-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 02 Jun 2026 10:04:31 +0200 Source: p7zip Binary: p7zip p7zip-dbgsym p7zip-full p7zip-full-dbgsym Architecture: armel Version: 16.02+really26.01+dfsg-0+deb12u1 Distribution: bookworm Urgency: high Maintainer: armel Build Daemon (arm-conova-02) Changed-By: Sylvain Beucler Description: p7zip - 7zr file archiver with high compression ratio p7zip-full - 7z and 7za file archivers with high compression ratio Changes: p7zip (16.02+really26.01+dfsg-0+deb12u1) bookworm; urgency=high . * Non-maintainer upload by the LTS Team. * Bump codebase to 7-Zip (not p7zip) upstream 26.01, fixes: CVE-2026-48092: SquashFS Fragment Offset Overflow CVE-2026-48095: Heap Buffer Write Overflow CVE-2026-48101: UEFI Capsule uninitialized heap memory disclosure CVE-2026-48102: UDF Field OOB Read CVE-2026-48103: WIM SecurityId OOB read CVE-2026-48104: SquashFS BlockToNode uninitialized heap read CVE-2026-48111: UEFI DEPEX OOB Read CVE-2026-48112: Ar SYMDEF OOB Read * Adjust packaging for GitHub-generated upstream tarballs (cleaner permissions, Unix-style newlines). * Sync new patches from forky: - Update 0001-Accept-Debian-build-flags - Reject 0008-Use-Wno-error-array-bounds-option-to-some-specific-f (not needed, no GCC 16) * Selectively import packaging from forky: - Update man page for new "-spo{d|c|r}" option. - Update debian/rules. - Update debian/copyright. * Improve NEWS bit. * Add p7zip compatibility tests. * Improve p7zip version output compatibility. Checksums-Sha1: 34da65c7eb3c222ffaf206d35587e855ff7de484 3111168 p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_armel.deb 7e36d6f604af618072549fed70c449f81a1783ca 13152976 p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_armel.deb b8353125bbe28a4387f690107a83453ca1b79eef 1156552 p7zip-full_16.02+really26.01+dfsg-0+deb12u1_armel.deb cd03fbaa812e7b8009567d6f316770a5dd7a25e8 6954 p7zip_16.02+really26.01+dfsg-0+deb12u1_armel-buildd.buildinfo 286ae4677374364e8dbae5b38b688c1aa24db52e 364952 p7zip_16.02+really26.01+dfsg-0+deb12u1_armel.deb Checksums-Sha256: 99b8ec5d81cd985a208fa4b34bee0999aa58dd86106a252fe013787988a76298 3111168 p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_armel.deb e69c143b8b0fa9a024720d392dca9405a4228c85cded7f083ed3088252f0019f 13152976 p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_armel.deb f357f351c51157a0fa3988b32197307d7b46686c4eb3d39db01342de880ea811 1156552 p7zip-full_16.02+really26.01+dfsg-0+deb12u1_armel.deb 71f61101315325aa7f0995a7d42ce877d24608f2499fa98068a94a756f91100e 6954 p7zip_16.02+really26.01+dfsg-0+deb12u1_armel-buildd.buildinfo 5c84ab05ac8f2f144d3a9649c7a614cf74c1950b8308a97c00f16ffa5e683968 364952 p7zip_16.02+really26.01+dfsg-0+deb12u1_armel.deb Files: 6c2ec61ed24cd16efbab4b323f82cfcd 3111168 debug optional p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_armel.deb a0da9d17a97d6351bc22fc8806646928 13152976 debug optional p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_armel.deb 854f49d68307e4c759534d8c1650b45d 1156552 utils optional p7zip-full_16.02+really26.01+dfsg-0+deb12u1_armel.deb 4d7bf2d7fd10d5a24e14e923b94944f2 6954 utils optional p7zip_16.02+really26.01+dfsg-0+deb12u1_armel-buildd.buildinfo 2710603aaaf51d8461b60d5fea955d5c 364952 utils optional p7zip_16.02+really26.01+dfsg-0+deb12u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEa5s+5E+WDkV2pQjwIyDMsRzdi8EFAmpGvmEACgkQIyDMsRzd i8HxkQ//S7rohHePxjSN3cnxbubHl5kWpoJncIjIKPjoXsr62n0BZQfwiASL8VJu DjvwWuyyEyh2EUO6Huhzu8RAcKgeZ3c7gRhcn/Nz/9FAv9g5CwDqfZAMObmneMEW MrsZ8qHUwLrYW7TvwkLR3fdRfgXKgrwE/l4bP9HmI6k1BN7ycwl7YeR6G3jziwAs Hs5htywgHd06BjPdcR4yYmUVEU8AuF9JmEK0vV4D7Eu3AcOps/VDjrUwkqIQhrU8 AcohuxZ/uDOJ3uqobItFPTSl4pANSEmkSi0//5sJjQwQZulVz8pl/+hfyB3fe2Nr dQdjW/aso5ZclH5+BfFKkfDWmmlPkbMhxDKndxFVfqfcO+zUqa7J5lTuJkK4jbe2 GZPO7pOS0fI960mpc5j5cf0yFNnFQsEIWrxB4aNOyEd1Z7z5phMk51ao6/5jRFJ0 0GatnxH8mucRHiU7sU+hU0kVtQcrTHeALxGZtBJmXOtBMMxpgnHQmxGYobE4Qa/0 QxFakBtsO5pqdrnALd7rGR4RBo7GM5oplHscY91tjaEilKOUngvC5ePFpS73eps0 CMwYMuvGY1SulNPs13qRrOKUu44F/V0hRZcXkkBG2hoLJTYMP9/ybO8p+RyYrRWx Ty/MjIgr1MS+svfuzKH6Eo9SUPmQWBgyNKbe3vFXYSLTa4EnzBA= =1Utw -----END PGP SIGNATURE-----