-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Sep 2026 15:30:44 +0200 Source: xz-utils Binary: liblzma-dev liblzma5 liblzma5-dbgsym liblzma5-udeb xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym Architecture: armel Version: 5.8.1-1+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: armel Build Daemon (arm-ubc-03) Changed-By: Sebastian Andrzej Siewior Description: liblzma-dev - XZ-format compression library - development files liblzma5 - XZ-format compression library liblzma5-udeb - XZ-format compression library (udeb) xz-utils - XZ-format compression utilities xzdec - XZ-format compression utilities - tiny decompressors Closes: 1147318 Changes: xz-utils (5.8.1-1+deb13u2) trixie-security; urgency=medium . * GHSA-5qpq-xqfv-j9pg ("Invalid write if a decoder is reinitialized after allocation failure") (Closes: #1147318). * Protect progress variable with a mutex. Checksums-Sha1: 418beb15ca1974967a03b0f2d49eb27c9c7c64a2 336944 liblzma-dev_5.8.1-1+deb13u2_armel.deb 4ee203d009107966166a75f1a2193e94b0dd8246 255704 liblzma5-dbgsym_5.8.1-1+deb13u2_armel.deb 123a03a88b835f1099e14b3275fd37d45da0ddca 77656 liblzma5-udeb_5.8.1-1+deb13u2_armel.udeb 57934db6fd177041bbd3eb668475f1d9fe555cf9 296560 liblzma5_5.8.1-1+deb13u2_armel.deb 8f0a6d1198dd999517bd4b8cd53149cc5d5a4b45 112316 xz-utils-dbgsym_5.8.1-1+deb13u2_armel.deb 98caf764063b0edfae4baad6f307e3faffb7f40e 7920 xz-utils_5.8.1-1+deb13u2_armel-buildd.buildinfo 613fa7a621e01e749126d972a9f06dc25cfef1b2 658004 xz-utils_5.8.1-1+deb13u2_armel.deb 44bcef882d43f74e42a2a8e7c5d9bf8e96d5ee81 110444 xzdec-dbgsym_5.8.1-1+deb13u2_armel.deb defc28e17b9cab1eaf4a205c7b3cc8a2326be41e 254296 xzdec_5.8.1-1+deb13u2_armel.deb Checksums-Sha256: 104498105493c619850f7ea38e7756bf3aded6cb6732a3ab81f99cd7f838feeb 336944 liblzma-dev_5.8.1-1+deb13u2_armel.deb a299c70e23770fbebf2cb9c818b69309cbbec528110bf920570d1829c481d8c4 255704 liblzma5-dbgsym_5.8.1-1+deb13u2_armel.deb bf663d4f2c59a2407ce3ecceb14fc9c4e5ff1769f1088a75703405fc7c9d87e7 77656 liblzma5-udeb_5.8.1-1+deb13u2_armel.udeb 8af006a8caebfad47e898fde37e78d7ad4642f6cb572231a977ccbdc9a6396a0 296560 liblzma5_5.8.1-1+deb13u2_armel.deb da30588e496b8f01d1bc26f8a72b1e58e62e475ebcd875fd28ad881f3784591e 112316 xz-utils-dbgsym_5.8.1-1+deb13u2_armel.deb cafcbb55effbc31cb00d09eae029c6cea79c6105fabe18ae96984dd2dc1eba58 7920 xz-utils_5.8.1-1+deb13u2_armel-buildd.buildinfo ca66a84c14d6d7947ec4429811d936829329840c072fb6ad9672a912120015a0 658004 xz-utils_5.8.1-1+deb13u2_armel.deb 4374ede7a1a91e1c3109a059d450b159acd70d758eb388b710afa715197104eb 110444 xzdec-dbgsym_5.8.1-1+deb13u2_armel.deb ddb25656d41acaf5848397539a07a060930e6205db04942b5b60e200126a7319 254296 xzdec_5.8.1-1+deb13u2_armel.deb Files: bc2d87469c7d9575f740832c6555b764 336944 libdevel optional liblzma-dev_5.8.1-1+deb13u2_armel.deb 447399ff726bfc37e0bedc1ab9c6422e 255704 debug optional liblzma5-dbgsym_5.8.1-1+deb13u2_armel.deb c87c75c6fef173f255336fbcb2461d4b 77656 debian-installer optional liblzma5-udeb_5.8.1-1+deb13u2_armel.udeb 755110626fffdb536769a36646869a1f 296560 libs optional liblzma5_5.8.1-1+deb13u2_armel.deb 04e962553a181c3854228581e5bcb46c 112316 debug optional xz-utils-dbgsym_5.8.1-1+deb13u2_armel.deb b01b0aa817aa9a6dcdcbe21f4ec1a90c 7920 utils optional xz-utils_5.8.1-1+deb13u2_armel-buildd.buildinfo 0ebffa2f39909b6da5f355eb0f2243f6 658004 utils standard xz-utils_5.8.1-1+deb13u2_armel.deb 2f63a040e3f2c3bce14288086df647cf 110444 debug optional xzdec-dbgsym_5.8.1-1+deb13u2_armel.deb dbb1d6d50746e4b083592bad102f7785 254296 utils optional xzdec_5.8.1-1+deb13u2_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmq5IWEACgkQvzDqKQSG l8UEMA/+JmkFAfS78JpXi6RGQ8vUM5DwvkRPEyp4XO8TE6jRLKjdgAtxRWT/ZEa7 CtwO4GojpAFBd+KrnPQ8E3nG3vI0Z2+qmlvnTsqHuYB3+GCC4KaU4rhVWWbdhub9 1VV2SUNl+ai9/pjOLGv/x1Vu6w5wVtV/onik/FTw3ejelMtbXS2jk0MTcKyghrq/ Vc5CAgn6+ZBVF7W7AkSRxiaDRK9R+sIoqqMBmfsHsdaw3l6k7kQdf6y1WP5V1Ep7 Ft5uq+NKDYtooVnVNWs1YiyNWTLRC1fovkj59HRA5WOJHJyH4zbNLPvi7NSfQCHR 8VW/uYGBG7Bj78DB/Pdizp68V/9eMqrwLTe634EWoYjYFJVbxjbjZbx+jquqQQI2 htSjd4phTHA8ST2d/ua7crquFSnwK+pF+SPTIfZy07b1yWGI1Pe/7NbJJHkHhwkY RtRh5zm8lImWFh355PVT5ONnvwwk4Ab7mpHijMRgEvOmBaNK4sqRHs/fG2aaU1nq 7xX7vagD6iEozRCnc18IeBBGXYQlyrNY8h1KRA+TFmcg351fCUiQvFsMiTn0OuoK C98rZgQ4ifjwT+i7hMSb6p0hUoVHmOoe09TOGJk36M6znYxRpfMalHH308Cfz9vw YMSdsWBRXvFcZJbJlQ75o+mHMJOjdBzzerKTuz81xDVzvbDRH+U= =R2wO -----END PGP SIGNATURE-----