-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 03 Apr 2025 21:55:39 +0200 Source: xz-utils Binary: liblzma-dev liblzma5 liblzma5-dbgsym xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym Architecture: arm64 Version: 5.4.1-1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Sebastian Andrzej Siewior Description: liblzma-dev - XZ-format compression library - development files liblzma5 - XZ-format compression library xz-utils - XZ-format compression utilities xzdec - XZ-format compression utilities - tiny decompressors Changes: xz-utils (5.4.1-1) bookworm-security; urgency=medium . * Add fix from upstream when the threaded decompresses frees memory too early on invalid input (CVE-2025-31115). Checksums-Sha1: 0198fec26f15b2f611d01c687f4bc0124c92309e 255496 liblzma-dev_5.4.1-1_arm64.deb 163cdaca5c0238b01ebde61f6fe23b63cbf30ff4 250440 liblzma5-dbgsym_5.4.1-1_arm64.deb 6e7e1d4a0819f20ca0b4acddd0120210da94a961 198896 liblzma5_5.4.1-1_arm64.deb 8846a1eab6ceb9cf4f5812db8cc2c23bfd869fba 88364 xz-utils-dbgsym_5.4.1-1_arm64.deb a1ab57c87ca3a97baac5810fbdd4a7f3d36a8e72 7594 xz-utils_5.4.1-1_arm64-buildd.buildinfo 1f181de623c1d4dbfcbceeb54f9644ab0ea3f809 469328 xz-utils_5.4.1-1_arm64.deb f18b801c24a46185d0d53f1eb5b66b469a26fb11 114832 xzdec-dbgsym_5.4.1-1_arm64.deb 7f063bc4c3d5c0b960be482c390b092eb95a9b53 156412 xzdec_5.4.1-1_arm64.deb Checksums-Sha256: b1a83ead5ede84025000035a45acfbc2cfdc68fefd51179e0a820819366491ff 255496 liblzma-dev_5.4.1-1_arm64.deb 3e114cc14f2486568b3ebff3f6d8842d0939277facefbfbdd0dfa1b7581f6347 250440 liblzma5-dbgsym_5.4.1-1_arm64.deb 3d9b12d3f93d08205335624c2238518911f7b1ce3355c630b433561b3ca25cd4 198896 liblzma5_5.4.1-1_arm64.deb 24fb305735ef68ca5f2d4b4bcbd63b1531f966037f4f070549e3948553d26258 88364 xz-utils-dbgsym_5.4.1-1_arm64.deb 81aad764e454c0fface4b8e18ed1bfd4288de96165cab609fe8d8a1737ebc9f1 7594 xz-utils_5.4.1-1_arm64-buildd.buildinfo d7d098ce6267b8e4e906df5bfb138c2547b9e92e54de9fb855d3da8fdb9182de 469328 xz-utils_5.4.1-1_arm64.deb bd290250e6efd53b632114f1d38a1a5be662b9cf7ff1995868a8fd605ccba027 114832 xzdec-dbgsym_5.4.1-1_arm64.deb a579745754441420d3ef52d1a7777b552202e462cafcbb40624e5ba4f42f61ac 156412 xzdec_5.4.1-1_arm64.deb Files: a512deb140bc3f9d65d2164bad59b9cb 255496 libdevel optional liblzma-dev_5.4.1-1_arm64.deb 9b2f1a3d80fa3ea8b02ca85fbfc7739c 250440 debug optional liblzma5-dbgsym_5.4.1-1_arm64.deb c1bd84c0e9287fccf65c822d260e57ea 198896 libs optional liblzma5_5.4.1-1_arm64.deb f4ab9af85a76d959dea592da68ba195c 88364 debug optional xz-utils-dbgsym_5.4.1-1_arm64.deb d0125a44559048bba5938c96b93760d3 7594 utils optional xz-utils_5.4.1-1_arm64-buildd.buildinfo 5c28b003fe3a5d478157473d945c3724 469328 utils standard xz-utils_5.4.1-1_arm64.deb 8fe0e2cef8f1723b034f40ff6dfe78b4 114832 debug optional xzdec-dbgsym_5.4.1-1_arm64.deb 16f1b9970fae213d9585a1542ea7ee72 156412 utils optional xzdec_5.4.1-1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEVM4SKBZumztS8zr3lST9Us03ywsFAmfu+ysACgkQlST9Us03 ywvWxw/9EyKyPw4UIfD8s3oM99csHy0lH0QoBaJ9mfMtR0zD0iC9deiaHDB42SRy QeHL0xCTxzwdIz7eM8TxcIFwNI03oCDc3vbsLd2gywmFNmeHsE8IQOVBbShx++2I whqi+gpH+Skfz7okBnrllcwWhZ7DbaqHSbdeu7mgMqUKCYfBtR9hYOJLQ9yNNBTV 9FdvfjJS9lEpNyv80d02GbpeLXok4RYY49Z7dQCvnacfI52ZtngR/cIy/IFE0f0W Y00vMhhV6L8R5V/NPOKqIFBe9H+s/OhgNkx7EgRncznh0KawMvk5pWUIC0MqjprA BIG1H/kRcDVKJ2/PDWMkpQQOsSCnGwwa+97Dvcyrzo5otc+iPDhYEEe5tbYvO+3d lKZ818WsD3l3yVSEW86CWqQpQ/zV4CoNQ2mwCrE0N0kF+GxgthC1daGFb9bTY1W1 jhJFXUHImcXik2/IlvvHPAYMiZ4o96/mNK+ZySaUYbnGNLz8wPDVHk0iFifzsN3H pzegEvwaB1BHAvk4kXJmUfnpXfxsYi3eaT7mL+pWoIbDqYG/SGyOtsm0CDxSTVOQ pIi5Jr8X0PpGPe99fpMuwYkjOXmSLLBDT50IgmW632JZhe57CaZyQf/DyhjTJfON POpqNgW99sAyVKdHk0e46XuVnyZIyXEApfS8JTfskxmEebONuWM= =/EUy -----END PGP SIGNATURE-----