-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 02 Jun 2026 10:04:31 +0200 Source: p7zip Binary: p7zip p7zip-dbgsym p7zip-full p7zip-full-dbgsym Architecture: arm64 Version: 16.02+really26.01+dfsg-0+deb12u1 Distribution: bookworm Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-02) Changed-By: Sylvain Beucler Description: p7zip - 7zr file archiver with high compression ratio p7zip-full - 7z and 7za file archivers with high compression ratio Changes: p7zip (16.02+really26.01+dfsg-0+deb12u1) bookworm; urgency=high . * Non-maintainer upload by the LTS Team. * Bump codebase to 7-Zip (not p7zip) upstream 26.01, fixes: CVE-2026-48092: SquashFS Fragment Offset Overflow CVE-2026-48095: Heap Buffer Write Overflow CVE-2026-48101: UEFI Capsule uninitialized heap memory disclosure CVE-2026-48102: UDF Field OOB Read CVE-2026-48103: WIM SecurityId OOB read CVE-2026-48104: SquashFS BlockToNode uninitialized heap read CVE-2026-48111: UEFI DEPEX OOB Read CVE-2026-48112: Ar SYMDEF OOB Read * Adjust packaging for GitHub-generated upstream tarballs (cleaner permissions, Unix-style newlines). * Sync new patches from forky: - Update 0001-Accept-Debian-build-flags - Reject 0008-Use-Wno-error-array-bounds-option-to-some-specific-f (not needed, no GCC 16) * Selectively import packaging from forky: - Update man page for new "-spo{d|c|r}" option. - Update debian/rules. - Update debian/copyright. * Improve NEWS bit. * Add p7zip compatibility tests. * Improve p7zip version output compatibility. Checksums-Sha1: 537445bbee836f010df7be77b4efa19c37cbb528 3137544 p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_arm64.deb c85476bac651155bb7789ab47ac1c3abbb8f379c 14700488 p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_arm64.deb 5d3a3b4baa83486d258af75f3b92a53387dbb112 1281672 p7zip-full_16.02+really26.01+dfsg-0+deb12u1_arm64.deb 2a79cdef4ffb428b2462796b3f4524b39e4a8750 7112 p7zip_16.02+really26.01+dfsg-0+deb12u1_arm64-buildd.buildinfo f4a9891edd04a528970f7ae008f9d89e761bcf62 403252 p7zip_16.02+really26.01+dfsg-0+deb12u1_arm64.deb Checksums-Sha256: a02ecd9eb954aa3c3e8c6a5a9a5ae933f3cf3ea69493c1a8fad39c35e92a881f 3137544 p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_arm64.deb dfa3996a1c21c03c44e82e11b634753532f37f3fccd7ff949830192126c057ff 14700488 p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_arm64.deb 4505bf77bc4bf430cc6ab00f1a63064f4ea70cb575008db7fe107f167ac3b5b0 1281672 p7zip-full_16.02+really26.01+dfsg-0+deb12u1_arm64.deb c8f63d3c937f25b75c77cc223fb89dabaf45196f6f4cb7544eeddfdb81d603c8 7112 p7zip_16.02+really26.01+dfsg-0+deb12u1_arm64-buildd.buildinfo 9ec323ee2f9540d084d386d7b099aa50cbc88c8e79af2ad370bed93133ce68e2 403252 p7zip_16.02+really26.01+dfsg-0+deb12u1_arm64.deb Files: 9d5c5e661748b31cfc457824eebea44e 3137544 debug optional p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_arm64.deb 62dbb54581bfe4ba0bc04a5b0075032d 14700488 debug optional p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_arm64.deb 3e0d33b58ce804ffa462a460f50e8fe1 1281672 utils optional p7zip-full_16.02+really26.01+dfsg-0+deb12u1_arm64.deb c780fb1b4cf6bb651ae437a630cc7bef 7112 utils optional p7zip_16.02+really26.01+dfsg-0+deb12u1_arm64-buildd.buildinfo fa81a105f75470c3a1cc8feb4249428b 403252 utils optional p7zip_16.02+really26.01+dfsg-0+deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmpGvhcACgkQG5VHrWJm wgdw7Q//faA271Wf7FIIt3+hOkujlzNkJsu0DaDPzcjQVVzVAU2674gqAyfmWIEZ tLu/nMdz8HJCjJtqOXG15z9HgdiW6qd5ueHaKjvUpaG1pRTVSZedXU0bebumURjm NwpzSl11ZxRwuoF+7UDs8ztXmSr9Xu4p3tViG4r3y6XQVX/Zf52Qe8uOr5bgMrQe h8Om48wJvSPCreAr0IdTl3tpSI4P2FL/BwpvJEoqZ1Il+dWdhbZn3RjY9LEomFZ1 17OJ3XbT0yjICK2CIdeWaNffth3f99T3slVAO9pi8cwGq6y4zzzwaYfqa0LeoWad eBqb/DnLXPEaXveRKjUfag2shRLYPekUTluFz+u+moATuDP7cwE/4T0wN2aaVcma hfADoK+n9U9VsT+/lT8ersLi00l3yd5lfqOAZHZS6qOrj+yBSTMkxisS8E85MUCw kLbuKrjAYDe4Sf0aN09k8jr78y4ynPzcCRjQXljYCH2AcTWKFxtXulqgPDJJy79Y PoyK8D/7AL9QknQgbR09oN5SIb8bdqK5JoRB5GUjb1Hm6ofOhFB/uOZXVZ2mAfSe SByCcwZqT41kRW4IjYb1maYNGEUdxIxC7yaJDQPsPk+zLOlOy3oMa20ZxJWtHLrA hq2mX2EOkhB6L1lXyJJE2135KcSk4pkihAOC1UeBnljHja3v2pE= =/x0m -----END PGP SIGNATURE-----