-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 27 Sep 2026 15:30:44 +0200
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym liblzma5-udeb xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: arm64
Version: 5.8.1-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 liblzma5-udeb - XZ-format compression library (udeb)
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1147318
Changes:
 xz-utils (5.8.1-1+deb13u2) trixie-security; urgency=medium
 .
   * GHSA-5qpq-xqfv-j9pg ("Invalid write if a decoder is reinitialized after
     allocation failure") (Closes: #1147318).
   * Protect progress variable with a mutex.
Checksums-Sha1:
 e3330aee7db7049953f560d134b1f0851e2b805a 344644 liblzma-dev_5.8.1-1+deb13u2_arm64.deb
 53c3fa368daeec64261a858979055e802d12909c 265312 liblzma5-dbgsym_5.8.1-1+deb13u2_arm64.deb
 67b86b648e281f7696885843c06dac405a7193fa 84096 liblzma5-udeb_5.8.1-1+deb13u2_arm64.udeb
 d02c492a5098dc09770aaa816b3b4b45112a123a 302984 liblzma5_5.8.1-1+deb13u2_arm64.deb
 aa6e3878b159126445050afe9d48d3fd7487b16c 110316 xz-utils-dbgsym_5.8.1-1+deb13u2_arm64.deb
 49eca034a9f92216e1ce2849c07902c40b673196 8052 xz-utils_5.8.1-1+deb13u2_arm64-buildd.buildinfo
 b74d6b7cfd25b03112680ddc67573ab3ed5aa390 657952 xz-utils_5.8.1-1+deb13u2_arm64.deb
 1a8a569003927eeb4086850fbfd779136d653eff 117228 xzdec-dbgsym_5.8.1-1+deb13u2_arm64.deb
 e3cd099d2650aa0b23641607dadb650146bb6da3 256456 xzdec_5.8.1-1+deb13u2_arm64.deb
Checksums-Sha256:
 235ab11a37fb6126237552e1995ff927689516b64fc06b5fe44649142b7e655e 344644 liblzma-dev_5.8.1-1+deb13u2_arm64.deb
 6dd3100c436e30390149146d6826a50933717a03538a5cfdb427d315c732f8aa 265312 liblzma5-dbgsym_5.8.1-1+deb13u2_arm64.deb
 4bcdcb6f2881ffcc340ff64acae80ecdb35896c3e5bb003e621b40ccb87baafe 84096 liblzma5-udeb_5.8.1-1+deb13u2_arm64.udeb
 88f3aa499dc30edf01b9209ab40f11e37edfbecef971f84f4721de1874ed4827 302984 liblzma5_5.8.1-1+deb13u2_arm64.deb
 3c4d8424c18565d9825470d326d2407e75d7ea3e97f6ffbf5b3523866db2a988 110316 xz-utils-dbgsym_5.8.1-1+deb13u2_arm64.deb
 46b3963d1562375df92fcd0cf745bf889445153188df9de97c240be04d8e4bdd 8052 xz-utils_5.8.1-1+deb13u2_arm64-buildd.buildinfo
 d2151cc127dfc9948255ed40c271ff0683d9cf9553933a8b94cb29068ab5e715 657952 xz-utils_5.8.1-1+deb13u2_arm64.deb
 8710e3d23d8660a5d64f480d868ce3861ab0dd0b02abe1eacc25110c3d80f3ef 117228 xzdec-dbgsym_5.8.1-1+deb13u2_arm64.deb
 9c276eca43b5b320e610963062d02aac8fea2673b83cc086b2a2df0b4345c7ce 256456 xzdec_5.8.1-1+deb13u2_arm64.deb
Files:
 ca380506e55aede640bbcfef83eab1d6 344644 libdevel optional liblzma-dev_5.8.1-1+deb13u2_arm64.deb
 77168269c2978416cc2b82e7c916b490 265312 debug optional liblzma5-dbgsym_5.8.1-1+deb13u2_arm64.deb
 d5daae16a426e94767feaef929b88e38 84096 debian-installer optional liblzma5-udeb_5.8.1-1+deb13u2_arm64.udeb
 64909f0585f97744e6953307875ccda6 302984 libs optional liblzma5_5.8.1-1+deb13u2_arm64.deb
 3ea3d2f2fa1bc879b79ebaff20fa5eb2 110316 debug optional xz-utils-dbgsym_5.8.1-1+deb13u2_arm64.deb
 42cdc65ae7e023d4110a14dbaf9e5aa9 8052 utils optional xz-utils_5.8.1-1+deb13u2_arm64-buildd.buildinfo
 9599d7852ad7f0e82287f12a42d8f90a 657952 utils standard xz-utils_5.8.1-1+deb13u2_arm64.deb
 20487f23005176bf4167d86ad95276ac 117228 debug optional xzdec-dbgsym_5.8.1-1+deb13u2_arm64.deb
 532d58627653f190832c05aa603b452d 256456 utils optional xzdec_5.8.1-1+deb13u2_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=jqO6
-----END PGP SIGNATURE-----