-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 10 Apr 2022 14:23:52 +0530 Source: xz-utils Architecture: source Version: 5.2.2-1.2+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Jonathan Nieder <jrnieder@gmail.com> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Closes: 1009167 Changes: xz-utils (5.2.2-1.2+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the LTS team. * Add patch to fix fix escaping of malicious filenames. (ZDI-CAN-16587) (Fixes: CVE-2022-1271) (Closes: #1009167) Checksums-Sha1: 51a9d363d84048f1b21050390734a030df00f4a7 2603 xz-utils_5.2.2-1.2+deb9u1.dsc 72c567d3263345844191a7e618779b179d1f49e0 1016404 xz-utils_5.2.2.orig.tar.xz 146e0b1b4669939f3d1f38ba59c1f3fcecbe1c0b 543 xz-utils_5.2.2.orig.tar.xz.asc 21f5186b080183c2e7a0352d9ce63c6fcde46690 109876 xz-utils_5.2.2-1.2+deb9u1.debian.tar.xz 7ce84e0a8b2d7d2a2bc09d5f0550f174e1a51eb0 6110 xz-utils_5.2.2-1.2+deb9u1_source.buildinfo Checksums-Sha256: fc38d8ae04cf8bd29da50ee7bdff3a6b3ccc02585cfa334ce36a05aa5fb71f2e 2603 xz-utils_5.2.2-1.2+deb9u1.dsc f341b1906ebcdde291dd619399ae944600edc9193619dd0c0110a5f05bfcc89e 1016404 xz-utils_5.2.2.orig.tar.xz 2cc0575556e1331b3f468e6e7dca5969ce86efcc315d62672279b4e68b2e449f 543 xz-utils_5.2.2.orig.tar.xz.asc d9a1006df8a0c5c18306cf20db497e68923781360e6b08c72fb122b3a9abeccb 109876 xz-utils_5.2.2-1.2+deb9u1.debian.tar.xz c0e2a8f8f816fe6c2e982d0dfc977afa79c9f2e770a300a8f92ca072d26289c9 6110 xz-utils_5.2.2-1.2+deb9u1_source.buildinfo Files: 5de5703eb6d33d5ba921033b3b88ce8e 2603 utils required xz-utils_5.2.2-1.2+deb9u1.dsc e26772b69940085c0632589ab1d52e64 1016404 utils required xz-utils_5.2.2.orig.tar.xz 42764222a5f3db5e63dd94ae5d2392f1 543 utils required xz-utils_5.2.2.orig.tar.xz.asc 7671393636fdb30ac511f4584baeefc2 109876 utils required xz-utils_5.2.2-1.2+deb9u1.debian.tar.xz a5b555c397b5180faa1b764c653c141e 6110 utils required xz-utils_5.2.2-1.2+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmJSy6YTHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlozDEADJ+mBmTYn39x3UZUX/Tq/qPbX1RnLu ADHkAc2Y7wkZ3q+Dtm6rajtM9bpGa3oAvqa4UgKPsEb0hociJcOyHbtyq+D07Q76 bhpxsnIlbncmPWSvLcOoHzdF2Mj3hncZZaGChU8CpRInW5b0Oqa02WmqhofjX6tc W3fnkFkUOqXNciIYGIOjJqYfiqTR0XGSFG1t+kDZbtFDX2/CA7H/K3saZmRBAvFX FLXnabPFbwuU6CPKl43xryojS0FNpLDw8krG1uFSK0az5v7Mu2fcwk8OzdB8ecZ2 o0jac4PT+m3a9SS3EkBGnpPlsiVdpEbzwI840ht2p5ShVh1I24UjTOvjKHtplhvJ KyDYiakJDbiGkYRY3GYqtgomqffQ6dRtVAkyyo7aY0uQmX9miT/5u81NugKuVNc6 PSI5+hGLFo9daE5FdjwNTu2XL5QO+yOs5rStcfC7IVQRT5kXGWltSmZuKDhI9KEN r1n+brT8HiBv/QPBfIAODoH+BijXNV9IUs+qPKSJOM2HdK0Mz6qc0wy9Zys0G1vW hRxDB5RbGClHjuntPH5mn63gZy4/krnfjmNL1mQQlM7s/cYxuPHvTZ7giPtNddHn RtaMo/fFJzvEskXDFn4aRM3AZjqPPnnHwdDmpJj2/gFQiChtsjnz6NDERuAe9pWP RY3jNDFYbakOsA== =C+/k -----END PGP SIGNATURE-----