-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 02 Jun 2026 10:04:31 +0200
Source: p7zip
Binary: p7zip p7zip-dbgsym p7zip-full p7zip-full-dbgsym
Architecture: amd64
Version: 16.02+really26.01+dfsg-0+deb12u1
Distribution: bookworm
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Sylvain Beucler <beuc@debian.org>
Description:
 p7zip      - 7zr file archiver with high compression ratio
 p7zip-full - 7z and 7za file archivers with high compression ratio
Changes:
 p7zip (16.02+really26.01+dfsg-0+deb12u1) bookworm; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * Bump codebase to 7-Zip (not p7zip) upstream 26.01, fixes:
     CVE-2026-48092: SquashFS Fragment Offset Overflow
     CVE-2026-48095: Heap Buffer Write Overflow
     CVE-2026-48101: UEFI Capsule uninitialized heap memory disclosure
     CVE-2026-48102: UDF Field OOB Read
     CVE-2026-48103: WIM SecurityId OOB read
     CVE-2026-48104: SquashFS BlockToNode uninitialized heap read
     CVE-2026-48111: UEFI DEPEX OOB Read
     CVE-2026-48112: Ar SYMDEF OOB Read
   * Adjust packaging for GitHub-generated upstream tarballs (cleaner
     permissions, Unix-style newlines).
   * Sync new patches from forky:
     - Update 0001-Accept-Debian-build-flags
     - Reject 0008-Use-Wno-error-array-bounds-option-to-some-specific-f
       (not needed, no GCC 16)
   * Selectively import packaging from forky:
     - Update man page for new "-spo{d|c|r}" option.
     - Update debian/rules.
     - Update debian/copyright.
   * Improve NEWS bit.
   * Add p7zip compatibility tests.
   * Improve p7zip version output compatibility.
Checksums-Sha1:
 e93db4d12a2b44750687fa593b189fd84e78cf51 3245452 p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_amd64.deb
 fd4182f55e7d395be4ece74bc7460b0974036f13 15161932 p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_amd64.deb
 1038c3141a263adcf8e17ef82ec6e64b8a502568 1423220 p7zip-full_16.02+really26.01+dfsg-0+deb12u1_amd64.deb
 bef2920b8c9f3fc4e551d75f2ab85323dd72767b 7097 p7zip_16.02+really26.01+dfsg-0+deb12u1_amd64-buildd.buildinfo
 c4db4052bdc0c5036ed13a821bbd3e47e49b521b 452948 p7zip_16.02+really26.01+dfsg-0+deb12u1_amd64.deb
Checksums-Sha256:
 3e8fe989cfcf2082929ae29c4414cd4dc46409a032f08b8ce2de64279a263a0a 3245452 p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_amd64.deb
 8c00f68c8e159c054ac17a5474878fae0f8bcf15d58c18cc875f1446e1c62a67 15161932 p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_amd64.deb
 91624c886bf525705beb66dd2bb063015c5cab4e51d9f08d9464cbbb53b00cb7 1423220 p7zip-full_16.02+really26.01+dfsg-0+deb12u1_amd64.deb
 048a6d8e447b00133f6d47e7da85c570a897f75609c58b292b30bb64e66e6ce3 7097 p7zip_16.02+really26.01+dfsg-0+deb12u1_amd64-buildd.buildinfo
 58b6aaf4fd163a4f5f7251792b870856dd63c249e62d505a20fcd0b6c2aefbc0 452948 p7zip_16.02+really26.01+dfsg-0+deb12u1_amd64.deb
Files:
 0fd26a0496c0f2b82842dea11e0244a8 3245452 debug optional p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_amd64.deb
 2c82f698db207104768a1effab786415 15161932 debug optional p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_amd64.deb
 b0783ae1b326696719e2e2ac515efb0a 1423220 utils optional p7zip-full_16.02+really26.01+dfsg-0+deb12u1_amd64.deb
 bbfa06a8fbb6c9e80186bcc13b0a7752 7097 utils optional p7zip_16.02+really26.01+dfsg-0+deb12u1_amd64-buildd.buildinfo
 fbae2969302a6719b81c05cfea9416c8 452948 utils optional p7zip_16.02+really26.01+dfsg-0+deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=OdKG
-----END PGP SIGNATURE-----