnDlvc7i88lfEDszC2v gIXTtaaUit6qn/46v34xU0lHQ9fFwLKi52Q877o4DA2tIsLbpLd10r+xuON8NejD o86PL8XaAuKJ2fdDyw2bn/01Et5qixvXxleZNLg+yd8/VuK/L2mbZm9sLyZS4UiN VF/zohB5oicBRlfEYHGams1Zlzh/j/ynmj35IjOYGRFMVVbgUr1ZvfVZY5keIjW9 0gMcjpihldQxQCbv/n57fOtNiU4Am/oi6/jbK9ctyaUtRd0KplSioQC83txmfRQu OCcG/p0Wlh07UUEsndcLxdqF0CVbIP9D+4hvlFT9u5MWfkZ59Og= =fhAf -----END PGP SIGNATURE-----