-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 11 Aug 2026 00:10:00 +0200
Source: unzip
Binary: unzip unzip-dbgsym
Architecture: riscv64
Version: 6.0-29+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-04) <buildd_riscv64-rv-manda-04@buildd.debian.org>
Changed-By: Santiago Vila <sanvila@debian.org>
Description:
 unzip      - De-archiver for .zip files
Closes: 1142904 1142905 1142906
Changes:
 unzip (6.0-29+deb13u1) trixie-security; urgency=high
 .
   * Apply upstream fix for CAN-2026-2034440. Closes: #1142904.
     (heap out-of-bounds read in EF_IZUNIX3 extra field handler)
   * Apply upstream fix for CAN-2026-2034443. Closes: #1142905.
     (stack out-of-bounds NUL write in EF_SMARTZIP handler)
   * Apply upstream fix for CAN-2026-2034442. Closes: #1142906.
     (heap buffer overflow WRITE in memextract() STORED path)
Checksums-Sha1:
 f536f7587067e7d951036cdf9733d83f3ea91e10 267624 unzip-dbgsym_6.0-29+deb13u1_riscv64.deb
 974009d7d9baba4b4521ff4bae5359b8828c2c3d 5877 unzip_6.0-29+deb13u1_riscv64-buildd.buildinfo
 b8777368792411587f47d53a0011a6cd9b2941e2 173084 unzip_6.0-29+deb13u1_riscv64.deb
Checksums-Sha256:
 daa75202dc06efdbcc8801abd91fb65fe9d2c7bb3a590b7326a3c8d454fa29a4 267624 unzip-dbgsym_6.0-29+deb13u1_riscv64.deb
 5661bcf812a2addbedec5a6f1bcc5957921d1937515339da939fd290e5058917 5877 unzip_6.0-29+deb13u1_riscv64-buildd.buildinfo
 4aa7b179dbda1c72055f758e010daa14cb41e23bb4dfdcaaa6426679d5f33b19 173084 unzip_6.0-29+deb13u1_riscv64.deb
Files:
 604fe94d0278dcbbf1a0f6965c5a0826 267624 debug optional unzip-dbgsym_6.0-29+deb13u1_riscv64.deb
 9f6f2c123e2ba6eae100cb51f6f93e2d 5877 utils optional unzip_6.0-29+deb13u1_riscv64-buildd.buildinfo
 7ab1c2508353da8cafc84e73e26f0844 173084 utils optional unzip_6.0-29+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=fIUb
-----END PGP SIGNATURE-----