-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 03 Apr 2025 21:55:39 +0200 Source: xz-utils Binary: liblzma-dev liblzma5 liblzma5-dbgsym xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym Architecture: armel Version: 5.4.1-1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-03) Changed-By: Sebastian Andrzej Siewior Description: liblzma-dev - XZ-format compression library - development files liblzma5 - XZ-format compression library xz-utils - XZ-format compression utilities xzdec - XZ-format compression utilities - tiny decompressors Changes: xz-utils (5.4.1-1) bookworm-security; urgency=medium . * Add fix from upstream when the threaded decompresses frees memory too early on invalid input (CVE-2025-31115). Checksums-Sha1: fac381b3ff2bbd67d24ba4ecda67d5f06c3110db 249144 liblzma-dev_5.4.1-1_armel.deb a9238c44098ef755fd4ffeed361caff4ceff56ce 244360 liblzma5-dbgsym_5.4.1-1_armel.deb 72f1acb9529ee664396f02b1b7aacc2fd4562f17 193512 liblzma5_5.4.1-1_armel.deb b4a42e60399684dc4ed95064e1ec6e5e338e2635 88696 xz-utils-dbgsym_5.4.1-1_armel.deb f542b19298647c575c4e0dd2c0a00d793c461db7 7468 xz-utils_5.4.1-1_armel-buildd.buildinfo ed25a078e2ad6ef146be32fe14456bc8eec718fc 469588 xz-utils_5.4.1-1_armel.deb 51f7ae2542e7ca8b2df775086583ffa7619cc11f 107240 xzdec-dbgsym_5.4.1-1_armel.deb f1c580e74a033ef902c21f1351465edd6f00ba69 153812 xzdec_5.4.1-1_armel.deb Checksums-Sha256: f00323f777d03f1e0b9879154bc6d3916fbf8205914de6fdfec78a21e7dfe656 249144 liblzma-dev_5.4.1-1_armel.deb 83d1d32955924f69498616802b577d7f8723b036e17de0e857e8cac76c0c73aa 244360 liblzma5-dbgsym_5.4.1-1_armel.deb cd1c61456751ebfb8abd2e5e0e799da1248555c277c9db075e63dea5d2914be4 193512 liblzma5_5.4.1-1_armel.deb 30fad3d7096535de900356b10a67bbddcc739c960e8b450fdab463ce32375219 88696 xz-utils-dbgsym_5.4.1-1_armel.deb 4065b6ac4d5f293415bd2643b4287543d2e63bfae5bdf29fc984c9125c99986c 7468 xz-utils_5.4.1-1_armel-buildd.buildinfo f6b10effe7bb25b0e16f520c18596fe26bc66c5f86f87b48beb683c51e6d9abe 469588 xz-utils_5.4.1-1_armel.deb c05de812e2a23c117a96827644534a45aa00a930cc6c43f8da6a3cf68385f3f2 107240 xzdec-dbgsym_5.4.1-1_armel.deb a33101a832a33e76295cde13a3f65b9f09cca7d954a17ab8316d2014291d2563 153812 xzdec_5.4.1-1_armel.deb Files: e6b9615fced29a71b29a143fdae58a30 249144 libdevel optional liblzma-dev_5.4.1-1_armel.deb a72454913e3b16c1e6032060a97c77d2 244360 debug optional liblzma5-dbgsym_5.4.1-1_armel.deb b811f0db84a805c9d081294f0e29a13d 193512 libs optional liblzma5_5.4.1-1_armel.deb 0d743724b3f08d8f4817075a6b318328 88696 debug optional xz-utils-dbgsym_5.4.1-1_armel.deb 1401aaabece26d1b97275476f68bcb08 7468 utils optional xz-utils_5.4.1-1_armel-buildd.buildinfo b2eb8b79e287702d792abe7b82df3689 469588 utils standard xz-utils_5.4.1-1_armel.deb fb667880e1d7e5e4faa0a48690fa112b 107240 debug optional xzdec-dbgsym_5.4.1-1_armel.deb 8c1c592d45d2e62d43bd0623d6bfca63 153812 utils optional xzdec_5.4.1-1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0+FegZ3qs8CHnZkx+XaKpT5fkBIFAmfu/GMACgkQ+XaKpT5f kBIFPRAAo4bpEI/LSy29pD80VYsQPcHSjzNwgBZkQb4hjlzm9lfoE8sskdsnzlla aHr8i63Ji2+HpM6XmX0Qk0ulhNHXQTmo92hbehLJkHWwbnElMK8GQwyfTAo9uszW lmuhgbR9FKdwt3+ZM8pAl+/8pZwQGIBDU1j94DYII/AbouvcMCvGlGSxkwKs1bcm Rh8lvHQdg4Uvi9Ro3H6ghrBLfAzflt6267Hgz67aYqG/7zi/UiMEBf4trPjJUvv6 QWsDSIvyHuPTCo/DRwZKaH9gJ7kphYAKfnOynp93sCuPAUQMNyZ8gl5ds23+zBkB rgF+1WUCKv40HSASPhs2nioYx7lGGMR2JwKM+gX49qHjS26nUBLi4iNwd+I5g218 acft62RbyiIAIfrZ/+pElO8IoM/BpiQDHrcdEAxQujNwiGwtoIaIgC0KjWbE832r 6vkunmTlJ0n4sCjEP+VKZ6Q8Q7b5oeMhhqkPdp0DUe/JxhIwJlb44oO6RnU4XTc3 7qYrCvtFYMxTAC+eAy2pucxZM7UVxzPtoBajIshtThtdITGCUiM2bmhHE+aNFeUd pdWWNJtmwaJIwCvNtkCEtBTy601ZiN0C8xWUNsprrp0ioGCOUnZUTxKbCzbzIRZd mhmdyZ3wXf4LHf5tBEfojKhPbaqGZaJCzrpr8nUuhoLihETlmdA= =9WeY -----END PGP SIGNATURE-----