Accepted zip 3.0-13+deb12u1 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 18 Sep 2026 03:38:16 +0200
Source: zip
Architecture: source
Version: 3.0-13+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Santiago Vila <sanvila@debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Closes: 903196 1005943 1077054 1093629 1143866
Changes:
 zip (3.0-13+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * Fix buffer overflow when filename contains unicode characters.
     (Closes: #1077054, #1093629)
   * Fix buffer overflow when using '-T -TT'.
     This is CVE-2018-13410. CVE note: Negligible security impact, would
     involve that a untrusted party controls the -TT value.
     (Closes: #903196, #1093629)
   * Fix symlink update detection. (Closes: #1005943)
   * Fix command injection issue. (Closes: #1143866)
Checksums-Sha1:
 f1300fbfc57a5c04b8befa301f50b196dfbf3fe3 1716 zip_3.0-13+deb12u1.dsc
 c9f4099ecf2772b53c2dd4a8e508064ce015d182 1118845 zip_3.0.orig.tar.gz
 26811dd65881a2539a25e5da0b8850701d2d0aa2 11424 zip_3.0-13+deb12u1.debian.tar.xz
 d5c151fba053ac55c1af8dcc0be903c23b5d207e 6471 zip_3.0-13+deb12u1_source.buildinfo
Checksums-Sha256:
 6edc94652c25b951e94f1c9a55daa69d35fae621dfe7b0e1aa8d3e5a0451a4de 1716 zip_3.0-13+deb12u1.dsc
 f0e8bb1f9b7eb0b01285495a2699df3a4b766784c1765a8f1aeedf63c0806369 1118845 zip_3.0.orig.tar.gz
 5decc93eb91c383152c0268c89bf5eaeca6615844d5d5a1342b2d0402ef7fd56 11424 zip_3.0-13+deb12u1.debian.tar.xz
 85d50c9a0948ede785ac870747c12fe5b95cfaa321f45ce0be3b554fd25807b6 6471 zip_3.0-13+deb12u1_source.buildinfo
Files:
 faf340ac7af9d89d15a4662b73752c86 1716 utils optional zip_3.0-13+deb12u1.dsc
 7b74551e63f8ee6aab6fbc86676c0d37 1118845 utils optional zip_3.0.orig.tar.gz
 69fd2598c51c73d7651a1b9f27fb3b95 11424 utils optional zip_3.0-13+deb12u1.debian.tar.xz
 6e9fc56fef2378812160eddedaefb793 6471 utils optional zip_3.0-13+deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=KI40
-----END PGP SIGNATURE-----