-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 16 Aug 2026 15:50:52 +0200 Source: unzip Architecture: source Version: 6.0-28+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Santiago Vila <sanvila@debian.org> Changed-By: Andrej Shadura <andrewsh@debian.org> Closes: 1142904 1142905 1142906 Changes: unzip (6.0-28+deb12u1) bookworm-security; urgency=medium . * Non-maintainer upload by the Debian LTS team. * Apply upstream fix for CAN-2026-2034440. Closes: #1142904. (heap out-of-bounds read in EF_IZUNIX3 extra field handler) * Apply upstream fix for CAN-2026-2034442. Closes: #1142906. (heap buffer overflow WRITE in memextract() STORED path) * Apply upstream fix for CAN-2026-2034443. Closes: #1142905. (stack out-of-bounds NUL write in EF_SMARTZIP handler) Checksums-Sha1: 3a944cb6b77e1491b65dd0885ab3082eb4246f59 1131 unzip_6.0-28+deb12u1.dsc ed99a409bcc7310b9e30f3fa684acdde10243550 26508 unzip_6.0-28+deb12u1.debian.tar.xz 1afd28963ccb1f2facc297b158103e5782d49727 5638 unzip_6.0-28+deb12u1_source.buildinfo Checksums-Sha256: e1bb1f919fe04ced4da497c1f9f4e2e3174c74c0080d889cc368d8fddb495870 1131 unzip_6.0-28+deb12u1.dsc defefe4900f2065b9f067652645fe7e5d99421566565d8b743cc7c5636deb4fe 26508 unzip_6.0-28+deb12u1.debian.tar.xz 41ae7c5c76208a4319ab4b5e8f6f7426f0c371a64798a952c33f95691548cc8e 5638 unzip_6.0-28+deb12u1_source.buildinfo Files: 11c949c2fa096d830cdd8dd900e1f2cd 1131 utils optional unzip_6.0-28+deb12u1.dsc 86987b2471fc11bb25a6cafebee30e9c 26508 utils optional unzip_6.0-28+deb12u1.debian.tar.xz 6ff0be5d56f6db5436e5e029e92aa107 5638 utils optional unzip_6.0-28+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCaoHCXAAKCRDoRGtKyMdy YSeNAP4vGi/cZXag7LAFo6r7Njq+zOAUxnFXfP04K5KSGkMzWQD/SpJi8kdqWJyb geC/wjdW11gRYHD/1VkV9NdE8KqlIww= =h0Rd -----END PGP SIGNATURE-----
