-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 03 Apr 2025 21:55:39 +0200 Source: xz-utils Binary: liblzma-dev liblzma5 liblzma5-dbgsym xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym Architecture: s390x Version: 5.4.1-1 Distribution: bookworm-security Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Sebastian Andrzej Siewior Description: liblzma-dev - XZ-format compression library - development files liblzma5 - XZ-format compression library xz-utils - XZ-format compression utilities xzdec - XZ-format compression utilities - tiny decompressors Changes: xz-utils (5.4.1-1) bookworm-security; urgency=medium . * Add fix from upstream when the threaded decompresses frees memory too early on invalid input (CVE-2025-31115). Checksums-Sha1: 7af45f3dd19375e225ef44cd4799938f7e65da99 254648 liblzma-dev_5.4.1-1_s390x.deb ac72616b05ca876ef4ed064437251fc9b67d867b 250440 liblzma5-dbgsym_5.4.1-1_s390x.deb b4de64e00cc2be4506d107c85afcca57df03d6ca 200160 liblzma5_5.4.1-1_s390x.deb 82d54013fb2990c8a6474e5743261899c5bfb620 87120 xz-utils-dbgsym_5.4.1-1_s390x.deb d5ca6bbf6fc24dc9f2e26d6b5cf8a105705d8137 7506 xz-utils_5.4.1-1_s390x-buildd.buildinfo 75945e36ba0f3185b875f33d1da3ae9f82f02899 468484 xz-utils_5.4.1-1_s390x.deb fdd51167f38364f0e8eb35e6ebd9dd4766665356 110204 xzdec-dbgsym_5.4.1-1_s390x.deb 2833a8dd7274b056f8bcb35ee849973c04e507ac 156696 xzdec_5.4.1-1_s390x.deb Checksums-Sha256: ff41050a0c3d5db37bef4cce8fa58992beee46c43b5165e8c788945949191259 254648 liblzma-dev_5.4.1-1_s390x.deb f269890c29fb96ea450808f7c5b039ea83b903fbc0ba441e6f4424fd92532e2e 250440 liblzma5-dbgsym_5.4.1-1_s390x.deb c8794804142cb73418ab4181bea62dec8569935f1935903179499fdad46312e0 200160 liblzma5_5.4.1-1_s390x.deb 5e2212ca67520789ad97ab8f5e48cf518060975d4fee565b0afc682718813228 87120 xz-utils-dbgsym_5.4.1-1_s390x.deb a0942137d1ceb97185e04e64b4465fd7911481e6b1d92e778309eb6349bc97d9 7506 xz-utils_5.4.1-1_s390x-buildd.buildinfo 9317218c19dfefdf6be0fa92a6cf2dce09cf4dea6f900a71822e34167aa66278 468484 xz-utils_5.4.1-1_s390x.deb ffed64635fbe8da27aaaea6c7e484855a1262f37266a5e4d085c8c5adb26072f 110204 xzdec-dbgsym_5.4.1-1_s390x.deb 33247134b8ff130f2b60ea8b30ef7ae529ea9babcd2a26e02fe6492ee1244b10 156696 xzdec_5.4.1-1_s390x.deb Files: 1c3afd6f057b49005fc5fa2c4d711c14 254648 libdevel optional liblzma-dev_5.4.1-1_s390x.deb 2ae9a9ec7825ddd4a67ceb54abccc164 250440 debug optional liblzma5-dbgsym_5.4.1-1_s390x.deb 80d28272f103701fe97c590c93e8ec03 200160 libs optional liblzma5_5.4.1-1_s390x.deb c42842f5da412a4ef41890dc27e87b48 87120 debug optional xz-utils-dbgsym_5.4.1-1_s390x.deb 71ec85746f7a3c7d59cdc68e6205fddb 7506 utils optional xz-utils_5.4.1-1_s390x-buildd.buildinfo d3c89fcd67720436d3a7a3e3699e3ea6 468484 utils standard xz-utils_5.4.1-1_s390x.deb 7f329bfe83d5564a88608d9c2cebe333 110204 debug optional xzdec-dbgsym_5.4.1-1_s390x.deb 01a11b2c67ca39c0f1b5bfee57a6551b 156696 utils optional xzdec_5.4.1-1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZTC4/c20pi1/n7UBUhVQ83ojQ7QFAmfu+w8ACgkQUhVQ83oj Q7SWrQ//S2FuVxDbtYvLmbmij7y9WTTqYVlbLcMWddFSUZwwK455pak7R/Yn2ReX jZ0ZetqGlY1B5etJ+S1mGVh5iJz1SmqG/GpcxzJtrj7zM3Lhpqn4jTTj1VcDGiO3 K5k0mMJOa41P3CaeWmZzk815Ll3OCNn6FBgTU3vYQ89c6Azf5s6dnjffq4h0FiOt ZB50TprqvQEA+wK/YqguqKFbTibcg0ifXs3ot2x3G69GVFwDta7v6SPVTM4AGUtI cKd8XguFM8O7A2z/k4cSQeMZMMjkyACrlSzEiuLw6quEBgagjNmCG1qf+CF8jjLB 2Munleum2EyXWOLXAl0sAAZEzpfuS7cgwUEwJoIkbh7hzrXG0zyauSlK+/6nigrX 4PgvkM+wBxoV24AGCsH9uWYc56lc6dX8Q1NoNGDwkrci6OVyoSAwE2cTL9FuAs+P WlpUIJdAyOF2MHOAnCqscUcXKu1J9uOw3msQQ0lfWup5RExz2Kkrp3CWGLt53Tkc 8ljWQ5NZaJHLZ4gO/AQvzEZXPve1JvPzSS7ihtLNhW90ucIwiVlVTd2J/+zNgeZ0 RJUSyi83Xc0m/ILwqAsMS5VjL66UDmirX0UvQiYo3xvq2A7gdaVKc1MZ0p5PTd4l mjLzhgKAVAumxcqmzkbbtW1uMhrRaqPjrXK9wVvG9vr4RoAxNZQ= =lk2y -----END PGP SIGNATURE-----