-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jun 2026 13:13:13 +0000
Source: xz-utils
Architecture: source
Version: 5.4.1-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Changed-By: Otto Kekäläinen <otto@debian.org>
Closes: 1132497
Changes:
 xz-utils (5.4.1-1+deb12u1) bookworm; urgency=medium
 .
   * Backport upstream security fix for CVE-2026-34743, for which upstream states
     it's likely that this bug cannot be triggered in any real-world application,
     see https://tukaani.org/xz/index-append-overflow.html (Closes: #1132497)
   * Additionally backport related fix in xz to prevent an integer overflow in
     --files and --files0
   * Add myself as uploader and prepare gbp.conf and salsa-ci.yml for easier
     maintenance of this package in Bookworm (and later potentially in LTS)
Checksums-Sha1:
 9e1a34ce67b3af5a1341eec06e5859338617673c 2515 xz-utils_5.4.1-1+deb12u1.dsc
 c71a3753e345a9857f3d55f415b83648f4f351b0 93600 xz-utils_5.4.1-1+deb12u1.debian.tar.xz
Checksums-Sha256:
 38f98e356f7e7e89b0920d39c55dd5f3d1a9f2684bff83c8b4890561e1832e94 2515 xz-utils_5.4.1-1+deb12u1.dsc
 3e162db2b76480c7e157f4c2f6ff9a426fc023f262d4dc3287530b36e2843ebe 93600 xz-utils_5.4.1-1+deb12u1.debian.tar.xz
Files:
 73a929763829984791fbd6cc7caa111e 2515 utils optional xz-utils_5.4.1-1+deb12u1.dsc
 729325a9817d328d1c27bd7d0119c11d 93600 utils optional xz-utils_5.4.1-1+deb12u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=HHe9
-----END PGP SIGNATURE-----