-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Sep 2026 15:30:44 +0200 Source: xz-utils Binary: liblzma-dev liblzma5 liblzma5-dbgsym liblzma5-udeb xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym Architecture: i386 Version: 5.8.1-1+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Sebastian Andrzej Siewior Description: liblzma-dev - XZ-format compression library - development files liblzma5 - XZ-format compression library liblzma5-udeb - XZ-format compression library (udeb) xz-utils - XZ-format compression utilities xzdec - XZ-format compression utilities - tiny decompressors Closes: 1147318 Changes: xz-utils (5.8.1-1+deb13u2) trixie-security; urgency=medium . * GHSA-5qpq-xqfv-j9pg ("Invalid write if a decoder is reinitialized after allocation failure") (Closes: #1147318). * Protect progress variable with a mutex. Checksums-Sha1: 04056f463a9655eed80066db760c0a351b41b295 362592 liblzma-dev_5.8.1-1+deb13u2_i386.deb d7ee7621b020f21d04e18ad90e71aaff5c934021 264352 liblzma5-dbgsym_5.8.1-1+deb13u2_i386.deb 68bc2495f291cae69a8ac39bb12ac3d854abf677 101032 liblzma5-udeb_5.8.1-1+deb13u2_i386.udeb fb9ab6b3715c6087890e7891a9fbe34227fd6b2c 320024 liblzma5_5.8.1-1+deb13u2_i386.deb 84c1a39e2d6c618b9f14287fc7d693e276eb46da 99924 xz-utils-dbgsym_5.8.1-1+deb13u2_i386.deb d3112bf1d60f414e42476bb63b430fd1d18d1c14 7951 xz-utils_5.8.1-1+deb13u2_i386-buildd.buildinfo 5f6d1a2a935e5ad8f6ed25dd1b361cdbcad7e831 664008 xz-utils_5.8.1-1+deb13u2_i386.deb 1d47994947c2948ea6bc73d65ca20f510c1e128f 114172 xzdec-dbgsym_5.8.1-1+deb13u2_i386.deb 8a05e18a7bb7608382e39a5545ed9175ad4d565f 258880 xzdec_5.8.1-1+deb13u2_i386.deb Checksums-Sha256: f7875fcd19b9d83095dc5b4abe02f365d3afd6d6a087150631140c7a2d33d3d0 362592 liblzma-dev_5.8.1-1+deb13u2_i386.deb f1d153b7be459bf9888e5c90f50fe2924b6ce8581a41fb6d54f986e66eb864a2 264352 liblzma5-dbgsym_5.8.1-1+deb13u2_i386.deb 4c6cb540c073673e10a2ec6408c976f64d49afb032195ce4fddaad8af74c6433 101032 liblzma5-udeb_5.8.1-1+deb13u2_i386.udeb d37759a38fe8814b9b2cc5c8083064cd290ffaa85408968643be5b6f11903b96 320024 liblzma5_5.8.1-1+deb13u2_i386.deb 8aeb4dfe2ee98377ac7ca66c7d44da9464112d20bb3d93e8f7563fe86f428f5c 99924 xz-utils-dbgsym_5.8.1-1+deb13u2_i386.deb cf0d711637886cf745ca5ad7bada6cb0c981e8b6b24189f39e0b1ba795234370 7951 xz-utils_5.8.1-1+deb13u2_i386-buildd.buildinfo a5b56ee30969b3075c1fd63f7f99687fb65485bab784a09d3426d9517fda5794 664008 xz-utils_5.8.1-1+deb13u2_i386.deb b952509e29ced0d8067bf2742771763bb5beebcafe1d096ede20cac6b6acee6e 114172 xzdec-dbgsym_5.8.1-1+deb13u2_i386.deb fb039c2d2842ff4fafb43157207fb0b807b9b790241b116abcea8ae82d58e8c8 258880 xzdec_5.8.1-1+deb13u2_i386.deb Files: d70445799e0529be496749586ad285ef 362592 libdevel optional liblzma-dev_5.8.1-1+deb13u2_i386.deb 6eb9ecc75e797a7e67dadd00c17dcf4a 264352 debug optional liblzma5-dbgsym_5.8.1-1+deb13u2_i386.deb 725f5bc86975db7c2ad6e6ad4afb3305 101032 debian-installer optional liblzma5-udeb_5.8.1-1+deb13u2_i386.udeb 422d750730607cb76fa9b78590e429e5 320024 libs optional liblzma5_5.8.1-1+deb13u2_i386.deb aadf67c871db3186eaf6094d9d6f055d 99924 debug optional xz-utils-dbgsym_5.8.1-1+deb13u2_i386.deb 4f484a892517033e1761dffd38b364f8 7951 utils optional xz-utils_5.8.1-1+deb13u2_i386-buildd.buildinfo 99b6340c0c4f92e25d9f490dab2ae927 664008 utils standard xz-utils_5.8.1-1+deb13u2_i386.deb 32df127b814cddcdb22c930c49aa1cfc 114172 debug optional xzdec-dbgsym_5.8.1-1+deb13u2_i386.deb cf81aedcbe292ce39fdb908093b79dcd 258880 utils optional xzdec_5.8.1-1+deb13u2_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmq5ISoACgkQbheoBegw XLIjmA//QwzGqD/q6lN5y5YnfGEGDx09ZecNEsDKKHdNKqVPFryWmmqQj3r/ZfVl bMUNvKl69dEWtlFgiW9/pISVMvOmDjlLuLyHAV2qpbFdtH+zuf41L/IQ5dl8xPaK 3ohPecfGvjPMXDEQruRTA+2zdnH5vpCYEcheQXu+9VdS+KpdCEy+j0Pvwjr7H/6g MT/PF4u12zz3er/GB7S2rOy+nc4UNTW1/IOW40a9nI9Sh0x3JMOIlBlCcIjZOPpY 1cTimJ8Sl8esnb2gBUqrCgSgFaOAHSYm9nwXTxySmPN00dEchkglOpcKsjlG19+I d8gg7E5Mdcs2IddyzgMof91QcIjm29jf8uvKjWH21HIBUYzAvOBXtPqmp5Pgd8Wp 59xtnHsG+HxbD/bNo+b9cdyIrycTI+8JakUWAmgQfexKUgsn+O6qkYHsjLv1bWoC 0S726HpOgnLaNHhBr3sDn5bf3kYPmjr4W7ucGiYQlPmxUWFWnLhqUeOcyCZe4DzL 1Z52pu2HNr//7bDA1myq0tp7d0BkJYxJ32ZKGFCCrJEmEGA1WHy+iENNBpAdRIN6 mSOQ+pO/X0W2xdA45vf5mNnMd3WEJ5Ezh5AVdwguXKkiMIO+8yKBCY+BX302mOil h8c5kuokvg1tPHNcQmGXJ2smzZ+uP6v6pHmGkAnMfT300BtZoQI= =w09Q -----END PGP SIGNATURE-----