-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 02 Jun 2026 10:04:31 +0200
Source: p7zip
Binary: p7zip p7zip-dbgsym p7zip-full p7zip-full-dbgsym
Architecture: i386
Version: 16.02+really26.01+dfsg-0+deb12u1
Distribution: bookworm
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Sylvain Beucler <beuc@debian.org>
Description:
 p7zip      - 7zr file archiver with high compression ratio
 p7zip-full - 7z and 7za file archivers with high compression ratio
Changes:
 p7zip (16.02+really26.01+dfsg-0+deb12u1) bookworm; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * Bump codebase to 7-Zip (not p7zip) upstream 26.01, fixes:
     CVE-2026-48092: SquashFS Fragment Offset Overflow
     CVE-2026-48095: Heap Buffer Write Overflow
     CVE-2026-48101: UEFI Capsule uninitialized heap memory disclosure
     CVE-2026-48102: UDF Field OOB Read
     CVE-2026-48103: WIM SecurityId OOB read
     CVE-2026-48104: SquashFS BlockToNode uninitialized heap read
     CVE-2026-48111: UEFI DEPEX OOB Read
     CVE-2026-48112: Ar SYMDEF OOB Read
   * Adjust packaging for GitHub-generated upstream tarballs (cleaner
     permissions, Unix-style newlines).
   * Sync new patches from forky:
     - Update 0001-Accept-Debian-build-flags
     - Reject 0008-Use-Wno-error-array-bounds-option-to-some-specific-f
       (not needed, no GCC 16)
   * Selectively import packaging from forky:
     - Update man page for new "-spo{d|c|r}" option.
     - Update debian/rules.
     - Update debian/copyright.
   * Improve NEWS bit.
   * Add p7zip compatibility tests.
   * Improve p7zip version output compatibility.
Checksums-Sha1:
 7665d7ef39b6799e3ce14345a809d1ee775329c4 3107100 p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_i386.deb
 ae4b2c8177381fc02cb1a9cd2c042a8e885691a0 14574548 p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_i386.deb
 ccae71fe64e7d5a5f034ce4ab751f9ee53211820 1591748 p7zip-full_16.02+really26.01+dfsg-0+deb12u1_i386.deb
 45557fc7303a3b6435711873080521fb1c1ba14b 7015 p7zip_16.02+really26.01+dfsg-0+deb12u1_i386-buildd.buildinfo
 d2acc007ca92740916f6d610b77996dd4e68a265 516244 p7zip_16.02+really26.01+dfsg-0+deb12u1_i386.deb
Checksums-Sha256:
 9c8723e8d76d8ef81a8ba9bb2f0ceaadd1986e3f09fb9b412510649e7569a99a 3107100 p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_i386.deb
 1fded69250cf4d54f63e2f179494282983ea757d615254557ab4dc4bc711c26d 14574548 p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_i386.deb
 e87136a66e585b196a51ea70f4d46ca6710d800dcb5f79dfa5664d25dc0261cc 1591748 p7zip-full_16.02+really26.01+dfsg-0+deb12u1_i386.deb
 5df4012d1f32c761293c1c4c3e170efb12da1afa301455ccd3dbe4887f87bba4 7015 p7zip_16.02+really26.01+dfsg-0+deb12u1_i386-buildd.buildinfo
 45b4444695170772d7a1516c865a57cc951102647fd20f6ca3962d58dab0ed91 516244 p7zip_16.02+really26.01+dfsg-0+deb12u1_i386.deb
Files:
 2055e5acf61ebbea013dd3e68fe88044 3107100 debug optional p7zip-dbgsym_16.02+really26.01+dfsg-0+deb12u1_i386.deb
 0d9c5e45ac26d317a262eadeec86d893 14574548 debug optional p7zip-full-dbgsym_16.02+really26.01+dfsg-0+deb12u1_i386.deb
 aeda7a2000c6199d79e461ac9993f7a5 1591748 utils optional p7zip-full_16.02+really26.01+dfsg-0+deb12u1_i386.deb
 85020961dda1c07b40d73994c34e97e7 7015 utils optional p7zip_16.02+really26.01+dfsg-0+deb12u1_i386-buildd.buildinfo
 2c3f1f598458fb2b85008614c9782373 516244 utils optional p7zip_16.02+really26.01+dfsg-0+deb12u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=thWa
-----END PGP SIGNATURE-----
