-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 01 Apr 2026 00:00:00 +0000 Source: xz-utils Architecture: source Version: 5.8.3-1 Distribution: unstable Urgency: medium Maintainer: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Changed-By: Otto Kekäläinen <otto@debian.org> Closes: 1132497 Changes: xz-utils (5.8.3-1) unstable; urgency=medium . * Import 5.8.3 - Includes security fix for CVE-2026-34743, for which upstream states it’s likely that this bug cannot be triggered in any real-world application, see https://tukaani.org/xz/index-append-overflow.html (Closes: #1132497) - Autotools: Enable 32-bit x86 assembler on Hurd by default - New man pages in Arabic Checksums-Sha1: 53e4ea066a0d1b374201d2ab9a016464d6d13a1b 2494 xz-utils_5.8.3-1.dsc 48562fc255d61bdb140f628212b2450819ba8f20 1548064 xz-utils_5.8.3.orig.tar.xz 2126d57d420183766bc989d2c724fddace248893 27344 xz-utils_5.8.3-1.debian.tar.xz 5d31406a72e61ccbd23fcedc64ca1edf9cfbc267 5616 xz-utils_5.8.3-1_source.buildinfo Checksums-Sha256: 7b18c92ac5a89489aa8a8a4fc3c648473c02d26becce206e6f1fc54f8213d931 2494 xz-utils_5.8.3-1.dsc fff1ffcf2b0da84d308a14de513a1aa23d4e9aa3464d17e64b9714bfdd0bbfb6 1548064 xz-utils_5.8.3.orig.tar.xz 0f216748e70690e5b7f1d0fc85e9e6e8e69626ad7e8ee24a67e45ac9f01db4c1 27344 xz-utils_5.8.3-1.debian.tar.xz 14b86ca450adcae02680ffca9b8ead4ccfbb83dcb4caee0c2d2a27f4f26178f9 5616 xz-utils_5.8.3-1_source.buildinfo Files: 1a8620f7e074be0b745d7b997376237d 2494 utils optional xz-utils_5.8.3-1.dsc a02753f34e5546d20213b87f876a0933 1548064 utils optional xz-utils_5.8.3.orig.tar.xz 9659c7910fff33e938344b8a62733aaf 27344 utils optional xz-utils_5.8.3-1.debian.tar.xz b0e9d5d36ebfe8d23c7214ab7e3dc071 5616 utils optional xz-utils_5.8.3-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmbRSsR88dMO0U+RvvthEn87o2ogFAmnTt64ACgkQvthEn87o 2oi1Zg//SK0YnqnCFUbzj5scWyO+kyzTBgyX5piH/DoiydLhyI4MA5QJmmqzSRGO S1oJR2Qq0Kih066qwUtJzUxyJzWxcGQ5QfTzQXj2eKH5LssoyvKAuEB7s7MtjK+9 qZpNXuvjUCgOF8ZFSA66/FeJp+tV12SwXJKSzgUtrn03CW1KyzKrvO1X09erGowb IupS2MbvwOJq/F7KIRjQcyg1T6hIiHp06RwgXYv0il9Jk3BcQ6SD1fIFF4+5327F 7oZ6vUx/+tNHEUQgQTOrIHMtaAdVyvvqrB0TRPD7n9wBY6+je9rmTSfq383YDc/n Wg5MKPA2T/SImFqGvLQ0rJ6DZCLSWUBTXsiog5v00984J1HwcxcRgR7Iz4fVjLvR qtstuBbC2tOtgE+Ql6cQM2NxsQUlutu2kn6uz06Z++jkkbQqFYZBH+nXYCBteTA5 ukkED846DUGHTyfol0UmxpgX/VqPb+DfDtDl1WBHfzj5HKjZHl6+PpIgNYEfC8La 9tmbts1lZv2fiLaZNifjWxzH/pT9KpBskGto8EErG0zqt8igt6Dsds6ZweiD9nQV ulNmGa3DYJDqelDEUd/D+zGHqthkdiHDte5z33U2d4Nvz6KvnRgQ96RCnIg25RJe fkSWoT1tHIyfpFWG704FRczoGWzw0QkDI69jSt164uhHKRwP+ws= =RWQ9 -----END PGP SIGNATURE-----