-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 11 Aug 2026 00:10:00 +0200
Source: unzip
Binary: unzip unzip-dbgsym
Architecture: ppc64el
Version: 6.0-29+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) <buildd_ppc64el-ppc64el-osuosl-01@buildd.debian.org>
Changed-By: Santiago Vila <sanvila@debian.org>
Description:
 unzip      - De-archiver for .zip files
Closes: 1142904 1142905 1142906
Changes:
 unzip (6.0-29+deb13u1) trixie-security; urgency=high
 .
   * Apply upstream fix for CAN-2026-2034440. Closes: #1142904.
     (heap out-of-bounds read in EF_IZUNIX3 extra field handler)
   * Apply upstream fix for CAN-2026-2034443. Closes: #1142905.
     (stack out-of-bounds NUL write in EF_SMARTZIP handler)
   * Apply upstream fix for CAN-2026-2034442. Closes: #1142906.
     (heap buffer overflow WRITE in memextract() STORED path)
Checksums-Sha1:
 b36b5c80dff35ba2a10fdb764251a2543b9a6259 275552 unzip-dbgsym_6.0-29+deb13u1_ppc64el.deb
 847aa740350d5b72e9679d6571a3d064aa0b6422 5932 unzip_6.0-29+deb13u1_ppc64el-buildd.buildinfo
 e8949c3e226c27accd88fc046004a5820292c16d 170944 unzip_6.0-29+deb13u1_ppc64el.deb
Checksums-Sha256:
 d01863328aca203e7c780252b9d1ca1121820ce40e09b0b2fe0d8eb575e8e02d 275552 unzip-dbgsym_6.0-29+deb13u1_ppc64el.deb
 8ad1746a5f05b3a91f4b4c6b6c0311cb4f980f249632a28f4b13bb3123a54d07 5932 unzip_6.0-29+deb13u1_ppc64el-buildd.buildinfo
 6e995579a86dd204708386119c12e5418e69c3855c433e1f248f57b84a6cf12f 170944 unzip_6.0-29+deb13u1_ppc64el.deb
Files:
 4df89f529a5f861ac81a62abb9e2f94f 275552 debug optional unzip-dbgsym_6.0-29+deb13u1_ppc64el.deb
 257aaa9d39c2f5ca21d8e954a451f204 5932 utils optional unzip_6.0-29+deb13u1_ppc64el-buildd.buildinfo
 14658c3e0be0e34e933a2eed11c36c73 170944 utils optional unzip_6.0-29+deb13u1_ppc64el.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEETLpi2USYGUNSlYhoNINNphgym2QFAmp69vsACgkQNINNphgy
m2SCXw/+L+ZjfKIuMGH6pHBjZmf7acaxv4Fmqzb4edQS88RC4uYj3NNgxzm8VDil
sda94LP3jEHPVF6slJhP5stYbXjWKn+im8TOcMqzFWt/hj8ulPoyvG+SGtskqBwH
0Mx/KvLJDXewAHipTX7P/hlJqkJb6Y6g0BAZhKOk7P+gEPT8COvCmACJ3jdsAdp4
6jafpARk5S5dqcbpU2hzESnIqIjaTJzhas2tyza7yP3f7Eg4lTlrT7InuJD1ua1Z
Ow0NMo/MboW0B97cJOZrNvOG0znlMmHZzHHFVYduZ8YSQRVJUbKh6cYC1wr+62TW
bHd6+4OkVKqkfLVk901kGYZrlxXSnV4os1cgt9Mw7G4F9KVXHERw6JuLS7QNUDkr
nmxKCgP9UQCIWq9cTI+q8GDL3r4aYEboLeyvoc6aIbFpYAhipnqoMz5m6wMCDTy6
ck9xJ7LZKODXjC2DNnjUXCgLeXlTWntJTE3s+KWjeCWJB8f1Cge+A96+CApFcl0m
vR0K367y/7CqtmSJR9rG79wDj60VToUrP7mp7a2jJ2V9Q5eQT8NmcQ87ZhhRlWVh
53Yy0oP/1Gm99n1ZMeVLgfd1KuAcy+JnRS9Ea5cuqQhgeWHPKUn02qthe7IQ96T9
gv2Ao0UjszYozhcRVAaxROt3YjQ7qMq+HA+ARIGf5tzMm2T+AC8=
=7oOz
-----END PGP SIGNATURE-----