-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 02 Jun 2026 10:04:31 +0200 Source: p7zip Binary: p7zip p7zip-dbgsym p7zip-full p7zip-full-dbgsym Architecture: armhf Version: 16.02+really26.01+dfsg-0+deb12u1 Distribution: bookworm Urgency: high Maintainer: armhf Build Daemon (arm-conova-01) Changed-By: Sylvain Beucler Description: p7zip - 7zr file archiver with high compression ratio p7zip-full - 7z and 7za file archivers with high compression ratio Changes: p7zip (16.02+really26.01+dfsg-0+deb12u1) bookworm; urgency=high . * Non-maintainer upload by the LTS Team. * Bump codebase to 7-Zip (not p7zip) upstream 26.01, fixes: CVE-2026-48092: SquashFS Fragment Offset Overflow CVE-2026-48095: Heap Buffer Write Overflow CVE-2026-48101: UEFI Capsule uninitialized heap memory disclosure CVE-2026-48102: UDF Field OOB Read CVE-2026-48103: WIM SecurityId OOB read CVE-2026-48104: SquashFS BlockToNode uninitialized heap read CVE-2026-48111: UEFI DEPEX OOB Read CVE-2026-48112: Ar SYMDEF OOB Read * Adjust packaging for GitHub-generated upstream tarballs (cleaner permissions, Unix-style newlines). * Sync new patches from forky: - Update 0001-Accept-Debian-build-flags - Reject 0008-Use-Wno-error-array-bounds-option-to-some-specific-f (not needed, no GCC 16) * Selectively import packaging from forky: - Update man page for new "-spo{d|c|r}" option. - Update debian/rules. - Update debian/copyright. * Improve NEWS bit. * Add p7zip compatibility tests. * Improve p7zip version output compatibility. Checksums-Sha1: b04799a8b519772aeb3fbcaf71bf82085992aa7f 3150592 p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_armhf.deb 112cbe44fbb6413e2dabbd43a43ebada83e667c5 13304460 p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_armhf.deb 29b82ec22dc4f5466f45ba7afb3251ba128f89f6 1181432 p7zip-full_16.02+really26.01+dfsg-0+deb12u1_armhf.deb 93fd833ba6ebf1d1068d551136ee1f973fc0b0ec 6956 p7zip_16.02+really26.01+dfsg-0+deb12u1_armhf-buildd.buildinfo c00fd654f456c2dd234faa92f80db24931ca24fc 375748 p7zip_16.02+really26.01+dfsg-0+deb12u1_armhf.deb Checksums-Sha256: c3d434f93c5242e3021750f73d89d18edc2b7d01498d9859aebc08a4ebee7e90 3150592 p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_armhf.deb 9293a43607190924d8b2e5c6987889fbc75c60d9593bc94913ba58ba70121a11 13304460 p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_armhf.deb ddd09d0c4e56991181980bf4d934691cad892b76f46f31436d553683db644202 1181432 p7zip-full_16.02+really26.01+dfsg-0+deb12u1_armhf.deb 2bf11f9a3347eaa32a723e1bbe6a1c3944fceb95084931689877f16ab4a2ecab 6956 p7zip_16.02+really26.01+dfsg-0+deb12u1_armhf-buildd.buildinfo 3965c59a961d73a5f9e4d670b3ea85a663fb4d5e03572f9b73fc915cfae19b87 375748 p7zip_16.02+really26.01+dfsg-0+deb12u1_armhf.deb Files: db9c9506308bb7e589252d290f58d330 3150592 debug optional p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_armhf.deb 8e1219f429bbe07e108f84b000f257d7 13304460 debug optional p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_armhf.deb d2c89c37a45b9f81eb8371d3ab515d0f 1181432 utils optional p7zip-full_16.02+really26.01+dfsg-0+deb12u1_armhf.deb 42e8a6d6d1a77afac24d83382565731b 6956 utils optional p7zip_16.02+really26.01+dfsg-0+deb12u1_armhf-buildd.buildinfo 2a15dc08c3384fd31b6124aa74b9362a 375748 utils optional p7zip_16.02+really26.01+dfsg-0+deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmpGvlQACgkQ8U6eOZMp j69ciw/8DSGw0t1mvU7HggXyzd/6kav5mtPuQQwTqziCMaNhXFUHXhCZFgXIiDk6 7hO122lrONTLmzpvG9fDQgCBNpqlobqXForiYEKcjfKGkIvb0MZTxR12Op24P/xD As4J4RweCyiPdQvgxLXpsuE7zHYxkpUsX8Dqed4UfHxe55lcudGRo5M9CJe6Lcjd syJTMVOYWM36+52worPGKd8cCzNNtLzoc7BXbj4qLsfVSve26kpk8hH5Mita6RHm Zwp8OClIGdWZxbRaBJBTtkduwghoqvdY1TuNn2+D75NP/YazwUIlE5NlegiDpmaD vNEIfcXRyVDEM1jKe2gsA3o62l9ibJkyrykNxy/Kr5V0lxVMlZjFP9Tyw/pQ3e/D pYb7o7gab7CsgIyIb33CLFfM7Kuq1iZOZ5BZZKjaFm1kPR3aZpF8ynBMHp1au6GC dXlGRDFNYCrTs5UpKt4GP8hDEvlj/E2eI5nlMSgfkxWcWwkidxjqYalVkLLx0M99 dflu9lfhq0NBNihpjncGsSQ5OVqhh6zp9CJl9DqC5SNX+ae93XUbx8vjps6GMZMR q50enDiJ0yLq0doiKEoPSYM0OOBerEICNNMAUY8H52Rmx8eLlfOH60eAOGc4F1Jo AORmwvPdpPE5lw5URMXrzvrgpnpi9tk5U9RexauXS+vEpSvcyL0= =1RBi -----END PGP SIGNATURE-----