-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 27 Sep 2026 15:30:44 +0200
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym liblzma5-udeb xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: amd64
Version: 5.8.1-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 liblzma5-udeb - XZ-format compression library (udeb)
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1147318
Changes:
 xz-utils (5.8.1-1+deb13u2) trixie-security; urgency=medium
 .
   * GHSA-5qpq-xqfv-j9pg ("Invalid write if a decoder is reinitialized after
     allocation failure") (Closes: #1147318).
   * Protect progress variable with a mutex.
Checksums-Sha1:
 58a7874fa21eddf5e7d60ad01fb72132a4ec5936 348376 liblzma-dev_5.8.1-1+deb13u2_amd64.deb
 435638c2e88710e0425d8361ec23f25169bbf79c 281348 liblzma5-dbgsym_5.8.1-1+deb13u2_amd64.deb
 5569cb6eb9249e5aaab850c67d75f9833fb0b17c 90320 liblzma5-udeb_5.8.1-1+deb13u2_amd64.udeb
 fa5f4801d2d63f6bb60f8d2a3b74a7730f6f782e 309696 liblzma5_5.8.1-1+deb13u2_amd64.deb
 791773289cb34086102cb1e265ffb04e2ae8ecc9 113492 xz-utils-dbgsym_5.8.1-1+deb13u2_amd64.deb
 7e88a32b21dd74b8e79b091b35a22249b1f2b911 8068 xz-utils_5.8.1-1+deb13u2_amd64-buildd.buildinfo
 461bb07acdfece6cb04c54ba55153bd70e6c7497 659760 xz-utils_5.8.1-1+deb13u2_amd64.deb
 851e06ddd339b7ada89c83c27fa561ddc12f5d32 117884 xzdec-dbgsym_5.8.1-1+deb13u2_amd64.deb
 6cae11acba8c18c6a23ea2a4f6129b0ff4badd90 257444 xzdec_5.8.1-1+deb13u2_amd64.deb
Checksums-Sha256:
 7b5104b0418b2e958447f74c135841aefda555293ac7f7494cfc7a16b7180816 348376 liblzma-dev_5.8.1-1+deb13u2_amd64.deb
 ff798227e5c618198c94ff1318d722135209f99cb53e67d9035fcb53e5d3d40f 281348 liblzma5-dbgsym_5.8.1-1+deb13u2_amd64.deb
 006b238fceb5fccc15ce4a66a1a14b9f40ff4d3075a971662d2f8fbb27cdecf0 90320 liblzma5-udeb_5.8.1-1+deb13u2_amd64.udeb
 b38acab30f295bf1066a6632e31cbd0a1980f2924b38040cda131d5dea5384ec 309696 liblzma5_5.8.1-1+deb13u2_amd64.deb
 3f6d9f909399af5835af8f290a05d756e06374e1c6b45a0ae5020eee36569ac6 113492 xz-utils-dbgsym_5.8.1-1+deb13u2_amd64.deb
 4ccf41ba4f2c738369c180af7ef6ee9bdae7cf1077b24b23fd7e7c2812877e4b 8068 xz-utils_5.8.1-1+deb13u2_amd64-buildd.buildinfo
 66b060ef2f09722c947ba019da5e9a63f6bac9d7bf90b32339a72c0390acc53f 659760 xz-utils_5.8.1-1+deb13u2_amd64.deb
 7960426230a0333909eb6775f8fbf0f1e4e24f42aeab4a55a79342dbd5a5790c 117884 xzdec-dbgsym_5.8.1-1+deb13u2_amd64.deb
 f9f09ff6d47c0311551a49b9eb24317951ee3bf10f4e26b50aa6b055d290a10c 257444 xzdec_5.8.1-1+deb13u2_amd64.deb
Files:
 b6be20e6eeee29b265166702449f8c4d 348376 libdevel optional liblzma-dev_5.8.1-1+deb13u2_amd64.deb
 84c81b1c19ec2432598d4aa0e4457914 281348 debug optional liblzma5-dbgsym_5.8.1-1+deb13u2_amd64.deb
 9c403daa43a9cfe76c303bb4a22cb4cf 90320 debian-installer optional liblzma5-udeb_5.8.1-1+deb13u2_amd64.udeb
 9badbd9749f3f453814081e53573bb4b 309696 libs optional liblzma5_5.8.1-1+deb13u2_amd64.deb
 67637f536c548ebe4a18ce4be061d0ce 113492 debug optional xz-utils-dbgsym_5.8.1-1+deb13u2_amd64.deb
 2a285d16669296f66d2cad13bfef4b2d 8068 utils optional xz-utils_5.8.1-1+deb13u2_amd64-buildd.buildinfo
 50c416426053f4efdbf2e1555025f6a2 659760 utils standard xz-utils_5.8.1-1+deb13u2_amd64.deb
 1fe8493c509bd48eab59254648427d5e 117884 debug optional xzdec-dbgsym_5.8.1-1+deb13u2_amd64.deb
 3bd67ee152691c06a629a4a5047ef4e8 257444 utils optional xzdec_5.8.1-1+deb13u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=VBPs
-----END PGP SIGNATURE-----