-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 11 Aug 2026 00:10:00 +0200
Source: unzip
Binary: unzip unzip-dbgsym
Architecture: armel
Version: 6.0-29+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Santiago Vila <sanvila@debian.org>
Description:
 unzip      - De-archiver for .zip files
Closes: 1142904 1142905 1142906
Changes:
 unzip (6.0-29+deb13u1) trixie-security; urgency=high
 .
   * Apply upstream fix for CAN-2026-2034440. Closes: #1142904.
     (heap out-of-bounds read in EF_IZUNIX3 extra field handler)
   * Apply upstream fix for CAN-2026-2034443. Closes: #1142905.
     (stack out-of-bounds NUL write in EF_SMARTZIP handler)
   * Apply upstream fix for CAN-2026-2034442. Closes: #1142906.
     (heap buffer overflow WRITE in memextract() STORED path)
Checksums-Sha1:
 3875c8016bc8c32a064ed3fd6f5e73389395ce46 265656 unzip-dbgsym_6.0-29+deb13u1_armel.deb
 e87592f44079362e1cfa232d9efaf4f26c7f6ef8 5785 unzip_6.0-29+deb13u1_armel-buildd.buildinfo
 1dde3c37692c73c78b4289fa04f34192ebc79fd3 158440 unzip_6.0-29+deb13u1_armel.deb
Checksums-Sha256:
 7946a37bef81ab302d71c4bc979da3c6a8915bbe403dca679ae2e0ff7a10d936 265656 unzip-dbgsym_6.0-29+deb13u1_armel.deb
 21f563edcf056c1af309bb164a29181daca0869f3a2229c635ca5a5b5a75d84e 5785 unzip_6.0-29+deb13u1_armel-buildd.buildinfo
 4671e480bdbd5a79f70500216f1b2431d77f9f3b34c881ec55b127009feeb023 158440 unzip_6.0-29+deb13u1_armel.deb
Files:
 ec3ca957ef648e97196ceed5c9b4ea52 265656 debug optional unzip-dbgsym_6.0-29+deb13u1_armel.deb
 9eb4409d3e6503175b11bfb964724ac8 5785 utils optional unzip_6.0-29+deb13u1_armel-buildd.buildinfo
 0c4a4970aeaa7568e1a61669b9503e26 158440 utils optional unzip_6.0-29+deb13u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=Ot01
-----END PGP SIGNATURE-----