-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 16 Aug 2026 15:19:49 +0200 Source: unzip Architecture: source Version: 6.0-26+deb11u2 Distribution: bullseye-security Urgency: medium Maintainer: Santiago Vila <sanvila@debian.org> Changed-By: Andrej Shadura <andrewsh@debian.org> Closes: 1142904 1142905 1142906 Changes: unzip (6.0-26+deb11u2) bullseye-security; urgency=medium . * Non-maintainer upload by the Debian LTS team. * Apply upstream fix for CAN-2026-2034440. Closes: #1142904. (heap out-of-bounds read in EF_IZUNIX3 extra field handler) * Apply upstream fix for CAN-2026-2034442. Closes: #1142906. (heap buffer overflow WRITE in memextract() STORED path) * Apply upstream fix for CAN-2026-2034443. Closes: #1142905. (stack out-of-bounds NUL write in EF_SMARTZIP handler) Checksums-Sha1: 3bc9675654fd2e5ac76e61d0ae88ade6903aef13 1123 unzip_6.0-26+deb11u2.dsc abf7de8a4018a983590ed6f5cbd990d4740f8a22 1376845 unzip_6.0.orig.tar.gz 921f8cbc24276ed5ba2a1eec422d6243c10a4077 26496 unzip_6.0-26+deb11u2.debian.tar.xz c074d30c9fe4d55856b71ec00dc617cceaa9db4c 4736 unzip_6.0-26+deb11u2_source.buildinfo Checksums-Sha256: a413d017796645b62cb85610697bf387e7c903de3719464f9622ce886c5873ec 1123 unzip_6.0-26+deb11u2.dsc 036d96991646d0449ed0aa952e4fbe21b476ce994abc276e49d30e686708bd37 1376845 unzip_6.0.orig.tar.gz f1355fe65f938dc52862eb4c00db7fa6b384f30e4bc849433b8a88c784c00af3 26496 unzip_6.0-26+deb11u2.debian.tar.xz 9a430280f8ef7ebe90af56f9d1b2afcffde427a5b1ce71337f26f990801fd536 4736 unzip_6.0-26+deb11u2_source.buildinfo Files: cb681385e8f5ba1d74f06de7dc5d846d 1123 utils optional unzip_6.0-26+deb11u2.dsc 62b490407489521db863b523a7f86375 1376845 utils optional unzip_6.0.orig.tar.gz b1885c57e6f26e9fb8ab48768ce17388 26496 utils optional unzip_6.0-26+deb11u2.debian.tar.xz d9ae58927041582d81a666b9120b5f47 4736 utils optional unzip_6.0-26+deb11u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCaoG+VAAKCRDoRGtKyMdy YQwzAP9WPHGFZsBx6VyR5wsz2Nrk+CzQiM5PZIRkSg62J6SxFwD/f6YJoVMPmhkm 1pYJtAyDlzbFKfPN+8G9xBCP2slhPgQ= =a4BJ -----END PGP SIGNATURE-----
