-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 11 Aug 2026 00:10:00 +0200
Source: unzip
Binary: unzip unzip-dbgsym
Architecture: i386
Version: 6.0-29+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Santiago Vila <sanvila@debian.org>
Description:
 unzip      - De-archiver for .zip files
Closes: 1142904 1142905 1142906
Changes:
 unzip (6.0-29+deb13u1) trixie-security; urgency=high
 .
   * Apply upstream fix for CAN-2026-2034440. Closes: #1142904.
     (heap out-of-bounds read in EF_IZUNIX3 extra field handler)
   * Apply upstream fix for CAN-2026-2034443. Closes: #1142905.
     (stack out-of-bounds NUL write in EF_SMARTZIP handler)
   * Apply upstream fix for CAN-2026-2034442. Closes: #1142906.
     (heap buffer overflow WRITE in memextract() STORED path)
Checksums-Sha1:
 92e3656e0075e040297e03257396744654256496 255668 unzip-dbgsym_6.0-29+deb13u1_i386.deb
 5096878b7ac0c8ef9245cb726adef7ba6f3aafae 5834 unzip_6.0-29+deb13u1_i386-buildd.buildinfo
 27bae88b20b6ffa3ddf139222e3836eea8cf2f67 173196 unzip_6.0-29+deb13u1_i386.deb
Checksums-Sha256:
 350036380df997aece7d53532d94cea4e200559bd1719dfb7a93631d650da12d 255668 unzip-dbgsym_6.0-29+deb13u1_i386.deb
 588ee86352b4731319922207ec88a09a20bf4a45702bcdf0563e14c25571293c 5834 unzip_6.0-29+deb13u1_i386-buildd.buildinfo
 aeb16fc664f5b0d86f5bd2e8dfc82177fc6f1f1956d49d70b29eaa9346d1fc0a 173196 unzip_6.0-29+deb13u1_i386.deb
Files:
 92d13f8701a410e23a851c72909cc2b1 255668 debug optional unzip-dbgsym_6.0-29+deb13u1_i386.deb
 d5fee4faf5f4a2338870f16bd5cec9eb 5834 utils optional unzip_6.0-29+deb13u1_i386-buildd.buildinfo
 ecc0c8eb3896cb18e58bde795765f778 173196 utils optional unzip_6.0-29+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=Pdl6
-----END PGP SIGNATURE-----