-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 27 Sep 2026 15:30:44 +0200
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym liblzma5-udeb xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: armhf
Version: 5.8.1-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: armhf Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 liblzma5-udeb - XZ-format compression library (udeb)
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1147318
Changes:
 xz-utils (5.8.1-1+deb13u2) trixie-security; urgency=medium
 .
   * GHSA-5qpq-xqfv-j9pg ("Invalid write if a decoder is reinitialized after
     allocation failure") (Closes: #1147318).
   * Protect progress variable with a mutex.
Checksums-Sha1:
 84eb9991692bd504b1ad447a4203d373fc3cf93a 336248 liblzma-dev_5.8.1-1+deb13u2_armhf.deb
 7086a5ad0bf1d147614715e685cd959ef20e2837 264008 liblzma5-dbgsym_5.8.1-1+deb13u2_armhf.deb
 24906df154400cb42cc5ad078564804f3b5d681e 77444 liblzma5-udeb_5.8.1-1+deb13u2_armhf.udeb
 ada7243f4fb269331404ec1ac6adddd4ad674b45 296288 liblzma5_5.8.1-1+deb13u2_armhf.deb
 33957b3f79bff246a75b5fd2f2b2c90a47a0839a 112760 xz-utils-dbgsym_5.8.1-1+deb13u2_armhf.deb
 b946c6d9596910fc5f66f1c66a28a970d23d739b 7934 xz-utils_5.8.1-1+deb13u2_armhf-buildd.buildinfo
 acbc354f3ace37c89e2edfd103c80178ae3b4174 657440 xz-utils_5.8.1-1+deb13u2_armhf.deb
 e2310e0e1d654955f95bf2f7bdc70e8b2f07fd9c 113224 xzdec-dbgsym_5.8.1-1+deb13u2_armhf.deb
 483166fb2aa60ba125d13c9ac734c26878f69672 253744 xzdec_5.8.1-1+deb13u2_armhf.deb
Checksums-Sha256:
 2d99195e20853d3e86375f053bf52dfc8c1725a8d51f2a6db1b142f4bc7fc657 336248 liblzma-dev_5.8.1-1+deb13u2_armhf.deb
 3f84d88a155b4f830e4fe6fc1cd8d1144400c025c4f3d2e6ac8770f7f5556bbd 264008 liblzma5-dbgsym_5.8.1-1+deb13u2_armhf.deb
 7e062df2cfc75f0a48060b64fa95f2e99ff2555d2dfdfa33816b6776e2c8d8bb 77444 liblzma5-udeb_5.8.1-1+deb13u2_armhf.udeb
 81ca3fde1077592c8f278662af7f8edebd74967ba0ef58fb1642ee39db98b552 296288 liblzma5_5.8.1-1+deb13u2_armhf.deb
 59b2a6c766bfac29d20a770dbe9cac233544b455a6e13e4e589935b88f2b6af8 112760 xz-utils-dbgsym_5.8.1-1+deb13u2_armhf.deb
 f5c53b68a62cc37d74d415ef42be2d2708aa1c3b2d40f66eb973ac01550f4a15 7934 xz-utils_5.8.1-1+deb13u2_armhf-buildd.buildinfo
 5688d362f63dd46362ce4128e34beda717e3fdaf1e1a7f8528c50ebb394b6bd0 657440 xz-utils_5.8.1-1+deb13u2_armhf.deb
 420e4aad7975f82ce641d58c6a8ceee62d8ad6a2bd217c6e5c35233e4d2ad2f5 113224 xzdec-dbgsym_5.8.1-1+deb13u2_armhf.deb
 3061019f12088e1065af06e675012f38340fe783194b20f73f6c6b2591380e4a 253744 xzdec_5.8.1-1+deb13u2_armhf.deb
Files:
 d59d87df0edc170b996077959856449f 336248 libdevel optional liblzma-dev_5.8.1-1+deb13u2_armhf.deb
 98475cc4b77dd90c20e4e57110dede70 264008 debug optional liblzma5-dbgsym_5.8.1-1+deb13u2_armhf.deb
 e728c4964300c9be712c6cca061d31f1 77444 debian-installer optional liblzma5-udeb_5.8.1-1+deb13u2_armhf.udeb
 28a1816bff4080db3d12ce1f5e08663f 296288 libs optional liblzma5_5.8.1-1+deb13u2_armhf.deb
 159550fad978ee32d57b600dd3f76972 112760 debug optional xz-utils-dbgsym_5.8.1-1+deb13u2_armhf.deb
 dcfd67288e1196512e5800397c1eae83 7934 utils optional xz-utils_5.8.1-1+deb13u2_armhf-buildd.buildinfo
 c5c74a42e80486a149f3dabcb857e124 657440 utils standard xz-utils_5.8.1-1+deb13u2_armhf.deb
 5ce25eadce990f0839edc6d3827c6e28 113224 debug optional xzdec-dbgsym_5.8.1-1+deb13u2_armhf.deb
 ccdf1770dfac2cc76c42b21272ab40be 253744 utils optional xzdec_5.8.1-1+deb13u2_armhf.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEBOUsBrtd5lcy6oRfutMAkCxKbL0FAmq5ISIACgkQutMAkCxK
bL0i6hAAjmTGZrUqMpyfT4qakuir4rN/5DwxRySasIU1/Z+qtnzv1QsXAGL4qrax
MOkZ/TV9lizl1tjsrRPvi0qhgondKfiplbSp+s3ARfSpc5m8whNH+j6IB6X5Rij/
f+9ug+Xf3UKw660pjxuYsZizkclTgemTfFDvdQgyxUnW/Hck0i8ls12w1XV3+Igj
Fhc6nJjkLF+EYNbCM2MmDxsw4Rif83mDAhmQk5VTybJXJoaViaxMvlURx0SKBzKl
+dlFwGvajcyoKuHgzix+0X2U0Wem9q3jeF1YSpZY7bYFClc8FIBwa8dz1vQ7/Su7
atgwG0DG7fF3ojQkh9btf8TZ4ecnrtJb7AMPEknb8FB9MW1K/NjOfGnzmoLHBcyS
Ky8ZPRknaylDEYTIGJdKxjcsaDcsAlq4qhpjW1Nt3JrvF/FJt90zQfPeaTKkjq/Q
To97lfM+ebue9Z5ZFkaymRRKx67WcuB/dZ195drt0CMJZG/cyR1RfSMGqxh5c3N6
lp0x3pbqJeYRw5lVVI06Lqf2kEwsuMduipoUsSgYv8c0Fpg3FrhPdo9HNDChjKoH
k25lT7ZyZ5Zr5lRovixwNnIZVL61Tv8h+KkiRe7fp8pTW5J9JRcl3qnyB05p35Sa
JLTIIpzpy/tZrLymLt9S4enXMkTXMQ15fDhIZhlYILPzVPZwyMM=
=Se44
-----END PGP SIGNATURE-----