-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 02 Jun 2026 10:04:31 +0200 Source: p7zip Binary: p7zip p7zip-dbgsym p7zip-full p7zip-full-dbgsym Architecture: i386 Version: 16.02+really26.01+dfsg-0+deb12u1 Distribution: bookworm Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Sylvain Beucler Description: p7zip - 7zr file archiver with high compression ratio p7zip-full - 7z and 7za file archivers with high compression ratio Changes: p7zip (16.02+really26.01+dfsg-0+deb12u1) bookworm; urgency=high . * Non-maintainer upload by the LTS Team. * Bump codebase to 7-Zip (not p7zip) upstream 26.01, fixes: CVE-2026-48092: SquashFS Fragment Offset Overflow CVE-2026-48095: Heap Buffer Write Overflow CVE-2026-48101: UEFI Capsule uninitialized heap memory disclosure CVE-2026-48102: UDF Field OOB Read CVE-2026-48103: WIM SecurityId OOB read CVE-2026-48104: SquashFS BlockToNode uninitialized heap read CVE-2026-48111: UEFI DEPEX OOB Read CVE-2026-48112: Ar SYMDEF OOB Read * Adjust packaging for GitHub-generated upstream tarballs (cleaner permissions, Unix-style newlines). * Sync new patches from forky: - Update 0001-Accept-Debian-build-flags - Reject 0008-Use-Wno-error-array-bounds-option-to-some-specific-f (not needed, no GCC 16) * Selectively import packaging from forky: - Update man page for new "-spo{d|c|r}" option. - Update debian/rules. - Update debian/copyright. * Improve NEWS bit. * Add p7zip compatibility tests. * Improve p7zip version output compatibility. Checksums-Sha1: 7665d7ef39b6799e3ce14345a809d1ee775329c4 3107100 p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_i386.deb ae4b2c8177381fc02cb1a9cd2c042a8e885691a0 14574548 p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_i386.deb ccae71fe64e7d5a5f034ce4ab751f9ee53211820 1591748 p7zip-full_16.02+really26.01+dfsg-0+deb12u1_i386.deb 45557fc7303a3b6435711873080521fb1c1ba14b 7015 p7zip_16.02+really26.01+dfsg-0+deb12u1_i386-buildd.buildinfo d2acc007ca92740916f6d610b77996dd4e68a265 516244 p7zip_16.02+really26.01+dfsg-0+deb12u1_i386.deb Checksums-Sha256: 9c8723e8d76d8ef81a8ba9bb2f0ceaadd1986e3f09fb9b412510649e7569a99a 3107100 p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_i386.deb 1fded69250cf4d54f63e2f179494282983ea757d615254557ab4dc4bc711c26d 14574548 p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_i386.deb e87136a66e585b196a51ea70f4d46ca6710d800dcb5f79dfa5664d25dc0261cc 1591748 p7zip-full_16.02+really26.01+dfsg-0+deb12u1_i386.deb 5df4012d1f32c761293c1c4c3e170efb12da1afa301455ccd3dbe4887f87bba4 7015 p7zip_16.02+really26.01+dfsg-0+deb12u1_i386-buildd.buildinfo 45b4444695170772d7a1516c865a57cc951102647fd20f6ca3962d58dab0ed91 516244 p7zip_16.02+really26.01+dfsg-0+deb12u1_i386.deb Files: 2055e5acf61ebbea013dd3e68fe88044 3107100 debug optional p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_i386.deb 0d9c5e45ac26d317a262eadeec86d893 14574548 debug optional p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_i386.deb aeda7a2000c6199d79e461ac9993f7a5 1591748 utils optional p7zip-full_16.02+really26.01+dfsg-0+deb12u1_i386.deb 85020961dda1c07b40d73994c34e97e7 7015 utils optional p7zip_16.02+really26.01+dfsg-0+deb12u1_i386-buildd.buildinfo 2c3f1f598458fb2b85008614c9782373 516244 utils optional p7zip_16.02+really26.01+dfsg-0+deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmpGvvYACgkQPkCWRKsh 20fOhQ//Z5qVID0QDyjswn5G6deT9bN+Cmy8bjHNLcTtOyCIOff/XW+agqCfDhVU FEIJPWIP1EKb1zvAcSbUCsujrKrTuT3ckYJ9MTe1RDBfmVf4Gp31aEVOO8xbNSrv 8CtdYYF1Mrb7/pWeUfPuAjyWg5oPjimNH/gM5VN0UoQBqwQJ60js2auSOADKf8Pw ybep0dj3okSjgZE84/+1SHESiafcD2DQRmG3aZ1dbGXLnib+qSH5S948CzF3RtTB U4WZWBl/l9MPG9iimTGFVBv0wqOmwv29eXVFLs4LRCoMkyv5AqcbDZMA7Cxh3l1Q jbiD4EQ43C2yvUiNFf7nVUJL05vXjFQOPDvlIkLFKHosa6/PBh+fNXDBybRMljnh SjKG8atEH4tQ6Dfn2VVkIP8hxoIkeidvx+NRg4xP7QMa6AkI7fdJng9frzQnOL9Q +Bz79hRHLtTXUuWrJZG8SA3EsEGoq0Zkcz5MSYjeIBKf7ObKf+DUmkNBdPoVY4Ec 9nVwEc0egfH9/m3RaNbCQgnCgExi3LAl7Cd0gnPtwqDihQUGwmb6W+5XswWwLCKM bf4ZGi6Od97EmMaiotmfPHOSNUnJgLpcLkPrhdDfCOkCBXFSIK8yZpQ+R7UdnEzf avSw2ym22oNMiVtwEO1ggpvzPbQSSuPXwAhIf+gjyM6X0SOqIPQ= =thWa -----END PGP SIGNATURE-----