-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 01 Nov 2026 06:57:53 +0100
Source: zlib
Architecture: source
Version: 1:1.3.dfsg+really1.3.1-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Mark Brown <broonie@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1128336 1146895
Changes:
 zlib (1:1.3.dfsg+really1.3.1-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Check for negative lengths in crc32_combine functions (CVE-2026-27171)
     (Closes: #1128336)
   * Fix buffer overflow bug in non-blocking gzwrite (CVE-2026-85091)
     (Closes: #1146895)
Checksums-Sha1:
 9fc34f82c50cc1042f5cad4a9a3656014d13c967 3271 zlib_1.3.dfsg+really1.3.1-1+deb13u1.dsc
 3b19b81105d3436095134a648c521b678905eaac 1325737 zlib_1.3.dfsg+really1.3.1.orig.tar.gz
 64f0e544f965d01678d0183559d4ae0a7a8d99ec 17836 zlib_1.3.dfsg+really1.3.1-1+deb13u1.debian.tar.xz
 c0d579bff5026482c68f972c6cd79e2d5ba8850b 5465 zlib_1.3.dfsg+really1.3.1-1+deb13u1_source.buildinfo
Checksums-Sha256:
 7954224611bd043d62c094abf81cefcf9d97276479fc495767fcbc92cc6552f2 3271 zlib_1.3.dfsg+really1.3.1-1+deb13u1.dsc
 60dd315c07f616887caa029408308a018ace66e3d142726a97db164b3b8f69fb 1325737 zlib_1.3.dfsg+really1.3.1.orig.tar.gz
 4e99de80447700cf16ecf8ed3e77fabb39f085a5fffc66713466ccf07397cc04 17836 zlib_1.3.dfsg+really1.3.1-1+deb13u1.debian.tar.xz
 9144638049c2ea0b176909b1afaaa5ae9b9e3278617dd10b526e373b03c94b23 5465 zlib_1.3.dfsg+really1.3.1-1+deb13u1_source.buildinfo
Files:
 9256c237372053faee83cda14e393fad 3271 libs optional zlib_1.3.dfsg+really1.3.1-1+deb13u1.dsc
 29e0750ce6c0a9f719354d678ebffc6e 1325737 libs optional zlib_1.3.dfsg+really1.3.1.orig.tar.gz
 60e3d0be7a623e72f56ce9f31d32c388 17836 libs optional zlib_1.3.dfsg+really1.3.1-1+deb13u1.debian.tar.xz
 31c0ff6dec73164ec6e6ee3070027c16 5465 libs optional zlib_1.3.dfsg+really1.3.1-1+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmrofAtfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EtWcP/3o2PU3AXJPEokrz4BrD+kzrAA8A1JtG
rKHwJXn4a/FjiJ493yIHeQSFt1y75aw3BYPWfv60QHJCNU2rKXbOduxdRvgNLugi
clBPXcbRt1PaGqxWpMqTx1dsTcNeVOXSPUOHSdE7fIZAyoCOFyvT1fiv6XqWB1qS
atE22fGaU5Rw4khHfxAK9TpHFWSlsvz3manMmy8F5vuwK1oFAB6IcDGEJG2Ov8Ab
CpmsW8utrkEEtQWetna0g/DGlgCemk9qO89wytdb7YCqokHfaWkpHUbdVta/GI8p
4QgmMkD9lBGHWfQ81XtcScDjbXu0uyDT6IXAuImdoXoGif2fekhmO0LeG4Rt2Bc7
D2y+6sSLuHew5Wx9uf+mueFs9fz5LQYOfFUQ3BnhZ4QOkwYT6rA4Ot6D64+wOPP+
JVA8bzBBVEEjH65q12Ab2dUkA7JYaV0CSVNY2igC+ZhxXd7WrTD9zPjFzGUNhFl8
O7ggYSRtUERPeU2wAjptYJnwX1zxKLh3/caW0W6nsRkbgTKllWGP7uQp1Mw77Ito
ZGcbPEELyRqYOV+Yu0Zwmuhz3YQJKPXtj1BpzQJWuTsNg9xK5Eta/vgcIRUIgSfd
QauovfQIEKAUHYjU0aJFN+WTuE4USE0PTI1RODPIKvr6dC9RiLRuONTt/nllfUPf
XrwtdYRlcKSV
=p5xd
-----END PGP SIGNATURE-----