-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Sep 2026 15:30:44 +0200 Source: xz-utils Binary: liblzma-dev liblzma5 liblzma5-dbgsym liblzma5-udeb xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym Architecture: ppc64el Version: 5.8.1-1+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Sebastian Andrzej Siewior Description: liblzma-dev - XZ-format compression library - development files liblzma5 - XZ-format compression library liblzma5-udeb - XZ-format compression library (udeb) xz-utils - XZ-format compression utilities xzdec - XZ-format compression utilities - tiny decompressors Closes: 1147318 Changes: xz-utils (5.8.1-1+deb13u2) trixie-security; urgency=medium . * GHSA-5qpq-xqfv-j9pg ("Invalid write if a decoder is reinitialized after allocation failure") (Closes: #1147318). * Protect progress variable with a mutex. Checksums-Sha1: e432149d33e72564dffd85cb41cc6adb78de5003 357628 liblzma-dev_5.8.1-1+deb13u2_ppc64el.deb 2d71c00dae0b239c872c0ebc2b950a760f145c65 278376 liblzma5-dbgsym_5.8.1-1+deb13u2_ppc64el.deb be404e52b3be851894f6e5c07098438b6dd0a558 97340 liblzma5-udeb_5.8.1-1+deb13u2_ppc64el.udeb 916689cfb790196a9d86425d12b4263395efa14b 316276 liblzma5_5.8.1-1+deb13u2_ppc64el.deb 3f627d9c6faeed2a6b9a653b17ff4c37b3acdd43 114892 xz-utils-dbgsym_5.8.1-1+deb13u2_ppc64el.deb 2e848155e2ae833294dcad10699ede7693dd745c 8103 xz-utils_5.8.1-1+deb13u2_ppc64el-buildd.buildinfo c123ad3cb28eb40740a7e8f60cfa52a69a8bfea8 661332 xz-utils_5.8.1-1+deb13u2_ppc64el.deb 81ede1949fa389157b135feeb8c9873b095dfb3a 107640 xzdec-dbgsym_5.8.1-1+deb13u2_ppc64el.deb ebc06e9d7b9809661e7c68cc5bb05f3e341d49e1 257912 xzdec_5.8.1-1+deb13u2_ppc64el.deb Checksums-Sha256: 4c34fe1ae4f3b7461dd54c64c1a9f3fdb40851c9bda21dabcc6db406b7f4d787 357628 liblzma-dev_5.8.1-1+deb13u2_ppc64el.deb 23ca27ab49d0fcc8bae6d8eeeae1450d4e7aefe4ee91214428c700ad40da3144 278376 liblzma5-dbgsym_5.8.1-1+deb13u2_ppc64el.deb 17a008656fcb41aa47a466af9ab57221de78a27525ed560571ceed1078f92edd 97340 liblzma5-udeb_5.8.1-1+deb13u2_ppc64el.udeb a7a34f170b4e9ed0140152a0e931b8fe1254d43d75d46050142fdc501205bf12 316276 liblzma5_5.8.1-1+deb13u2_ppc64el.deb 0069008330361b564a953d7087cc6cc74897a9bc3f084db2d93ae4a07a4e2457 114892 xz-utils-dbgsym_5.8.1-1+deb13u2_ppc64el.deb 6ac7a59a6471369f843b3e35b1ef8058b8bd50429e2086554ef4f4c23f6a6d4a 8103 xz-utils_5.8.1-1+deb13u2_ppc64el-buildd.buildinfo ee6d2224b35dbdfd21534e68e409cb6f215478f91a67d42b29abf99a3d5970ac 661332 xz-utils_5.8.1-1+deb13u2_ppc64el.deb 92bd0b6e582b4f87ae507855949fb50feb96c814f416916d42856f93f7b59b97 107640 xzdec-dbgsym_5.8.1-1+deb13u2_ppc64el.deb dfc701f930f81ac5d28105a0c3af4c9dcc1289039309c1d94ce80961cfb3690d 257912 xzdec_5.8.1-1+deb13u2_ppc64el.deb Files: 711b1db4b18634ba3774125215d2efdf 357628 libdevel optional liblzma-dev_5.8.1-1+deb13u2_ppc64el.deb 0945f0040224f71834ba727466ddb2a7 278376 debug optional liblzma5-dbgsym_5.8.1-1+deb13u2_ppc64el.deb 4ce787738aa2242c9988907deef037f5 97340 debian-installer optional liblzma5-udeb_5.8.1-1+deb13u2_ppc64el.udeb 63e86d83ade41fba23c2f5828e7663f6 316276 libs optional liblzma5_5.8.1-1+deb13u2_ppc64el.deb 75f96c36b8abf8af43b4caa0963e20a4 114892 debug optional xz-utils-dbgsym_5.8.1-1+deb13u2_ppc64el.deb b5588f88aa11315eb33c2de49708a470 8103 utils optional xz-utils_5.8.1-1+deb13u2_ppc64el-buildd.buildinfo b80d7dff8cbdf4b43cfdee9457971af6 661332 utils standard xz-utils_5.8.1-1+deb13u2_ppc64el.deb 82c115a6dc396095f055b4d6447e8290 107640 debug optional xzdec-dbgsym_5.8.1-1+deb13u2_ppc64el.deb b838ffa0f76da7123c5f4030ab76d38f 257912 utils optional xzdec_5.8.1-1+deb13u2_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE9ibmwdV9gdKNbK7oV8ucRsMTpuMFAmq5ITcACgkQV8ucRsMT puOaRw/+LErPhf60jW4FQHCiD6CajzD2A+NOxiosLAjVSZjdnq93bgseyZFnbRJZ zw/tuMQK4OR3sdYR3OXpD+rnJQMFUJ+p3LqOpDB2Nd3k2o8n6zTCF0EiXo5HsJCh uiD0cnQIfzYqayi9l/sK8lOUL5DbY+8g4QG8eHcXY+UcIRfgy4h18WJhGTn4T2QH 8Y9FiE5RPhsheXb1jzh/ec5DGCZ9pDAM5QSNL7Tq8N2rf0hn148cjqNse0e3eiFL FnT5m6uFGRy2fFJxNWPHktsjs1G+eLIBqPOx3nIDuk+GMMxLE9GJ2VCjlzR6xy9d BCcd9pSXpextOi2hPl12m91ssK2lwZzcTlsUv6w7b0YTA/MN2lBpSM18vn4kVEY5 l/mOn9otCXF+TcmnDUsKgfLUOw5qb4YYph4uBcTMa7QcDuoYgqP1GAt6WImHpNXE USuCC5laJfbscopoQ+DEVOlke5gRdwMN37xwDIaxcszMqXRbxXQGponoe2Ws0aOj RUI+DPtUtsqvBHYI8gxmLQoecrDf6JjLg/JCMQELpRficQy1094TmACZ18yV/yNb lQ9YlQPTclctaBByNt0FGJc65jrdcTULnvWtg/jrXe1sk9EaqfQcv4EXt1nC82w8 g9bgZR6lyb66uGFyA2wIP69byfsbWCYR7wYsZyhjOM1tq4mMjjE= =mzLR -----END PGP SIGNATURE-----