-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 27 Sep 2026 15:30:44 +0200
Source: xz-utils
Binary: liblzma-dev liblzma5 liblzma5-dbgsym liblzma5-udeb xz-utils xz-utils-dbgsym xzdec xzdec-dbgsym
Architecture: riscv64
Version: 5.8.1-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-osuosl-02) <buildd_riscv64-rv-osuosl-02@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma5   - XZ-format compression library
 liblzma5-udeb - XZ-format compression library (udeb)
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Closes: 1147318
Changes:
 xz-utils (5.8.1-1+deb13u2) trixie-security; urgency=medium
 .
   * GHSA-5qpq-xqfv-j9pg ("Invalid write if a decoder is reinitialized after
     allocation failure") (Closes: #1147318).
   * Protect progress variable with a mutex.
Checksums-Sha1:
 87d72ba209db974189ec4b5efbd0ee52ab222839 476060 liblzma-dev_5.8.1-1+deb13u2_riscv64.deb
 b6cf09db6a09d4d98017f0e9225954533a9431d2 247992 liblzma5-dbgsym_5.8.1-1+deb13u2_riscv64.deb
 118461cc1c2c7ae528b581bb5e8b354872349d43 94196 liblzma5-udeb_5.8.1-1+deb13u2_riscv64.udeb
 680d617e99682a0a6d27b89226e03c1ec53082d3 312884 liblzma5_5.8.1-1+deb13u2_riscv64.deb
 f81b3f96cd9028751ea5e2397c9b502b02b46dd7 109440 xz-utils-dbgsym_5.8.1-1+deb13u2_riscv64.deb
 3836abf70597c6437eeeeb3162c30aabc911dc56 8048 xz-utils_5.8.1-1+deb13u2_riscv64-buildd.buildinfo
 d006015e106d777bfd6e3a4d114fab18bc226d99 658936 xz-utils_5.8.1-1+deb13u2_riscv64.deb
 be780117dc0ff6b9a58c5f5f4aa699649b89c014 108336 xzdec-dbgsym_5.8.1-1+deb13u2_riscv64.deb
 39c068c3e78d9b8c81e2977da01ed5954bc87cdf 258704 xzdec_5.8.1-1+deb13u2_riscv64.deb
Checksums-Sha256:
 2c5d3ae868eee2a3bb91c019004c4c8c9b6f5194059a24e8760d7bd9a20f0628 476060 liblzma-dev_5.8.1-1+deb13u2_riscv64.deb
 f8d0958e58c88a66c8fd5b87a4ac4cea3bc85effa9bd77ea01f726903f7b4ed1 247992 liblzma5-dbgsym_5.8.1-1+deb13u2_riscv64.deb
 c59cda73cb5dc9fdd038c9edbed68f5d566002961ee3750e2fb6f0d181f7724d 94196 liblzma5-udeb_5.8.1-1+deb13u2_riscv64.udeb
 26d2554c6cc1b37946cadcea9cda254e0884100599475f47b1cef6217c3171cd 312884 liblzma5_5.8.1-1+deb13u2_riscv64.deb
 acd00f2b2a73b02ac7d3d27e86e13e72955e0c84934f585d7dd2dee674e89544 109440 xz-utils-dbgsym_5.8.1-1+deb13u2_riscv64.deb
 a22e5239fc858343f22beb513778bf1b226ccd7b4476fa51eb694778acc6954c 8048 xz-utils_5.8.1-1+deb13u2_riscv64-buildd.buildinfo
 977029bd04c897cbc7fbba7c897915f02db1c388ec114720a066aa1612db5a4d 658936 xz-utils_5.8.1-1+deb13u2_riscv64.deb
 e31dcb2b06fd5240670bdb9332e9a22341ba9093dd90993a28dd95655f10dc72 108336 xzdec-dbgsym_5.8.1-1+deb13u2_riscv64.deb
 82a74073341cb3d651bbcd6e905890dde285be1171119750a276c180caf2fc45 258704 xzdec_5.8.1-1+deb13u2_riscv64.deb
Files:
 e4ca199a24aa9cd1a0d1891ca4c600d2 476060 libdevel optional liblzma-dev_5.8.1-1+deb13u2_riscv64.deb
 fd73b8dc09a89076acf09401d4d812ef 247992 debug optional liblzma5-dbgsym_5.8.1-1+deb13u2_riscv64.deb
 18875554994960447796a214f119c767 94196 debian-installer optional liblzma5-udeb_5.8.1-1+deb13u2_riscv64.udeb
 9bbafaf280e21877b53bae73cbd320e4 312884 libs optional liblzma5_5.8.1-1+deb13u2_riscv64.deb
 79d28a42bd0d51e5c40f0baadd51d9d0 109440 debug optional xz-utils-dbgsym_5.8.1-1+deb13u2_riscv64.deb
 bdd3b9a4bd01d1fbeff70d797cc7239c 8048 utils optional xz-utils_5.8.1-1+deb13u2_riscv64-buildd.buildinfo
 4c69f2f3c30cfdec535dbf83aacfbe21 658936 utils standard xz-utils_5.8.1-1+deb13u2_riscv64.deb
 dfd914cdeed884ac4800388901ef3442 108336 debug optional xzdec-dbgsym_5.8.1-1+deb13u2_riscv64.deb
 4452d04dcd8f07cd6d63a1373abf4da6 258704 utils optional xzdec_5.8.1-1+deb13u2_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=vcU/
-----END PGP SIGNATURE-----