-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 03 Apr 2025 21:55:39 +0200 Source: xz-utils Binary: liblzma-dev liblzma5 liblzma5-dbgsym xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym Architecture: armhf Version: 5.4.1-1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Sebastian Andrzej Siewior Description: liblzma-dev - XZ-format compression library - development files liblzma5 - XZ-format compression library xz-utils - XZ-format compression utilities xzdec - XZ-format compression utilities - tiny decompressors Changes: xz-utils (5.4.1-1) bookworm-security; urgency=medium . * Add fix from upstream when the threaded decompresses frees memory too early on invalid input (CVE-2025-31115). Checksums-Sha1: 4caa9c5545a522ac6a79c2a11e0c2e6c6251c6d6 248296 liblzma-dev_5.4.1-1_armhf.deb d0ac730b1f0fe86f3ffa39534e17880cc1ca44e3 251032 liblzma5-dbgsym_5.4.1-1_armhf.deb 0415893c9d6bbe47b18bb6db9ebd7742ea7acf72 192876 liblzma5_5.4.1-1_armhf.deb 1ee555b330e272ac1aced625be539487a38d4a2b 88620 xz-utils-dbgsym_5.4.1-1_armhf.deb e91341045ee2b4cf44a1dffaf6ce64ab2d651908 7470 xz-utils_5.4.1-1_armhf-buildd.buildinfo 02101325297e36efa3317014c7996795681d786d 468976 xz-utils_5.4.1-1_armhf.deb 8362f15171486f45de20c6a869872a1b9f083d56 108680 xzdec-dbgsym_5.4.1-1_armhf.deb 709d11ebcddb7e27ea3b50ee3c5ead47e0baa62e 153388 xzdec_5.4.1-1_armhf.deb Checksums-Sha256: 626851b899c78d0c5f744ed7fe54cc2d4e970ee177c5e751a3f7ec9fbb58014f 248296 liblzma-dev_5.4.1-1_armhf.deb 6cd9f636f97200f5b4d27979e90d44ffd99e0537793c8617e692042d1d4c8b82 251032 liblzma5-dbgsym_5.4.1-1_armhf.deb 1984588e4cd3f7be14ef2a2fe96b2b1cc613726a5f6cb5a22f900de29f3ed645 192876 liblzma5_5.4.1-1_armhf.deb 5a25afc5502ed24b5bde58c7233cc4f45916e135cc212de31e63f61ed1610725 88620 xz-utils-dbgsym_5.4.1-1_armhf.deb ee2cf2e7ef58a57d33690b807beee7ea71e23b6760a689dbc50a1a0835fd11dd 7470 xz-utils_5.4.1-1_armhf-buildd.buildinfo 74d36336ec6f5b187f44993eded45d7d5d22d99abcb39e0853215c34d9a4deea 468976 xz-utils_5.4.1-1_armhf.deb daa148848d6d01426a3b506dd9483955ce5010cce7813598f671208c9e1e8825 108680 xzdec-dbgsym_5.4.1-1_armhf.deb 08d5c95c707301813efdbd73fbac032ec11370eb7ff3d351ce502576a4177293 153388 xzdec_5.4.1-1_armhf.deb Files: 289ce139e942c26029ea65cfa59a0dc9 248296 libdevel optional liblzma-dev_5.4.1-1_armhf.deb 8c593013175dca628f7e45f3ce26329e 251032 debug optional liblzma5-dbgsym_5.4.1-1_armhf.deb d8506450e69f027a49e171b2a078e78c 192876 libs optional liblzma5_5.4.1-1_armhf.deb ddf6586abb943baad3219433b8b0aa2c 88620 debug optional xz-utils-dbgsym_5.4.1-1_armhf.deb f59f2c84999c5bac8c8e496ac6f74f08 7470 utils optional xz-utils_5.4.1-1_armhf-buildd.buildinfo 4dc58ace3097ac5de9f4382421278792 468976 utils standard xz-utils_5.4.1-1_armhf.deb d072308b473e9d615e57662bdb1931d0 108680 debug optional xzdec-dbgsym_5.4.1-1_armhf.deb c87b1e2992e1384c27e72af6f8507a1c 153388 utils optional xzdec_5.4.1-1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEVM4SKBZumztS8zr3lST9Us03ywsFAmfu+5oACgkQlST9Us03 ywuwpg//fZ1NNSa6XDm3SSIwZ5V5NW90k8YepiVDyLWmCoTA+kOBPQIo8SZO4A5W Rlx0YSTk4mbpLe1/j7jyvZccmo4gmcmiVEAKJYKhKdDrFlZqiEXnchYdmNTDjMle 0WvpH3RkGL3rz/VkK2gh2y9zfeJw86/rcLaTwuQnAoUagqQ2VMctZWF4JC7zvxAf KynDipHRBarTI14WkDX+MxIIoVJ7oMPeamwB0joHZj1jFM2JalDuXMUOVK64ndtO AJX8mYo7AK6w/iN17Mn8PpuJ/w/uQV5XV9BLngAVAjPDOYuJDYz2JetMymIQg6M5 pvFFHxBYSc6goNDGejMZD8mnnF4VLu6P5F7Ecdj0/m3EcWfKYEsFhyfYJ7rUynzY TiuKvQJv78Lrn2T5O2MRWOIT5fZtS3IsRPSpl4niLp9lQcf2Ly1uW6hOlAaVf/cX WEO8iugip9M2I5YUgUgIeS2xGi6OxbMHpyN6P3OUfeK9Wnt8rPwR92bDrEfB3ZOL MOJ0y6w66kxu22oF14J4wf7rKBC0d1Fae8oXNLUN/Ax2ioy5rf0K1QHrBcR84WHX uYnQEdMENW3WOJLH1wvLzJnSuKYBqwDKX8ZSe4zNxcP75T5rtDsGpQMV7WDUxuHN K/LnsandIc0nyrTq5u2NSN2euCKG4n4CsEBk9lCHyhM+ZXA+B0A= =o0E2 -----END PGP SIGNATURE-----